This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer (raw, json) Hash identifier: 1Kf/Xp2lEvtIA/sc14iGrQoJWZNxAyeAyKzdjYnkcOI= Subject key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED3CED28DCF2FAC39CC932AA840502 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41159 IP: 194.140.238.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3c:ed:28:dc:f2:fa:c3:9c:c9:32:aa:84:05:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bb:aa:d9:ec:d2:cb:83:f8:dd:36:e5:fa:ef: 5b:42:75:30:aa:2d:dc:44:cd:14:34:0a:3d:b2:b1: 05:d7:f3:71:ce:aa:18:3d:04:9d:9f:ee:86:b8:e4: c5:7d:f1:2d:73:ad:cd:b2:22:97:78:65:99:b5:88: b5:68:7a:3c:6a:60:3f:68:79:01:97:ab:8f:52:55: ce:13:1a:76:78:98:47:96:b7:9b:da:1a:2c:9a:34: fe:bc:fe:dd:d6:7b:d2:db:28:a3:39:0b:e8:3b:5d: 39:c0:6c:14:9c:f7:8b:9a:54:ee:85:70:af:a7:d4: 7a:3b:06:0f:6e:38:03:db:a8:53:12:8a:f7:60:c1: 25:76:eb:ca:5a:0a:02:b1:6a:45:72:d0:a7:b7:fc: a2:bf:9e:00:a1:10:89:1f:02:ae:1b:3a:64:22:56: 21:1c:b5:c7:d3:8a:15:72:8a:ad:cb:50:af:f8:df: e3:83:fc:7a:e1:a0:1a:58:a0:96:d0:01:20:b9:05: 3b:a7:2e:34:ca:3a:7f:5d:34:ec:bd:bf:c7:ac:80: 0f:34:7a:95:bb:eb:8a:1c:dc:3b:79:d2:63:16:f9: d4:b2:c4:d3:0b:c6:09:02:59:a3:30:1c:9b:e3:b9: a4:76:8d:a6:6a:2d:10:47:8d:6f:b8:ea:f1:7f:5e: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.238.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41159 Signature Algorithm: sha256WithRSAEncryption 27:7b:7f:8a:6c:eb:6d:76:cd:63:e6:51:1c:2f:d9:0f:69:75: 2a:bd:e6:11:14:71:d0:ce:e1:a8:0a:73:cb:bb:de:98:b2:3a: 0d:f2:6c:a7:d1:cb:3b:25:ac:be:08:40:1a:1c:62:61:25:1e: 73:75:31:f8:33:5b:3d:0f:8a:c3:da:91:78:04:cb:e9:be:0a: 52:e4:ea:91:1d:4f:c8:5f:be:29:8d:fe:56:ce:9b:af:07:6a: 5d:2f:cd:9c:b9:11:00:2d:f0:1d:2b:f0:0c:f3:93:fd:37:c7: be:6b:44:5c:85:5d:18:5c:d4:e3:b2:15:1f:d2:6c:70:76:06: cd:8f:2b:f6:a3:f2:c1:81:e0:b9:1c:d4:a8:cf:8b:b5:a4:56: c6:5d:93:b9:2a:0b:36:9c:dd:1e:82:0d:93:66:7e:67:03:24: 8f:62:5c:e8:39:a0:99:17:e6:f8:e7:16:0f:b1:92:88:1d:f2: 5a:0c:b5:cf:60:33:07:4b:6e:5f:46:70:b1:43:d8:90:b4:2c: 96:48:5d:38:b5:fd:0e:59:c6:25:74:8c:41:13:9c:12:04:a6: 60:4a:5e:2b:3c:3f:7d:30:0b:37:95:ff:98:12:47:64:4d:2d: 05:4d:a7:64:e7:fc:56:71:6a:ed:93:63:ba:b1:43:b0:68:19: 5e:da:17:48 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87TztKNzy+sOcyTKqhAUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWNhYTQ0N2YwOWJjYjBkZGY4YWZjMTBjNzNlOGU5MWJiZjA4ZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ruq2ezSy4P43Tbl+u9bQnUwqi3c RM0UNAo9srEF1/NxzqoYPQSdn+6GuOTFffEtc63NsiKXeGWZtYi1aHo8amA/aHkB l6uPUlXOExp2eJhHlreb2hosmjT+vP7d1nvS2yijOQvoO105wGwUnPeLmlTuhXCv p9R6OwYPbjgD26hTEor3YMElduvKWgoCsWpFctCnt/yiv54AoRCJHwKuGzpkIlYh HLXH04oVcoqty1Cv+N/jg/x64aAaWKCW0AEguQU7py40yjp/XTTsvb/HrIAPNHqV u+uKHNw7edJjFvnUssTTC8YJAlmjMByb47mkdo2mai0QR41vuOrxf17rEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF7KpEfwm8sN34r8EMc+jpG78I5VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2U0Mjhk YS0wYzE4LTQ0ODktOGVkMi05M2M0NGFjODQxNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvZTQyOGRh LTBjMTgtNDQ4OS04ZWQyLTkzYzQ0YWM4NDE0ZS8xL1hzcWtSX0NieXczZml2d1F4 ejZPa2J2d2psVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwozuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCgxzANBgkqhkiG9w0BAQsFAAOCAQEAJ3t/imzrbXbNY+ZRHC/ZD2l1Kr3mERRx 0M7hqApzy7vemLI6DfJsp9HLOyWsvghAGhxiYSUec3Ux+DNbPQ+Kw9qReATL6b4K UuTqkR1PyF++KY3+Vs6brwdqXS/NnLkRAC3wHSvwDPOT/TfHvmtEXIVdGFzU47IV H9JscHYGzY8r9qPywYHguRzUqM+LtaRWxl2TuSoLNpzdHoINk2Z+ZwMkj2Jc6Dmg mRfm+OcWD7GSiB3yWgy1z2AzB0tuX0ZwsUPYkLQslkhdOLX9DlnGJXSMQROcEgSm YEpeKzw/fTALN5X/mBJHZE0tBU2nZOf8VnFq7ZNjurFDsGgZXtoXSA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:48 2026 by rpki-client