This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer (raw, json) Hash identifier: jVKIp5/4EOpyIZDO4tsx/fzD1FV8e642Vq72WxgexUA= Subject key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38FF085E8EB021DD5E88BA735102CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35038 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ff:08:5e:8e:b0:21:dd:5e:88:ba:73:51:02:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e5214158af310ffa9c315298343f4c3e66aec9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:60:b9:af:e0:d3:e2:4c:12:65:90:e8:c5: d7:04:23:b0:2d:cb:13:56:41:9d:39:c4:04:85:94: e8:42:44:58:94:68:7e:c5:59:97:9a:af:26:b9:a8: ab:09:dd:ee:d7:47:0d:d1:f4:bb:d7:e6:7a:27:a4: 86:2a:d2:a6:c6:5a:d3:c3:46:7a:e6:4c:f4:20:a4: cb:5f:d4:80:d1:f5:81:8b:46:9d:db:89:c6:b0:4e: 0f:f8:6c:94:ac:1a:17:67:9e:06:bf:e9:48:e4:b4: 08:31:25:4e:ba:19:65:64:f7:4c:c0:a3:59:ee:1c: 55:e5:1f:0b:50:61:6f:95:5d:2e:7e:50:63:4d:a9: 70:e7:9b:f1:ba:eb:89:7e:d6:b3:93:c9:cd:58:bb: a2:3d:ca:c9:b1:dc:15:44:9c:37:e3:fe:90:2e:7a: ed:44:22:0f:58:ab:79:1e:d7:2c:32:08:c3:d4:69: 32:89:2c:53:df:28:dd:34:b2:93:e2:49:cc:cc:29: e9:db:06:75:8e:96:f4:a7:a2:5c:33:e6:aa:06:1b: a5:1d:37:22:94:c4:bf:53:af:0a:73:95:8f:d4:fe: 33:22:b7:1e:c2:73:12:cc:a3:e7:4f:06:b7:f2:e6: 77:3c:55:fe:b9:48:44:9c:4f:d1:e6:55:00:bc:81: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 35038 Signature Algorithm: sha256WithRSAEncryption 94:2a:ab:72:5c:fa:c1:91:b2:86:8a:ac:9f:c2:25:34:a9:72: d1:e2:21:5e:01:3c:72:cf:5d:41:53:79:8a:d2:74:07:c7:46: 29:ad:70:bd:f4:4b:05:53:aa:ff:8b:38:07:6a:b7:3a:d7:de: 83:a2:c5:f3:37:14:28:1b:3f:fe:57:c6:11:e6:10:bc:3e:4d: 6b:7f:7c:64:b2:7e:52:e2:27:6c:ca:57:8b:a3:73:81:88:33: 94:ea:80:b7:33:a2:35:bb:f5:b1:20:64:8a:5b:8b:4a:86:02: 69:9f:c5:e3:1f:4c:38:56:7c:ef:fa:2b:18:28:28:40:cc:ce: 0e:47:24:cf:35:ab:5e:61:9e:e9:1d:57:9c:8c:21:14:fd:db: 32:11:95:10:92:20:b4:1b:b0:06:79:32:fb:fd:1e:98:cd:46: cb:18:64:cb:0f:f4:68:a7:fa:c7:8f:cb:4b:e3:27:cc:31:ed: 6c:75:d6:77:93:55:d4:01:63:57:5e:b5:5a:7a:63:83:60:c8: 77:07:38:b3:7e:94:04:9e:aa:59:a2:50:66:1d:a0:5c:34:b7: f1:2e:e8:0d:dc:21:18:69:06:34:64:3a:7e:09:df:c6:c3:9a: ca:74:45:4f:7d:ac:f3:03:12:ea:4a:0c:ee:8e:0f:ff:85:56: 96:fc:d4:bf -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OP8IXo6wId1eiLpzUQLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTUyMTQxNThhZjMxMGZmYTljMzE1Mjk4MzQzZjRjM2U2NmFlYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIxgua/g0+JMEmWQ6MXXBCOwLcsT VkGdOcQEhZToQkRYlGh+xVmXmq8muairCd3u10cN0fS71+Z6J6SGKtKmxlrTw0Z6 5kz0IKTLX9SA0fWBi0ad24nGsE4P+GyUrBoXZ54Gv+lI5LQIMSVOuhllZPdMwKNZ 7hxV5R8LUGFvlV0uflBjTalw55vxuuuJftazk8nNWLuiPcrJsdwVRJw34/6QLnrt RCIPWKt5HtcsMgjD1GkyiSxT3yjdNLKT4knMzCnp2wZ1jpb0p6JcM+aqBhulHTci lMS/U68Kc5WP1P4zIrcewnMSzKPnTwa38uZ3PFX+uUhEnE/R5lUAvIHEiwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFF5SFBWK8xD/qcMVKYND9MPmauyaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2E5OTJm ZS1jMWNmLTRkZTgtYmJiMC1mOTZmNmY3Njk4MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYTk5MmZl LWMxY2YtNGRlOC1iYmIwLWY5NmY2Zjc2OTgzOC8xL1hsSVVGWXJ6RVAtcHd4VXBn MFAwdy1acTdKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCI3jANBgkqhkiG9w0BAQsFAAOCAQEAlCqrclz6wZGy hoqsn8IlNKly0eIhXgE8cs9dQVN5itJ0B8dGKa1wvfRLBVOq/4s4B2q3Otfeg6LF 8zcUKBs//lfGEeYQvD5Na398ZLJ+UuInbMpXi6NzgYgzlOqAtzOiNbv1sSBkiluL SoYCaZ/F4x9MOFZ87/orGCgoQMzODkckzzWrXmGe6R1XnIwhFP3bMhGVEJIgtBuw Bnky+/0emM1Gyxhkyw/0aKf6x4/LS+MnzDHtbHXWd5NV1AFjV161Wnpjg2DIdwc4 s36UBJ6qWaJQZh2gXDS38S7oDdwhGGkGNGQ6fgnfxsOaynRFT32s8wMS6koM7o4P /4VWlvzUvw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:19 2026 by rpki-client