This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer (raw, json) Hash identifier: lBX6uXML+Rb3q4gNpUq58cXksK9lT4pn60zAnnh5LUY= Subject key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E145F797908D80632F7EDB9B4E39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204566 IP: 185.243.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e1:45:f7:97:90:8d:80:63:2f:7e:db:9b:4e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:f5:e7:8b:4a:69:92:56:d0:04:0a:af:09: ed:6d:69:bd:08:88:4e:f0:28:85:f6:6a:56:03:54: 5f:d0:c0:31:c9:45:68:42:a6:32:74:eb:c3:2d:13: 14:69:a5:9c:85:9e:87:ce:b5:1a:c4:22:bc:68:7d: 34:c3:83:79:30:a2:43:03:fd:88:1a:0e:f3:b0:2c: ee:b7:50:e9:47:c9:9f:c0:22:b2:83:d5:a6:97:52: a6:17:ae:15:63:f4:01:da:fb:bc:aa:e7:bf:78:50: 9c:04:34:15:53:87:81:b6:75:9f:45:d5:51:81:bc: 95:d8:c0:3c:de:ea:c2:05:c2:b1:b1:7d:3a:59:d4: 95:c9:fb:64:d9:f6:50:29:c2:d5:a2:67:13:43:27: cc:9e:9b:94:38:a1:19:69:08:fb:98:e2:1a:1a:c4: ce:64:e7:91:b9:d0:51:6b:29:26:f6:7b:48:d1:9e: 94:ce:f9:c4:40:52:8a:72:c9:be:fc:9d:e8:2e:d5: ef:b5:a2:99:f9:cf:88:05:71:35:52:f0:99:8d:0f: e9:cb:2c:a7:4b:5c:d7:e0:36:62:de:d6:87:9b:2f: fd:ff:7b:2a:14:58:2d:ff:c4:1e:4b:d7:e6:da:9c: 1f:8b:ad:96:a4:50:9d:c9:ff:4c:a2:05:cb:88:94: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204566 Signature Algorithm: sha256WithRSAEncryption 95:ab:4c:00:e5:f9:28:1d:d1:80:f0:79:d7:e1:d2:7d:1b:c0: a8:4d:38:cf:2c:9b:d7:eb:48:1a:4b:5b:44:c7:6f:2e:ee:a1: 08:60:a0:39:bf:20:c5:7b:21:79:76:da:e9:a1:64:e2:35:7a: b2:60:e5:ba:d0:9e:1b:96:db:0d:e4:14:e4:87:6b:09:ec:c6: 7d:46:e0:3f:28:86:89:8c:5f:e5:1a:e9:92:c8:bb:49:d1:86: e0:9a:57:09:ec:1a:f2:39:42:bd:95:78:d0:36:75:3d:c4:d1: c6:a0:ec:45:74:20:25:df:f9:95:ec:97:5f:47:20:8e:db:fe: ac:6e:85:cb:1f:24:9d:9e:23:c9:3b:69:f4:c0:db:f1:01:a4: 7c:74:1c:38:45:ae:ee:a9:11:a8:03:22:8b:5d:f0:2b:b3:11: 90:fe:6e:fd:c0:3a:b0:4f:df:15:b7:c4:e2:15:9c:2b:39:47: 5e:41:ef:d1:72:e1:d6:5e:e8:e6:80:6e:f6:92:9c:27:a4:be: fa:fe:18:d6:55:7f:0d:0d:d2:b8:82:91:c5:a5:7f:65:a9:72: 5a:25:0d:fa:1b:56:61:e5:71:e6:fd:92:26:a9:6f:3f:95:20: 85:2f:83:12:70:ee:5c:70:23:97:b8:e7:d4:ce:dc:56:45:4f: 39:3a:14:60 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EOFF95eQjYBjL37bm045MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTZjNjRmYzIwY2UxZDk3MmY1ZTM0NzQzMTkwNDhhMmFjNjU2ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgn154tKaZJW0AQKrwntbWm9CIhO 8CiF9mpWA1Rf0MAxyUVoQqYydOvDLRMUaaWchZ6HzrUaxCK8aH00w4N5MKJDA/2I Gg7zsCzut1DpR8mfwCKyg9Wml1KmF64VY/QB2vu8que/eFCcBDQVU4eBtnWfRdVR gbyV2MA83urCBcKxsX06WdSVyftk2fZQKcLVomcTQyfMnpuUOKEZaQj7mOIaGsTO ZOeRudBRaykm9ntI0Z6UzvnEQFKKcsm+/J3oLtXvtaKZ+c+IBXE1UvCZjQ/pyyyn S1zX4DZi3taHmy/9/3sqFFgt/8QeS9fm2pwfi62WpFCdyf9MogXLiJRESwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF5sZPwgzh2XL140dDGQSKKsZW3xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2YwOTc4 OC05ODY5LTRmMTItOWYxZS1hYzRkZTE2OWFkY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZjA5Nzg4 LTk4NjktNGYxMi05ZjFlLWFjNGRlMTY5YWRjZS8xL1hteGtfQ0RPSFpjdlhqUjBN WkJJb3F4bGJmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufPQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMfFjANBgkqhkiG9w0BAQsFAAOCAQEAlatMAOX5KB3RgPB51+HSfRvAqE04zyyb 1+tIGktbRMdvLu6hCGCgOb8gxXsheXba6aFk4jV6smDlutCeG5bbDeQU5IdrCezG fUbgPyiGiYxf5Rrpksi7SdGG4JpXCewa8jlCvZV40DZ1PcTRxqDsRXQgJd/5leyX X0cgjtv+rG6Fyx8knZ4jyTtp9MDb8QGkfHQcOEWu7qkRqAMii13wK7MRkP5u/cA6 sE/fFbfE4hWcKzlHXkHv0XLh1l7o5oBu9pKcJ6S++v4Y1lV/DQ3SuIKRxaV/Zaly WiUN+htWYeVx5v2SJqlvP5UghS+DEnDuXHAjl7jn1M7cVkVPOToUYA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:32 2026 by rpki-client