This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer (raw, json) Hash identifier: RDN+KljXf2zNwS3onn/o8MSnuaxZr/GO7lQM6Pqochs= Subject key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE63C91299B13B252961CD85648A0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196772 IP: 91.212.199.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:63:c9:12:99:b1:3b:25:29:61:cd:85:64:8a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:68:8b:51:03:75:0a:ca:0b:ac:1d:2d:60:0c: 04:f7:91:c9:6d:1e:48:20:e7:e4:44:04:65:2a:75: 7f:37:33:14:24:80:61:aa:7e:7b:26:e1:d3:61:ef: 01:5e:e8:98:16:db:40:46:cf:88:ae:0b:26:0a:09: 5b:83:a8:d1:ba:7c:38:7d:e5:98:d6:df:5d:86:89: 33:29:d6:cc:8a:19:1a:d5:e3:db:01:04:b4:eb:6d: 4c:f4:de:35:9f:0f:48:fe:8c:b6:50:77:27:b7:e6: 89:6e:5f:6b:c1:b4:66:c9:86:3f:5f:30:09:d0:82: 69:30:ad:f8:35:e2:be:42:a2:d8:cd:be:be:7d:55: 78:8d:d0:07:2a:a9:43:60:bb:09:49:6b:83:e9:91: a2:3a:fd:76:78:08:9b:b0:d9:f1:e3:eb:90:6f:5b: 9a:02:7b:85:24:7b:b1:ab:53:b6:44:ba:fa:9c:8b: 80:4d:f6:88:01:b8:c9:3d:5e:8d:44:90:73:63:fc: ee:58:b5:e3:fb:d9:b2:39:59:88:02:a4:e5:b0:ab: 5f:00:8e:d3:ea:1f:41:6f:b4:58:8d:79:5b:93:be: 24:1c:21:9c:d3:52:a9:1c:a4:f0:82:18:28:99:6c: 91:23:ff:e1:48:17:26:c3:1d:27:84:44:a1:45:28: 1c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.199.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196772 Signature Algorithm: sha256WithRSAEncryption 67:e3:f6:0c:f0:2a:03:fc:9d:24:a2:8b:22:c8:ad:68:31:75: dd:cc:8a:b7:f1:8b:06:fa:f6:91:4e:16:be:e5:b8:3f:18:3e: bd:d1:a6:50:a3:10:72:4c:2f:23:b9:07:b4:2e:47:8e:58:94: 28:4f:ad:fb:5c:5c:28:5a:29:3d:10:7f:b4:5f:16:0c:cf:73: 53:9d:89:3b:bc:67:68:59:8d:dd:b4:3e:fc:d4:65:4a:28:40: f5:e4:cd:62:03:41:c4:99:0c:ef:c1:02:99:da:1c:a2:12:58: 73:20:ed:26:18:1a:30:4e:8b:46:1b:6c:ef:a8:cc:ea:c9:cd: b4:25:7b:7c:04:65:a4:0e:94:09:d0:29:79:d7:0a:d5:65:99: 83:65:7c:86:81:7f:92:f0:d7:ef:45:44:7e:f2:db:24:18:a4: bb:08:03:c7:da:52:e6:9a:33:e1:91:a5:40:4d:a7:dd:47:75: 8d:d6:9c:ca:5f:c5:56:4f:1e:72:b6:0c:73:9b:52:69:28:a4: 7d:35:bc:d9:44:11:fb:b1:16:c9:72:f3:33:33:31:ee:e2:6f: d5:52:11:50:3d:bc:78:4d:7e:e1:e2:07:05:d6:ec:9d:85:00: a6:bc:20:0a:22:93:c5:47:21:3e:a3:92:c8:38:f1:c7:ab:08: d0:06:c1:ba -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87mPJEpmxOyUpYc2FZIoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTg2OGIwMmU1MTlkZDdlNjk0YzdhZjFlNzA4YmRkNjYzNjliZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WiLUQN1CsoLrB0tYAwE95HJbR5I IOfkRARlKnV/NzMUJIBhqn57JuHTYe8BXuiYFttARs+IrgsmCglbg6jRunw4feWY 1t9dhokzKdbMihka1ePbAQS0621M9N41nw9I/oy2UHcnt+aJbl9rwbRmyYY/XzAJ 0IJpMK34NeK+QqLYzb6+fVV4jdAHKqlDYLsJSWuD6ZGiOv12eAibsNnx4+uQb1ua AnuFJHuxq1O2RLr6nIuATfaIAbjJPV6NRJBzY/zuWLXj+9myOVmIAqTlsKtfAI7T 6h9Bb7RYjXlbk74kHCGc01KpHKTwghgomWyRI//hSBcmwx0nhEShRSgc4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF6GiwLlGd1+aUx68ecIvdZjab3fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzgwMmUw NS0wZDViLTQ1ODktOTE2Yi05MGMxN2ViNzUxZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvODAyZTA1 LTBkNWItNDU4OS05MTZiLTkwYzE3ZWI3NTFmNC8xL1hvYUxBdVVaM1g1cFRIcng1 d2k5MW1OcHZkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9THMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMApDANBgkqhkiG9w0BAQsFAAOCAQEAZ+P2DPAqA/ydJKKLIsitaDF13cyKt/GL Bvr2kU4WvuW4Pxg+vdGmUKMQckwvI7kHtC5HjliUKE+t+1xcKFopPRB/tF8WDM9z U52JO7xnaFmN3bQ+/NRlSihA9eTNYgNBxJkM78ECmdocohJYcyDtJhgaME6LRhts 76jM6snNtCV7fARlpA6UCdApedcK1WWZg2V8hoF/kvDX70VEfvLbJBikuwgDx9pS 5poz4ZGlQE2n3Ud1jdacyl/FVk8ecrYMc5tSaSikfTW82UQR+7EWyXLzMzMx7uJv 1VIRUD28eE1+4eIHBdbsnYUAprwgCiKTxUchPqOSyDjxx6sI0AbBug== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:21 2026 by rpki-client