This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer File: XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer (raw, json) Hash identifier: J/t+mnBU0WnctlszAKqhglXdI1gf+2FOUlYtnVYZZjY= Subject key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA97547251C8F3FD010C6AF3E72E77 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34372 IP: 80.70.176.0/20 IP: 185.192.76.0/22 IP: 2a02:450::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:97:54:72:51:c8:f3:fd:01:0c:6a:f3:e7:2e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:ca:09:9f:62:00:af:24:f7:26:54:9c:ce: c4:89:62:45:b8:a8:6a:24:f3:0e:de:81:c2:94:86: be:e8:5f:dd:e9:52:37:f1:5a:00:2d:16:fd:11:c6: 34:db:d8:1b:bf:03:80:5f:61:83:96:15:fa:e8:50: 4c:33:7a:32:f1:7c:f8:21:68:75:94:56:fd:7e:6a: bb:76:57:70:0f:5a:09:cb:b0:71:ac:23:f4:33:f9: 0f:2d:c4:2c:8f:05:98:f4:6e:22:cb:7b:df:83:99: 84:9f:d8:a7:64:16:b7:1e:87:20:e2:cb:e9:ca:f4: d0:3c:69:a5:3c:e8:29:3c:35:5a:d5:1f:f5:c5:65: ec:93:bd:f5:b6:33:5b:3a:91:a5:2c:0c:5a:47:fa: 66:f4:a2:8a:69:58:0d:2e:32:05:a1:5e:74:ec:61: 8b:9b:66:48:b0:aa:de:df:9d:84:75:92:c9:57:11: e9:a8:16:4d:04:3f:21:68:4a:e4:f8:83:ad:0e:a6: 29:cb:e5:14:8c:95:ea:2b:38:c5:a7:c1:c3:b7:74: e2:b6:ba:24:71:8c:d3:99:97:18:5a:fc:78:8d:32: a8:a0:f8:08:8e:5f:4a:31:6c:d9:58:f1:99:b6:f3: ed:fb:d8:37:c9:90:ed:0d:9f:d8:3c:85:98:4e:cf: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.176.0/20 185.192.76.0/22 IPv6: 2a02:450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34372 Signature Algorithm: sha256WithRSAEncryption 2f:31:40:4d:18:62:ea:d2:dc:21:da:b3:23:ec:cb:c7:fe:11: e0:7d:a9:14:2c:99:d4:7c:89:cb:a9:d2:dd:0f:7d:0f:3a:1b: e5:da:46:6d:27:4b:40:b9:fd:cf:27:bb:70:b1:7d:72:88:05: 68:da:0d:e2:cf:4f:12:c3:a2:35:4f:6a:ac:c8:4b:5a:3b:90: 6a:e9:66:bc:74:b1:96:c4:35:64:ec:5a:02:9a:bf:fb:1c:75: 65:12:7a:7f:e8:91:5e:93:f0:ab:25:26:72:9a:83:fd:9f:bc: 2a:f4:33:88:26:59:34:12:41:7a:a4:6b:ac:4a:e2:46:c7:d9: e7:77:3c:82:77:17:b5:7d:57:72:5c:88:20:27:da:3d:54:11: af:eb:2e:84:28:28:9e:53:a3:c6:54:c2:1d:12:bc:b4:dc:b6: 79:ee:a6:12:f8:ee:f5:ed:ee:b1:16:22:6a:0d:c9:b5:ff:25: 89:7e:b8:4d:01:24:a7:69:dd:15:06:dc:54:27:51:ec:c9:d8: e5:b4:37:3a:f5:88:e5:3c:cf:67:52:d1:dd:c9:34:06:57:1e: 1e:f1:df:d0:3e:35:16:9d:6c:18:5c:2c:d1:c0:9c:db:8d:d6: 0b:4c:a8:6d:4c:f4:29:93:23:c8:df:25:c3:78:66:2d:5c:3a: 4c:c7:72:1e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9ypdUclHI8/0BDGrz5y53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTNiYjEzYWUxN2M5ZTU1NGU5Y2VhZmNmZWI0OGI0MTQxN2RhN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuzKCZ9iAK8k9yZUnM7EiWJFuKhq JPMO3oHClIa+6F/d6VI38VoALRb9EcY029gbvwOAX2GDlhX66FBMM3oy8Xz4IWh1 lFb9fmq7dldwD1oJy7BxrCP0M/kPLcQsjwWY9G4iy3vfg5mEn9inZBa3Hocg4svp yvTQPGmlPOgpPDVa1R/1xWXsk731tjNbOpGlLAxaR/pm9KKKaVgNLjIFoV507GGL m2ZIsKre352EdZLJVxHpqBZNBD8haErk+IOtDqYpy+UUjJXqKzjFp8HDt3Titrok cYzTmZcYWvx4jTKooPgIjl9KMWzZWPGZtvPt+9g3yZDtDZ/YPIWYTs8AowIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFF47sTrhfJ5VTpzq/P60i0FBfafqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2MwNjdm ZS01NjYwLTRhOTctOGQzZi0zNTIwMDRiYzIyODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYzA2N2Zl LTU2NjAtNGE5Ny04ZDNmLTM1MjAwNGJjMjI4Mi8xL1hqdXhPdUY4bmxWT25Pcjhf clNMUVVGOXAtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUEawAwQCucBMMA0EAgACMAcDBQAqAgRQMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCGRDANBgkqhkiG9w0BAQsFAAOCAQEALzFA TRhi6tLcIdqzI+zLx/4R4H2pFCyZ1HyJy6nS3Q99Dzob5dpGbSdLQLn9zye7cLF9 cogFaNoN4s9PEsOiNU9qrMhLWjuQaulmvHSxlsQ1ZOxaApq/+xx1ZRJ6f+iRXpPw qyUmcpqD/Z+8KvQziCZZNBJBeqRrrEriRsfZ53c8gncXtX1XclyIICfaPVQRr+su hCgonlOjxlTCHRK8tNy2ee6mEvju9e3usRYiag3Jtf8liX64TQEkp2ndFQbcVCdR 7MnY5bQ3OvWI5TzPZ1LR3ck0BlceHvHf0D41Fp1sGFws0cCc243WC0yobUz0KZMj yN8lw3hmLVw6TMdyHg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:16 2026 by rpki-client