This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer (raw, json) Hash identifier: 3ehDrmhykAGNshRHQYtWLrQxmO5t0huxbyyMC8kEK3c= Subject key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153F0B8D2748ED6E6FFC66CD08FC78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28876 IP: 81.89.160.0/20 IP: 217.24.48.0/20 IP: 2a00:9d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3f:0b:8d:27:48:ed:6e:6f:fc:66:cd:08:fc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:14:f6:fc:55:fb:b6:43:37:f3:6d:89:a9: fc:fb:85:f5:42:e3:6a:bc:eb:fc:60:ca:da:d0:cb: f1:d7:23:0a:aa:17:47:66:12:a3:2e:85:cf:5b:c8: 87:6f:b1:5c:6e:0a:90:82:48:93:7b:f0:ae:c6:55: a9:9d:5f:95:d5:ee:fe:a4:eb:b2:fe:60:82:88:67: 73:cb:f4:40:26:ba:c8:e3:1a:3d:4a:d4:9f:6c:b7: a7:6b:61:c0:30:fe:54:1e:44:b1:97:4e:1c:55:a0: 46:3c:6e:4f:45:87:cf:6e:e8:80:82:a1:8d:23:fb: d2:2e:4d:f6:03:9b:df:a8:90:50:f8:56:36:78:1c: 09:73:91:4d:18:56:c5:bf:56:87:f8:e8:26:36:85: 15:82:75:4b:07:a3:6f:5b:7f:a9:cc:a1:86:b4:08: 99:a5:ab:15:bb:ab:6f:dd:22:d7:f1:58:59:d1:2b: a5:c9:e0:00:49:a6:80:5c:5f:76:ef:80:9a:db:b4: 5a:cf:ac:60:cf:d2:69:ae:2e:92:cb:99:2d:04:8a: 17:a2:29:15:f1:ad:2c:10:f7:84:87:9d:52:f1:c8: 46:5a:fa:bd:08:1a:1d:83:6e:bc:c5:cb:50:5b:f8: 3a:a9:6c:8a:ff:26:5e:a8:48:08:df:88:30:28:a0: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.160.0/20 217.24.48.0/20 IPv6: 2a00:9d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28876 Signature Algorithm: sha256WithRSAEncryption 2e:53:84:9a:bb:a0:1b:23:9e:4b:e0:f3:f2:64:54:46:d5:92: 2a:ae:fc:06:d6:c9:aa:de:ed:b6:56:79:32:cd:ca:cd:59:26: 6b:70:ab:35:f7:1d:20:b0:eb:fa:c3:d1:6e:90:e3:d2:7a:b4: f8:3c:8a:7e:b5:e5:b5:c5:03:67:bb:d5:c4:eb:bf:8d:a9:c6: ed:bf:37:78:6a:fb:02:30:1f:07:bb:8b:22:04:55:39:36:4f: d5:75:a9:36:c1:49:65:32:50:fa:51:3a:51:6c:1e:e0:11:2d: 35:6d:e7:98:01:c1:3d:39:46:38:5c:4d:a1:c5:8b:44:b9:ea: de:49:8a:d8:fa:3a:a9:b5:71:03:03:23:6f:04:00:d6:52:2d: 78:0e:d6:5c:b3:27:6e:7d:ab:52:eb:70:b0:aa:89:b9:6f:81: db:64:a5:cf:06:2f:be:df:d4:9b:69:f0:b7:57:b3:d9:28:a6: 10:f3:f4:1a:7a:be:1b:9e:33:59:a2:82:0c:90:12:83:42:7d: 63:72:ad:e6:0b:9b:1e:2a:97:32:a0:df:3e:e0:57:9b:01:14: 04:3c:c9:f5:a7:d2:4e:5c:c9:ee:c9:91:95:ed:49:27:d5:e6: 18:50:12:fd:87:38:a4:12:6e:57:8b:d9:52:31:32:3c:eb:21: fb:b0:c2:2b -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/FT8LjSdI7W5v/GbNCPx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZThjYjZkYTM1OGE4ZDJkMjcwYzMwNWY4YjYxZjNjOTkwZDU3NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqIU9vxV+7ZDN/Ntian8+4X1QuNq vOv8YMra0Mvx1yMKqhdHZhKjLoXPW8iHb7FcbgqQgkiTe/CuxlWpnV+V1e7+pOuy /mCCiGdzy/RAJrrI4xo9StSfbLena2HAMP5UHkSxl04cVaBGPG5PRYfPbuiAgqGN I/vSLk32A5vfqJBQ+FY2eBwJc5FNGFbFv1aH+OgmNoUVgnVLB6NvW3+pzKGGtAiZ pasVu6tv3SLX8VhZ0SulyeAASaaAXF9274Ca27Raz6xgz9Jpri6Sy5ktBIoXoikV 8a0sEPeEh51S8chGWvq9CBodg268xctQW/g6qWyK/yZeqEgI34gwKKBq7QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFF6Mtto1io0tJwwwX4th88mQ1XZuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2YwMjY2 MS1iNTkxLTRmNWUtYjM2OS1mNzRhNWYyYmNiNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZjAyNjYx LWI1OTEtNGY1ZS1iMzY5LWY3NGE1ZjJiY2I0Ny8xL1hveTIyaldLalMwbkREQmZp Mkh6eVpEVmRtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUVmgAwQE2RgwMA0EAgACMAcDBQMqAJ2AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnDMMA0GCSqGSIb3DQEBCwUAA4IBAQAuU4Sa u6AbI55L4PPyZFRG1ZIqrvwG1smq3u22VnkyzcrNWSZrcKs19x0gsOv6w9FukOPS erT4PIp+teW1xQNnu9XE67+Nqcbtvzd4avsCMB8Hu4siBFU5Nk/Vdak2wUllMlD6 UTpRbB7gES01beeYAcE9OUY4XE2hxYtEuereSYrY+jqptXEDAyNvBADWUi14DtZc sydufatS63Cwqom5b4HbZKXPBi++39SbafC3V7PZKKYQ8/Qaer4bnjNZooIMkBKD Qn1jcq3mC5seKpcyoN8+4FebARQEPMn1p9JOXMnuyZGV7Ukn1eYYUBL9hzikEm5X i9lSMTI86yH7sMIr -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:48 2026 by rpki-client