This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer File: Xka_H_gWvgukxiFxI0IzCp-ti9o.cer (raw, json) Hash identifier: ZRKUeomCOZU0vOgg7+umlSYsc/kBsR8K02AnZhH67IE= Subject key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3004E0CA30507D02CCCB43AEE046A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47589 IP: 37.231.0.0/16 IP: 94.128.0.0/15 IP: 185.192.236.0/22 IP: 2a03:4780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:4e:0c:a3:05:07:d0:2c:cc:b4:3a:ee:04:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:cb:6f:3e:66:c6:a6:6c:72:9b:bd:93:ff: 41:08:74:cd:24:9b:6b:71:21:be:85:08:b8:3a:9c: 97:d1:5f:6d:6b:19:72:8f:1a:4a:74:3e:af:67:cb: 08:7d:10:8b:28:b8:8a:58:77:12:f5:8f:42:ca:97: 07:6b:b6:7a:02:95:5e:db:c6:15:65:63:c4:58:f3: a3:e9:de:c0:6c:54:70:dd:ce:c7:2a:f7:fb:c3:b4: 01:10:3c:a5:83:20:88:d4:f7:0d:c2:cd:46:3a:9d: 2b:7b:1c:4e:41:fb:14:ec:df:7d:af:a6:d5:e9:60: 16:75:1a:4b:74:3c:9d:09:af:b7:1f:43:d3:7a:02: c9:7b:1d:66:b8:d2:10:ea:8d:2a:c3:40:a8:dd:c2: 86:65:8a:e9:18:ec:0a:5a:6d:0a:a6:61:7e:e9:c2: 93:40:12:61:50:bf:83:27:ca:dc:59:bf:20:03:bd: 37:95:fc:79:ca:c0:1d:92:bd:e8:ce:67:c8:99:21: ee:ba:e4:6b:47:a0:8c:7a:94:e4:c1:50:10:87:45: ae:fb:0d:cd:e5:43:1d:37:aa:0e:31:66:de:f6:c6: ba:68:94:18:9b:df:a6:f0:86:d7:c3:48:ca:18:9e: 0a:8a:f5:ec:31:50:ee:e1:29:9e:92:6d:f1:1f:d6: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.231.0.0/16 94.128.0.0/15 185.192.236.0/22 IPv6: 2a03:4780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47589 Signature Algorithm: sha256WithRSAEncryption 7c:37:95:e7:4d:aa:25:1a:62:3a:b5:30:30:a5:1d:f9:e9:b9: 77:fd:93:f4:04:ee:aa:d3:0d:1f:30:19:fb:b7:c6:a0:cd:d1: db:e5:9f:16:9f:c7:4c:55:a9:d4:6f:ea:cd:71:20:60:39:6a: 7f:be:9c:70:76:f2:f7:1a:f3:b9:a1:ab:08:9f:24:bc:08:7b: 11:4d:c4:2b:6d:63:5f:5a:b3:5e:22:57:d8:80:35:0d:0d:52: 11:34:92:9c:14:39:cc:b8:53:b6:40:80:b9:a6:f7:ea:72:c8: d0:04:ef:7d:96:73:1d:92:13:b1:64:01:28:ce:ed:95:bc:a9: 76:af:18:0a:21:b2:0c:94:6a:70:3c:13:7d:39:28:12:4e:1e: 16:c1:bd:aa:d3:86:5f:56:2c:f3:58:10:f1:82:40:1f:2d:7a: 13:fd:72:66:d7:f6:ab:ed:58:29:4b:66:54:7d:ff:51:62:eb: 0d:29:fe:e2:e4:0f:12:44:b9:a5:ee:89:f4:84:e6:74:55:f4: 0d:d4:8e:77:ef:92:44:98:e1:84:3c:b9:d8:36:12:f2:68:f2: 26:00:ba:5f:25:ee:1b:55:5f:46:b5:48:ee:c9:00:d6:7a:d4: 37:43:4e:39:03:a4:51:e7:15:6e:16:4b:df:fe:29:68:ca:ea: a3:22:db:41 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt4owBODKMFB9AszLQ67gRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTQ2YmYxZmY4MTZiZTBiYTRjNjIxNzEyMzQyMzMwYTlmYWQ4YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFPLbz5mxqZscpu9k/9BCHTNJJtr cSG+hQi4OpyX0V9taxlyjxpKdD6vZ8sIfRCLKLiKWHcS9Y9CypcHa7Z6ApVe28YV ZWPEWPOj6d7AbFRw3c7HKvf7w7QBEDylgyCI1PcNws1GOp0rexxOQfsU7N99r6bV 6WAWdRpLdDydCa+3H0PTegLJex1muNIQ6o0qw0Co3cKGZYrpGOwKWm0KpmF+6cKT QBJhUL+DJ8rcWb8gA703lfx5ysAdkr3ozmfImSHuuuRrR6CMepTkwVAQh0Wu+w3N 5UMdN6oOMWbe9sa6aJQYm9+m8IbXw0jKGJ4KivXsMVDu4Smekm3xH9ZfKQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2M4Y2Y1 Ni1jNDhjLTRlNjItOThlZS1iOGRiMTViNTMxYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYzhjZjU2 LWM0OGMtNGU2Mi05OGVlLWI4ZGIxNWI1MzFhMi8xL1hrYV9IX2dXdmd1a3hpRnhJ MEl6Q3AtdGk5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzAWBAIAATAQAwMAJecDAwFegAMEArnA7DANBAIAAjAHAwUDKgNH gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAueUwDQYJKoZIhvcNAQELBQADggEB AHw3ledNqiUaYjq1MDClHfnpuXf9k/QE7qrTDR8wGfu3xqDN0dvlnxafx0xVqdRv 6s1xIGA5an++nHB28vca87mhqwifJLwIexFNxCttY19as14iV9iANQ0NUhE0kpwU Ocy4U7ZAgLmm9+pyyNAE732Wcx2SE7FkASjO7ZW8qXavGAohsgyUanA8E305KBJO HhbBvarThl9WLPNYEPGCQB8tehP9cmbX9qvtWClLZlR9/1Fi6w0p/uLkDxJEuaXu ifSE5nRV9A3UjnfvkkSY4YQ8udg2EvJo8iYAul8l7htVX0a1SO7JANZ61DdDTjkD pFHnFW4WS9/+KWjK6qMi20E= -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:17 2026 by rpki-client