This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer File: Xx-gbV262kPeRPTksdyUkrsofJ0.cer (raw, json) Hash identifier: UNyHxkyM2SlF5DPSERRcdCSe96OdP+2DRMLnijcIetQ= Subject key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC864F417AFDEB2F92C709E5B40AE01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34244 AS: 50986 IP: 5.180.0.0/22 IP: 31.170.24.0/21 IP: 37.221.104.0/22 IP: 45.8.152.0/22 IP: 45.14.4.0/22 IP: 45.93.232.0/22 IP: 45.131.188.0/22 IP: 45.152.172.0/22 IP: 81.92.196.0/22 IP: 81.92.220.0/22 IP: 85.30.128.0/18 IP: 92.39.32.0/20 IP: 94.46.136.0/22 IP: 94.46.240.0/22 IP: 128.127.184.0/21 IP: 141.98.236.0/22 IP: 155.137.24.0/21 IP: 178.236.64.0/20 IP: 178.255.112.0/22 IP: 185.4.8.0/22 IP: 185.27.96.0/22 IP: 185.121.44.0/22 IP: 185.176.28.0/22 IP: 185.186.32.0/22 IP: 185.197.224.0/22 IP: 185.216.152.0/22 IP: 185.223.236.0/22 IP: 185.240.208.0/22 IP: 185.247.236.0/22 IP: 188.66.48.0/22 IP: 193.34.202.0/24 IP: 193.221.93.0/24 IP: 193.221.120.0/24 IP: 193.221.123.0/24 IP: 193.221.219.0/24 IP: 195.210.52.0/23 IP: 2a02:80::/29 IP: 2a02:1610::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:64:f4:17:af:de:b2:f9:2c:70:9e:5b:40:ae:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:4d:79:96:4e:da:b3:9f:b3:8a:aa:78:48: 64:9b:e4:fe:b6:99:0f:c7:d2:8f:d9:40:73:dd:5e: b1:78:92:a8:21:cf:43:75:3b:8e:76:34:8d:04:5b: 29:e5:31:ae:27:c8:71:6b:a2:c7:c9:57:e9:65:6c: f9:32:5d:09:d4:e0:30:77:78:ac:6d:fa:fb:4e:40: 1f:33:ac:68:00:0f:6d:57:7d:4d:c2:9c:b1:b8:90: f3:17:b2:45:6b:3a:d1:96:22:d3:2d:fc:6b:af:13: 11:69:d1:be:aa:db:48:8c:83:6b:a2:05:6e:47:17: a5:d6:d4:1f:b0:ae:f9:30:06:f6:95:65:64:97:67: a1:a5:1d:2f:0f:89:3d:b9:65:4c:c8:c4:55:81:21: f6:69:fd:51:88:c4:1c:0e:ce:b3:1b:5c:48:c3:e5: 3a:65:df:6f:74:9f:fa:30:bc:6b:b6:57:cf:c4:39: a6:84:7b:7c:81:67:c8:d3:54:b3:7a:5f:20:8b:71: 9c:f3:51:c1:55:ce:ba:9e:d1:11:43:17:a9:67:5b: 39:fa:cc:5b:30:21:0a:98:dc:ec:2d:68:7a:4b:a2: 53:db:6c:13:a4:91:a3:ae:bf:61:ed:5f:43:1b:db: a4:11:d9:6e:53:b8:47:47:85:ee:fc:ed:bb:27:7b: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.0.0/22 31.170.24.0/21 37.221.104.0/22 45.8.152.0/22 45.14.4.0/22 45.93.232.0/22 45.131.188.0/22 45.152.172.0/22 81.92.196.0/22 81.92.220.0/22 85.30.128.0/18 92.39.32.0/20 94.46.136.0/22 94.46.240.0/22 128.127.184.0/21 141.98.236.0/22 155.137.24.0/21 178.236.64.0/20 178.255.112.0/22 185.4.8.0/22 185.27.96.0/22 185.121.44.0/22 185.176.28.0/22 185.186.32.0/22 185.197.224.0/22 185.216.152.0/22 185.223.236.0/22 185.240.208.0/22 185.247.236.0/22 188.66.48.0/22 193.34.202.0/24 193.221.93.0/24 193.221.120.0/24 193.221.123.0/24 193.221.219.0/24 195.210.52.0/23 IPv6: 2a02:80::/29 2a02:1610::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34244 50986 Signature Algorithm: sha256WithRSAEncryption 49:97:fd:7d:17:ac:fb:0c:0e:ae:d4:50:82:d4:02:51:31:76: b2:1b:f1:e5:f8:29:ae:ff:48:f1:86:be:d9:40:15:4b:f3:aa: 89:22:3c:dd:7a:00:63:9a:bb:7b:76:36:0c:d7:86:bc:bf:55: 98:49:a0:54:69:a6:5a:5a:51:3b:55:85:c6:e5:2a:22:a7:95: bc:cc:b2:d6:c0:b4:ea:fb:b2:41:2e:58:c8:57:57:a3:31:f3: 7c:04:6c:d3:dd:c3:ad:ef:d2:42:b8:e1:06:d8:6d:87:d1:84: 4b:6c:84:21:50:74:98:d2:00:2a:e9:f9:22:05:47:5c:45:ea: 13:cc:00:0d:aa:dc:14:e7:27:d8:47:d4:3a:82:4b:c5:0c:98: 7c:4a:b9:6a:52:40:a5:08:3f:95:ee:e6:70:3e:6b:c2:fe:e8: b2:2a:f9:fb:f9:6e:5a:c1:a4:79:a1:5f:bd:60:aa:10:3f:f0: ab:22:75:2a:a5:6b:50:72:d2:87:87:1b:58:c2:7e:36:5e:60: ef:c3:d1:f9:27:8c:32:78:35:13:83:a9:fb:1a:54:82:f9:08: bb:2f:a9:e8:84:04:6d:0b:98:6f:93:74:17:fa:8f:a8:a4:2e: 87:7e:4d:ac:57:f9:b7:14:74:5f:5e:99:0f:dd:28:18:2a:d3: 5b:9f:dc:bd -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgISAZt6yGT0F6/esvkscJ5bQK4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFmYTA2ZDVkYmFkYTQzZGU0NGY0ZTRiMWRjOTQ5MmJiMjg3YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/RNeZZO2rOfs4qqeEhkm+T+tpkP x9KP2UBz3V6xeJKoIc9DdTuOdjSNBFsp5TGuJ8hxa6LHyVfpZWz5Ml0J1OAwd3is bfr7TkAfM6xoAA9tV31NwpyxuJDzF7JFazrRliLTLfxrrxMRadG+qttIjINrogVu Rxel1tQfsK75MAb2lWVkl2ehpR0vD4k9uWVMyMRVgSH2af1RiMQcDs6zG1xIw+U6 Zd9vdJ/6MLxrtlfPxDmmhHt8gWfI01Szel8gi3Gc81HBVc66ntERQxepZ1s5+sxb MCEKmNzsLWh6S6JT22wTpJGjrr9h7V9DG9ukEdluU7hHR4Xu/O27J3sPjQIDAQAB o4IDkzCCA48wHQYDVR0OBBYEFF8foG1dutpD3kT05LHclJK7KHydMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzg0N2Qx Ny1iYTdjLTRlYWUtOWQ1NS0yNTg0NmQ1OWZkNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvODQ3ZDE3 LWJhN2MtNGVhZS05ZDU1LTI1ODQ2ZDU5ZmQ2MC8xL1h4LWdiVjI2MmtQZVJQVGtz ZHlVa3Jzb2ZKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBCwYIKwYB BQUHAQcBAf8Egfswgfgwgd8EAgABMIHYAwQCBbQAAwQDH6oYAwQCJd1oAwQCLQiY AwQCLQ4EAwQCLV3oAwQCLYO8AwQCLZisAwQCUVzEAwQCUVzcAwQGVR6AAwQEXCcg AwQCXi6IAwQCXi7wAwQDgH+4AwQCjWLsAwQDm4kYAwQEsuxAAwQCsv9wAwQCuQQI AwQCuRtgAwQCuXksAwQCubAcAwQCubogAwQCucXgAwQCudiYAwQCud/sAwQCufDQ AwQCuffsAwQCvEIwAwQAwSLKAwQAwd1dAwQAwd14AwQAwd17AwQAwd3bAwQBw9I0 MBQEAgACMA4DBQMqAgCAAwUAKgIWEDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA hcQCAwDHKjANBgkqhkiG9w0BAQsFAAOCAQEASZf9fRes+wwOrtRQgtQCUTF2shvx 5fgprv9I8Ya+2UAVS/OqiSI83XoAY5q7e3Y2DNeGvL9VmEmgVGmmWlpRO1WFxuUq IqeVvMyy1sC06vuyQS5YyFdXozHzfARs093Dre/SQrjhBthth9GES2yEIVB0mNIA Kun5IgVHXEXqE8wADarcFOcn2EfUOoJLxQyYfEq5alJApQg/le7mcD5rwv7osir5 +/luWsGkeaFfvWCqED/wqyJ1KqVrUHLSh4cbWMJ+Nl5g78PR+SeMMng1E4Op+xpU gvkIuy+p6IQEbQuYb5N0F/qPqKQuh35NrFf5txR0X16ZD90oGCrTW5/cvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:10 2026 by rpki-client