This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer File: Xw3wyOXRsjU4vrXszDqxKGXffqo.cer (raw, json) Hash identifier: ag+LPTYw+H7hCBCG4lUMssj0mRiCG1O25xvS80Fsj9k= Subject key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CBA272AD7EB41F650A1B9AD1B95CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199641 IP: 45.143.124.0/22 IP: 2a0e:e3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ba:27:2a:d7:eb:41:f6:50:a1:b9:ad:1b:95:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:13:36:00:29:a4:b3:08:f3:40:9c:a1:93: 37:b5:50:65:b2:81:1e:ca:8d:dd:19:ac:b1:37:e0: 34:9a:bb:b0:75:dc:8c:00:0b:5e:7a:ee:5c:9d:17: 20:f8:53:10:6a:8f:de:0e:3a:c0:32:f2:3e:5e:a3: fa:65:2e:f9:0d:45:d2:73:b6:a5:80:5e:5c:6f:b1: 1e:69:e7:44:79:ea:6b:00:37:96:32:75:f0:21:bd: e4:70:9d:7e:8a:ae:ac:16:26:b2:c1:85:ae:27:e7: 39:6f:60:e5:4c:94:43:84:1f:d2:11:3d:87:1a:3b: d0:62:55:1e:c7:84:c2:bc:62:ce:5b:2a:4b:46:e2: 69:fa:e4:ad:c4:bf:de:65:4f:11:14:9b:4f:23:a4: 87:ba:4e:c1:9c:3f:53:53:42:32:ba:e7:29:b0:31: ac:e9:dc:84:ff:0a:fc:82:cc:99:9f:8a:e1:35:37: 15:df:41:38:90:41:9c:98:73:24:49:d4:f7:b0:af: 55:1a:77:28:5b:e9:73:fb:24:97:c6:af:5e:e9:e1: 83:9e:e5:f9:d7:fc:05:f5:41:57:fa:38:2c:31:21: 50:42:ab:2e:d6:d8:cc:ab:1c:97:b3:2f:3f:ad:20: 2b:a5:03:b2:f6:6f:c4:84:aa:4f:eb:87:36:d8:cc: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.124.0/22 IPv6: 2a0e:e3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199641 Signature Algorithm: sha256WithRSAEncryption 94:72:c8:f9:1e:4e:83:b4:f6:9d:85:00:56:3a:64:ca:b5:ba: 41:f2:7e:8c:b5:83:ee:e0:7c:56:f3:fe:3b:7b:c9:78:72:2f: dc:11:c7:53:1a:65:d0:ee:90:fe:66:6e:9c:fe:ba:0f:67:ba: 94:03:6f:58:c8:ba:a1:c4:15:df:7c:61:87:54:0f:5f:c5:2b: 5a:93:a4:2e:bb:ba:12:fa:72:b6:b7:76:a8:f8:84:dc:ea:10: 33:b2:df:2d:76:70:74:90:15:51:15:6a:ad:b0:de:92:33:a1: f6:39:b4:e4:0c:a6:58:fa:cd:38:e3:7f:44:b7:e1:94:fb:28: d7:8a:a1:4d:9c:25:02:66:24:90:cd:f6:93:63:ac:bb:0e:70: c3:60:82:35:16:5b:01:b6:37:43:50:57:7d:b5:bd:e7:8f:64: 2d:22:25:d8:00:7a:f4:29:e0:5a:b2:f0:f3:ff:8c:69:97:02: 04:7a:b1:df:9f:0a:61:b7:28:23:5d:d2:64:64:f1:d7:d6:d6: ad:3d:aa:3d:ea:ed:a2:10:25:13:05:9b:9a:7f:6e:ec:93:aa: 4a:97:c9:87:28:2f:0e:c8:d2:4d:81:1a:fe:a9:2c:65:1e:af: a0:eb:96:4a:6a:7f:1d:87:a6:c4:98:e2:67:64:91:55:d7:e5: a1:7e:df:51 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XLonKtfrQfZQobmtG5XMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjBkZjBjOGU1ZDFiMjM1MzhiZWI1ZWNjYzNhYjEyODY1ZGY3ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoITNgAppLMI80CcoZM3tVBlsoEe yo3dGayxN+A0mruwddyMAAteeu5cnRcg+FMQao/eDjrAMvI+XqP6ZS75DUXSc7al gF5cb7EeaedEeeprADeWMnXwIb3kcJ1+iq6sFiaywYWuJ+c5b2DlTJRDhB/SET2H GjvQYlUex4TCvGLOWypLRuJp+uStxL/eZU8RFJtPI6SHuk7BnD9TU0IyuucpsDGs 6dyE/wr8gsyZn4rhNTcV30E4kEGcmHMkSdT3sK9VGncoW+lz+ySXxq9e6eGDnuX5 1/wF9UFX+jgsMSFQQqsu1tjMqxyXsy8/rSArpQOy9m/EhKpP64c22Mx9HwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF8N8Mjl0bI1OL617Mw6sShl336qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2UxMWRh ZC0yMDhlLTQ3Y2MtYmY2ZS1iYzUxM2E5OGI5YmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZTExZGFk LTIwOGUtNDdjYy1iZjZlLWJjNTEzYTk4YjliZS8xL1h3M3d5T1hSc2pVNHZyWHN6 RHF4S0dYZmZxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLY98MA0EAgACMAcDBQMqDuPAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwML2TANBgkqhkiG9w0BAQsFAAOCAQEAlHLI+R5Og7T2 nYUAVjpkyrW6QfJ+jLWD7uB8VvP+O3vJeHIv3BHHUxpl0O6Q/mZunP66D2e6lANv WMi6ocQV33xhh1QPX8UrWpOkLru6Evpytrd2qPiE3OoQM7LfLXZwdJAVURVqrbDe kjOh9jm05AymWPrNOON/RLfhlPso14qhTZwlAmYkkM32k2Osuw5ww2CCNRZbAbY3 Q1BXfbW9549kLSIl2AB69CngWrLw8/+MaZcCBHqx358KYbcoI13SZGTx19bWrT2q PertohAlEwWbmn9u7JOqSpfJhygvDsjSTYEa/qksZR6voOuWSmp/HYemxJjiZ2SR VdfloX7fUQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:50 2026 by rpki-client