This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer (raw, json) Hash identifier: +NrapIir5YBGf5sGGHIzgJ12GAV/xDsPK8LdR36DevA= Subject key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F835E78B13AD6C4740BD84268B415DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205032 IP: 185.100.164.0/22 IP: 2a0d:d0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5e:78:b1:3a:d6:c4:74:0b:d8:42:68:b4:15:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e4f1a32a37e083900aba561708e52ab234e3a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:f2:f9:f3:41:93:3c:64:7f:d5:e8:eb:6a: 7a:50:41:db:5f:c0:a1:93:7f:83:f5:34:6b:55:2b: 99:a0:9f:fe:2f:32:9f:aa:52:7d:a0:8c:13:10:43: ec:19:06:fd:07:c5:32:63:13:05:76:38:f8:d3:ba: 68:ce:8a:36:15:7e:f1:72:b0:af:01:ae:49:2e:9a: 0f:8d:12:91:e5:ae:44:c3:34:e5:57:dd:86:78:e4: 5d:06:fa:44:f8:3d:d2:25:44:87:dc:72:76:ea:81: df:c9:11:e4:4f:16:00:da:61:1c:a2:3a:cb:3f:17: f1:95:cf:0f:dd:4f:75:e4:14:ef:65:cf:e2:16:63: eb:59:bd:57:0e:67:a9:89:48:43:61:a7:ec:45:8f: a3:10:5c:22:ad:bc:74:9d:1c:60:11:c2:71:bd:dc: db:b7:74:df:bb:da:e5:aa:7f:51:bc:2d:2e:78:ba: 5b:db:dd:7e:78:d1:cd:bc:39:27:09:e9:fc:55:d1: e1:cf:f3:c3:78:7a:89:c1:77:85:62:f7:17:07:11: 60:fb:17:20:f7:88:1d:6f:d5:a3:2f:61:2f:ab:5e: 97:a1:58:97:f4:3a:c4:45:9d:ce:ac:24:aa:09:2e: c2:29:38:c4:33:56:40:aa:52:07:84:4a:1d:da:eb: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.164.0/22 IPv6: 2a0d:d0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205032 Signature Algorithm: sha256WithRSAEncryption 88:f6:67:84:b3:f3:6f:38:c2:04:e7:f3:64:59:b0:fd:70:2f: 30:69:fa:0b:3c:77:e5:71:4d:d3:9b:01:8d:28:70:e9:b1:ed: 31:b5:77:95:58:c7:3c:8e:ce:5d:20:28:4f:81:e7:70:d3:7e: 52:3c:43:c7:77:da:cc:c4:00:c3:2c:69:fd:92:94:38:37:59: 8e:1f:98:5e:0c:7c:e6:82:7e:23:19:d0:be:6e:d4:d7:ff:b4: 25:56:6b:26:91:aa:8a:f9:64:ff:5c:f2:bd:0b:68:55:a3:f2: 94:4a:92:ed:59:25:e2:21:e7:e7:16:42:b1:74:d4:83:5a:a7: 86:39:54:57:08:c2:95:e6:17:2e:04:c3:ee:77:df:52:e3:a1: 69:d7:f3:aa:44:05:60:05:38:99:0f:45:44:1c:02:04:77:8b: c7:75:f5:a9:ec:7a:d0:9d:08:72:43:61:ed:22:7b:58:58:68: 85:80:b2:a8:2b:ae:f4:e4:b2:ef:c6:ac:ba:70:3f:39:f3:d8: 29:d3:6d:2a:47:99:0b:5c:74:a5:d1:88:89:fc:f9:79:2c:da: 48:00:6c:96:9d:5c:f1:7e:4b:b6:38:0f:94:05:ce:da:44:61: 42:a3:e6:42:40:59:7f:f4:a4:f8:f4:f3:40:7a:eb:22:14:ea: 33:4f:1f:ac -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/g154sTrWxHQL2EJotBXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTRmMWEzMmEzN2UwODM5MDBhYmE1NjE3MDhlNTJhYjIzNGUzYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMny+fNBkzxkf9Xo62p6UEHbX8Ch k3+D9TRrVSuZoJ/+LzKfqlJ9oIwTEEPsGQb9B8UyYxMFdjj407pozoo2FX7xcrCv Aa5JLpoPjRKR5a5EwzTlV92GeORdBvpE+D3SJUSH3HJ26oHfyRHkTxYA2mEcojrL Pxfxlc8P3U915BTvZc/iFmPrWb1XDmepiUhDYafsRY+jEFwirbx0nRxgEcJxvdzb t3Tfu9rlqn9RvC0ueLpb291+eNHNvDknCen8VdHhz/PDeHqJwXeFYvcXBxFg+xcg 94gdb9WjL2Evq16XoViX9DrERZ3OrCSqCS7CKTjEM1ZAqlIHhEod2utV3QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF5PGjKjfgg5AKulYXCOUqsjTjo4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzNlZjky MS0yOWVkLTQwY2YtYjQ1NC00YzJhY2I3ODMwOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvM2VmOTIx LTI5ZWQtNDBjZi1iNDU0LTRjMmFjYjc4MzA5ZS8xL1hrOGFNcU4tQ0RrQXE2Vmhj STVTcXlOT09qZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWSkMA0EAgACMAcDBQMqDdDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMg6DANBgkqhkiG9w0BAQsFAAOCAQEAiPZnhLPzbzjC BOfzZFmw/XAvMGn6Czx35XFN05sBjShw6bHtMbV3lVjHPI7OXSAoT4HncNN+UjxD x3fazMQAwyxp/ZKUODdZjh+YXgx85oJ+IxnQvm7U1/+0JVZrJpGqivlk/1zyvQto VaPylEqS7Vkl4iHn5xZCsXTUg1qnhjlUVwjCleYXLgTD7nffUuOhadfzqkQFYAU4 mQ9FRBwCBHeLx3X1qex60J0IckNh7SJ7WFhohYCyqCuu9OSy78asunA/OfPYKdNt KkeZC1x0pdGIifz5eSzaSABslp1c8X5LtjgPlAXO2kRhQqPmQkBZf/Sk+PTzQHrr IhTqM08frA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:37 2026 by rpki-client