This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer File: XpNr6hsMOiCKuifYsQsnXkdN3iw.cer (raw, json) Hash identifier: PzWhz98bvev/rrcfdOQ5MIj81Bg+eWeE7CC2roprhgg= Subject key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0720D9A8B957BD1E3A7E4025ED5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200544 IP: 159.22.0.0/16 IP: 2a07:ad00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:07:20:d9:a8:b9:57:bd:1e:3a:7e:40:25:ed:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:be:59:46:e6:21:99:d3:3e:08:fb:c9:eb: ce:83:3b:b2:a7:8c:63:62:16:c3:c5:cf:ce:85:44: ea:5b:1c:6c:a1:e8:74:25:5f:95:2c:ef:c9:a1:13: 59:23:56:06:30:1f:e2:85:4d:9e:21:d1:d4:21:47: 29:a7:44:9a:39:3d:c6:f0:58:58:74:cf:40:8c:1d: 32:c2:44:b6:c5:59:18:6d:90:53:af:07:af:bb:25: 3b:02:2a:e2:47:31:3b:8c:d8:f3:d1:75:24:94:87: 5a:18:05:3c:52:57:8b:be:f1:b2:86:94:73:e8:4b: eb:b9:23:87:99:98:2a:d5:df:ee:cc:81:72:d9:8d: bc:91:82:44:c3:8d:e3:8e:00:c8:8c:a9:f5:f0:11: 4a:2b:fd:4a:14:13:3f:5d:bb:d2:80:0c:f2:b4:f4: 1f:e3:55:b1:fd:3c:da:74:ae:ec:0c:8b:11:23:32: d1:d4:e2:f1:6a:b4:f0:ec:53:5a:b4:23:64:58:22: ed:5e:94:15:c3:51:6b:ff:94:c3:b4:0d:a4:e5:dc: bd:d5:68:fb:0b:e2:d2:5b:d5:61:9f:13:38:2a:99: ab:2a:45:e9:42:ad:02:09:86:f1:c1:b1:5a:cf:9d: 9e:9c:e7:f1:8c:15:91:24:89:b0:8f:3f:e9:a1:3f: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.22.0.0/16 IPv6: 2a07:ad00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200544 Signature Algorithm: sha256WithRSAEncryption 16:71:a7:38:ba:58:0d:d5:22:ca:df:bb:a3:5f:1a:54:ba:a7: 66:0e:5b:3c:cb:9d:74:25:d5:35:0c:b9:31:3b:6a:50:52:d7: b3:d9:60:fd:30:7d:f8:9e:3a:fd:60:47:d4:1f:97:6f:b6:28: 96:31:80:7e:2b:ce:c4:13:d5:77:6f:66:34:f3:73:a3:56:90: a0:42:02:f9:66:de:f4:4c:9c:af:93:c9:5b:c0:6c:6a:31:4b: 67:69:8f:c3:c1:ba:37:20:9e:56:39:a1:71:55:bb:e0:68:a3: cd:9f:83:b9:67:fe:1c:57:eb:1b:e6:91:fc:17:05:d0:ac:dc: 40:30:e3:84:9d:28:f6:70:5e:d7:3a:fc:f4:5e:04:6a:94:29: 61:36:f2:d5:40:9b:93:9f:cb:d0:c4:c9:37:2a:c3:8d:e9:15: e7:b3:cc:4e:e1:d1:ca:c1:ba:72:ad:22:d9:a9:23:ca:a2:e8: 8d:38:0d:21:e4:52:29:bc:dc:97:1d:12:c4:1a:88:4c:1d:62: b5:b6:a7:64:9f:84:aa:66:5b:6c:7a:d0:19:63:a6:78:b7:96: 95:31:7a:df:5c:fd:b5:f6:49:1a:b9:ad:31:60:96:9f:3c:93: ad:97:7f:8a:1c:d5:11:87:ff:d5:90:ca:3d:a3:3f:83:c6:cf: 13:27:ce:40 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt5fwcg2ai5V70eOn5AJe1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTkzNmJlYTFiMGMzYTIwOGFiYTI3ZDhiMTBiMjc1ZTQ3NGRkZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG++WUbmIZnTPgj7yevOgzuyp4xj YhbDxc/OhUTqWxxsoeh0JV+VLO/JoRNZI1YGMB/ihU2eIdHUIUcpp0SaOT3G8FhY dM9AjB0ywkS2xVkYbZBTrwevuyU7AiriRzE7jNjz0XUklIdaGAU8UleLvvGyhpRz 6EvruSOHmZgq1d/uzIFy2Y28kYJEw43jjgDIjKn18BFKK/1KFBM/XbvSgAzytPQf 41Wx/TzadK7sDIsRIzLR1OLxarTw7FNatCNkWCLtXpQVw1Fr/5TDtA2k5dy91Wj7 C+LSW9VhnxM4KpmrKkXpQq0CCYbxwbFaz52enOfxjBWRJImwjz/poT8QOQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFF6Ta+obDDogiron2LELJ15HTd4sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzMyODc2 Yi1hODJiLTQ3MDQtYmE2Ny05ODQ3N2E4NjUzYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvMzI4NzZi LWE4MmItNDcwNC1iYTY3LTk4NDc3YTg2NTNjNy8xL1hwTnI2aHNNT2lDS3VpZllz UXNuWGtkTjNpdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDALBAIAATAFAwMAnxYwDQQCAAIwBwMFAyoHrQAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAw9gMA0GCSqGSIb3DQEBCwUAA4IBAQAWcac4ulgN1SLK 37ujXxpUuqdmDls8y510JdU1DLkxO2pQUtez2WD9MH34njr9YEfUH5dvtiiWMYB+ K87EE9V3b2Y083OjVpCgQgL5Zt70TJyvk8lbwGxqMUtnaY/Dwbo3IJ5WOaFxVbvg aKPNn4O5Z/4cV+sb5pH8FwXQrNxAMOOEnSj2cF7XOvz0XgRqlClhNvLVQJuTn8vQ xMk3KsON6RXns8xO4dHKwbpyrSLZqSPKouiNOA0h5FIpvNyXHRLEGohMHWK1tqdk n4SqZltsetAZY6Z4t5aVMXrfXP219kkaua0xYJafPJOtl3+KHNURh//VkMo9oz+D xs8TJ85A -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:21 2026 by rpki-client