This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer (raw, json) Hash identifier: 4hgZWLEHN4kORLbR929g9vx1Ae9/sSp2yRVKqsnxVWA= Subject key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37FCD9D8BE7701E7EC491812278786 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34942 IP: 185.100.36.0/22 IP: 193.189.139.0/24 IP: 2a06:340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fc:d9:d8:be:77:01:e7:ec:49:18:12:27:87:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:4c:a5:37:71:75:b2:1c:d2:f1:9d:d6:08: 33:22:9f:f7:96:66:df:0a:cd:f1:0a:03:b6:8e:aa: bd:43:57:60:46:33:2c:86:53:74:6e:b5:45:39:bb: 8b:a7:fe:3e:df:b4:48:65:95:47:3a:1d:a2:5f:01: 86:d9:10:bb:fc:98:04:64:45:76:4f:9c:1f:9e:40: 5e:8f:a4:0a:a9:b4:aa:46:e4:bb:c1:27:d8:fa:22: 68:c5:03:38:e7:fa:9b:d0:9d:a8:c1:0c:36:a8:04: 6b:f2:8f:56:80:3f:be:07:41:28:0a:b4:18:cf:7c: 30:40:80:56:99:4d:f0:b5:a4:3d:2d:4f:5b:0e:3c: 1f:ec:c6:0b:e0:3e:ac:8d:39:15:05:ed:d4:63:50: 5c:55:b3:c0:d9:ef:bb:cd:67:a7:22:b3:29:04:9a: e6:2d:bc:22:74:ad:27:d9:58:d8:a1:51:34:37:b5: 2c:46:3b:a3:2a:75:21:60:3e:fd:16:77:7a:25:ea: a1:5f:ea:e2:33:65:d2:32:bc:ca:9e:0c:13:04:5f: 07:11:90:98:bb:d8:fb:06:97:95:ed:f0:60:db:be: db:7b:bb:de:87:f1:76:df:4d:71:73:7c:d6:83:8a: 0e:1a:cd:2e:9e:f5:37:7e:9e:a4:17:13:cf:52:89: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.36.0/22 193.189.139.0/24 IPv6: 2a06:340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34942 Signature Algorithm: sha256WithRSAEncryption 88:3d:04:be:bd:21:e0:25:39:c9:ab:7a:72:3c:54:7b:6b:4c: 0a:77:52:ba:dc:66:5f:11:80:3f:59:6d:cf:7f:60:ea:a0:a6: 13:8a:64:5a:df:a0:00:48:01:7f:b8:3d:2d:b5:c3:33:23:fd: a3:10:39:8f:b0:b1:67:64:2c:59:b3:a2:96:98:ac:f8:4d:97: 96:14:b2:4f:9c:77:9d:6f:03:32:18:be:ad:43:ca:dc:b7:06: ff:68:e5:ac:56:cc:bd:f8:c0:91:4a:fb:3b:fa:1a:35:1a:51: 2d:46:a4:7b:0e:00:a3:71:0d:2e:3d:a3:fc:71:d5:0b:92:e7: 11:a9:3e:99:65:f8:66:32:78:63:ea:ee:35:2e:1d:26:28:82: 69:31:c7:b7:4f:c5:14:60:cc:13:c8:38:f2:3c:58:21:04:ce: df:63:a3:e2:69:df:95:9e:df:6e:29:1a:62:21:a5:da:b1:f2: b1:93:da:85:07:8f:75:ec:61:42:27:47:83:de:35:d8:7d:72: 1a:9e:3d:d7:a3:31:f0:d5:43:22:f8:f5:e4:d3:3b:1a:48:b9: 3b:aa:61:0c:07:7e:4a:14:e4:ff:cd:05:3d:23:5e:81:9d:dc: 40:52:22:fe:60:ff:db:69:e1:c2:6e:8c:b2:eb:f8:f8:c7:68: b9:24:5b:9b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+N/zZ2L53AefsSRgSJ4eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTM1ZWQwNDNjOGRlMTUxYmViZGMwOWRmY2JmZmNjN2RjNzc1OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzJMpTdxdbIc0vGd1ggzIp/3lmbf Cs3xCgO2jqq9Q1dgRjMshlN0brVFObuLp/4+37RIZZVHOh2iXwGG2RC7/JgEZEV2 T5wfnkBej6QKqbSqRuS7wSfY+iJoxQM45/qb0J2owQw2qARr8o9WgD++B0EoCrQY z3wwQIBWmU3wtaQ9LU9bDjwf7MYL4D6sjTkVBe3UY1BcVbPA2e+7zWenIrMpBJrm LbwidK0n2VjYoVE0N7UsRjujKnUhYD79Fnd6JeqhX+riM2XSMrzKngwTBF8HEZCY u9j7BpeV7fBg277be7veh/F2301xc3zWg4oOGs0unvU3fp6kFxPPUon0IQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFF417QQ8jeFRvr3Anfy//Mfcd1nHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2UxN2Zh Mi03ODY2LTRmYTEtOTcyYi0xNzc2ODEzZTcyMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTE3ZmEy LTc4NjYtNGZhMS05NzJiLTE3NzY4MTNlNzIyNC8xL1hqWHRCRHlONFZHLXZjQ2Rf TF84eDl4M1djYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuWQkAwQAwb2LMA0EAgACMAcDBQMqBgNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCIfjANBgkqhkiG9w0BAQsFAAOCAQEAiD0E vr0h4CU5yat6cjxUe2tMCndSutxmXxGAP1ltz39g6qCmE4pkWt+gAEgBf7g9LbXD MyP9oxA5j7CxZ2QsWbOilpis+E2XlhSyT5x3nW8DMhi+rUPK3LcG/2jlrFbMvfjA kUr7O/oaNRpRLUakew4Ao3ENLj2j/HHVC5LnEak+mWX4ZjJ4Y+ruNS4dJiiCaTHH t0/FFGDME8g48jxYIQTO32Oj4mnflZ7fbikaYiGl2rHysZPahQePdexhQidHg941 2H1yGp4916Mx8NVDIvj15NM7Gki5O6phDAd+ShTk/80FPSNegZ3cQFIi/mD/22nh wm6Msuv4+MdouSRbmw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:00 2026 by rpki-client