This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer (raw, json) Hash identifier: eycrngbB9qC8ykgnjhK1veys73oVwCAwGwRx+FNTRS8= Subject key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E391E18817DCD97D7F2460CD23AC8BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12620 IP: 62.48.96.0/19 IP: 84.55.192.0/18 IP: 176.46.192.0/18 IP: 185.179.16.0/22 IP: 195.190.160.0/19 IP: 2001:4b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1e:18:81:7d:cd:97:d7:f2:46:0c:d2:3a:c8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5efccd7d7e308f81807051f8d487e9d829c24868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:ee:e8:fe:3c:8f:b7:09:8a:a1:cc:64:65: 32:16:d8:40:8a:a8:eb:0e:85:ad:53:8a:15:16:b9: bf:6b:7d:c2:43:86:89:2d:c7:5c:df:cf:ed:20:60: 34:8c:52:c1:f1:41:5e:2d:dd:a3:3e:a9:77:03:90: 0f:da:6b:e8:95:91:b5:46:e6:a2:eb:00:3d:a4:f2: ac:45:3a:67:89:8b:40:6a:03:13:6a:34:5e:8b:23: 8e:79:4a:3d:b1:69:c3:d8:9b:42:d2:39:e6:45:a8: f9:5d:bd:30:4c:e5:7d:85:4e:f4:20:01:c5:2b:49: 49:89:44:a2:86:54:e1:de:b4:11:e5:e5:e3:d3:d0: d9:31:a0:ee:30:fc:3e:ce:9a:e0:51:1a:79:11:81: 06:b0:24:6f:5c:df:57:68:76:58:cf:c3:cc:bd:ea: 9d:5f:d3:2c:d4:8f:5b:af:69:e2:f5:b3:fb:67:a9: a1:7b:2c:46:7a:fc:d3:08:2d:08:f8:b0:ba:9d:60: b8:8f:79:34:f7:bc:a8:dc:91:ba:99:78:34:f1:d7: 7d:75:d8:da:86:10:40:0f:f6:8a:cc:6f:47:ad:84: a7:11:b1:26:05:42:61:71:3d:20:71:54:24:4f:f8: 21:2c:fe:22:87:ff:d7:6b:47:f2:cc:c1:b1:7c:01: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.48.96.0/19 84.55.192.0/18 176.46.192.0/18 185.179.16.0/22 195.190.160.0/19 IPv6: 2001:4b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12620 Signature Algorithm: sha256WithRSAEncryption 42:3c:86:7c:3b:d0:29:6c:a1:53:10:36:4e:e2:3c:41:23:db: 67:aa:32:e3:66:49:40:01:ec:44:d9:0f:a0:e2:18:05:08:c6: 8d:27:6a:3a:37:18:db:e1:9c:dd:c6:03:90:11:0c:d2:2c:b8: 2a:78:a5:fb:87:16:a5:2c:4d:4a:f4:69:45:12:30:54:0d:ed: 60:12:58:0a:f2:0c:28:84:ba:83:10:d3:8e:cb:eb:cc:10:12: 0b:66:90:42:38:64:c8:90:bd:7b:90:ec:2b:1d:0a:39:50:87: db:f6:04:30:02:8e:3b:18:a8:a3:3c:82:f5:05:9f:3c:66:d3: 08:1f:2d:50:50:e0:26:3b:9f:40:0b:7e:dc:31:f0:df:59:9f: 70:70:48:ce:e1:f7:49:97:5c:ee:d9:da:f1:2f:1d:d5:29:e5: 80:85:9e:32:15:8a:66:20:22:84:a0:93:d4:de:87:6e:05:8e: 3f:08:e8:02:be:bd:d5:ed:8c:91:b9:30:54:de:a5:07:3d:ec: 23:00:be:d0:e8:c2:d5:0a:39:43:a5:7e:90:cf:98:4f:fc:a2: a4:4f:c7:8d:e2:1e:07:5b:44:8d:c2:a0:d7:88:9e:13:d6:13: ff:04:fe:0b:79:f7:06:19:6b:53:2f:23:4f:7f:ea:7d:0e:7d: 8a:0b:a2:5d -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+OR4YgX3Nl9fyRgzSOsi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWZjY2Q3ZDdlMzA4ZjgxODA3MDUxZjhkNDg3ZTlkODI5YzI0ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCfu6P48j7cJiqHMZGUyFthAiqjr DoWtU4oVFrm/a33CQ4aJLcdc38/tIGA0jFLB8UFeLd2jPql3A5AP2mvolZG1Ruai 6wA9pPKsRTpniYtAagMTajReiyOOeUo9sWnD2JtC0jnmRaj5Xb0wTOV9hU70IAHF K0lJiUSihlTh3rQR5eXj09DZMaDuMPw+zprgURp5EYEGsCRvXN9XaHZYz8PMveqd X9Ms1I9br2ni9bP7Z6mheyxGevzTCC0I+LC6nWC4j3k097yo3JG6mXg08dd9ddja hhBAD/aKzG9HrYSnEbEmBUJhcT0gcVQkT/ghLP4ih//Xa0fyzMGxfAG2TwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFF78zX1+MI+BgHBR+NSH6dgpwkhoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzU5NjUw ZC1jOTM1LTRhYTktOTgwNC1kMWJkMDZmNWJmMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvNTk2NTBk LWM5MzUtNGFhOS05ODA0LWQxYmQwNmY1YmYwMC8xL1h2ek5mWDR3ajRHQWNGSDQx SWZwMkNuQ1NHZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFPjBgAwQGVDfAAwQGsC7AAwQCubMQAwQFw76g MA0EAgACMAcDBQMgAUsAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjFMMA0GCSqG SIb3DQEBCwUAA4IBAQBCPIZ8O9ApbKFTEDZO4jxBI9tnqjLjZklAAexE2Q+g4hgF CMaNJ2o6Nxjb4ZzdxgOQEQzSLLgqeKX7hxalLE1K9GlFEjBUDe1gElgK8gwohLqD ENOOy+vMEBILZpBCOGTIkL17kOwrHQo5UIfb9gQwAo47GKijPIL1BZ88ZtMIHy1Q UOAmO59AC37cMfDfWZ9wcEjO4fdJl1zu2drxLx3VKeWAhZ4yFYpmICKEoJPU3odu BY4/COgCvr3V7YyRuTBU3qUHPewjAL7Q6MLVCjlDpX6Qz5hP/KKkT8eN4h4HW0SN wqDXiJ4T1hP/BP4LefcGGWtTLyNPf+p9Dn2KC6Jd -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:07 2026 by rpki-client