This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer (raw, json) Hash identifier: TAxed9uwrug8Ky1+JL3f49Hdd+z3AW8IKqKTxcqxEcM= Subject key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3BE4394C40A09CB21B37F57324133 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197448 IP: 193.239.204.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:be:43:94:c4:0a:09:cb:21:b3:7f:57:32:41:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:d8:b7:52:72:6a:bd:cb:68:c0:4f:fd:b5: b6:34:c5:f4:17:0c:e1:c1:e1:a7:17:95:f4:a6:c5: ab:f5:36:71:ce:c9:88:7c:64:71:59:7e:5e:65:d3: 11:0d:83:c8:bf:f4:de:d9:33:1d:a1:1a:f5:b0:39: 9c:53:6d:94:31:cd:f0:ab:eb:00:0d:53:19:15:95: e3:13:a4:96:d6:0b:8a:02:6f:80:55:62:c4:a2:72: 92:92:0d:f0:f6:ec:8b:ac:ba:fe:51:12:2d:12:4d: 2f:cb:e8:77:35:65:6a:27:29:9d:4e:b3:40:81:28: 70:f3:05:ec:08:43:5d:7b:0d:91:2f:57:d2:ea:d5: 01:53:12:c9:83:93:82:4f:2a:14:a0:4e:26:f8:db: 70:81:a0:f9:d6:e4:d4:56:cb:73:1d:e6:71:50:39: 82:6d:14:39:2d:41:68:4e:55:29:d1:81:f1:8e:c3: d3:95:e9:5e:23:7f:ae:c8:80:5c:5c:3e:df:ac:e1: 65:0e:ec:5b:1b:b9:8c:9f:c9:19:e0:62:da:3a:17: 79:8f:a9:49:06:bf:9c:35:c5:f3:1a:83:a0:b7:7d: 42:29:0c:61:79:ff:07:cc:bb:ae:e9:d3:54:93:88: 63:91:ec:aa:bb:03:5d:3b:0e:87:38:ee:45:41:8e: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.204.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197448 Signature Algorithm: sha256WithRSAEncryption 9a:12:4f:ee:54:66:4f:40:e4:6d:24:aa:3c:1f:ae:32:05:23: 8b:7c:3d:de:29:f9:88:e1:1e:61:82:8a:1c:f6:98:77:78:be: 40:5b:27:ac:65:4a:be:2d:9e:be:f8:0e:97:27:a0:e1:de:d9: 19:11:41:43:13:44:26:4d:93:4e:8e:d8:a6:7a:73:7c:a6:ff: fa:98:12:79:19:6f:9b:8a:f9:78:ef:fa:62:c5:ff:49:5c:61: ad:e6:10:44:a5:58:14:a6:2d:0c:35:04:5c:f7:34:28:83:0b: 64:b7:e2:2f:d3:f8:5e:c3:63:f2:7f:6f:46:93:db:d1:d6:d7: 01:4c:72:6e:82:fa:e6:6d:f7:bb:fe:b0:b0:24:62:7b:dc:12: b6:60:bd:c9:81:69:1a:06:b3:c9:e7:08:2e:73:f7:8d:a8:03: 16:2c:83:72:13:a9:16:4e:9f:69:5d:ce:11:a8:d1:13:7b:9b: 10:5c:0f:67:ef:a4:6e:49:8f:94:1b:71:c7:48:ee:57:be:42: 23:bc:ac:f4:94:4e:a3:e6:a3:0a:6e:06:40:10:33:66:a1:1e: d2:f0:1e:fa:b3:e0:06:c0:43:64:3d:b4:a4:bd:8f:48:67:3c: cc:67:9d:54:cd:fb:be:6f:8d:68:b2:ce:29:ae:38:32:32:3b: 39:43:aa:6c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o75DlMQKCcshs39XMkEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjE3NjhlMjZmZjRmOWEyYThhNTZkYTRkY2I3ZTFlYzBjMmU0YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPzYt1Jyar3LaMBP/bW2NMX0Fwzh weGnF5X0psWr9TZxzsmIfGRxWX5eZdMRDYPIv/Te2TMdoRr1sDmcU22UMc3wq+sA DVMZFZXjE6SW1guKAm+AVWLEonKSkg3w9uyLrLr+URItEk0vy+h3NWVqJymdTrNA gShw8wXsCENdew2RL1fS6tUBUxLJg5OCTyoUoE4m+NtwgaD51uTUVstzHeZxUDmC bRQ5LUFoTlUp0YHxjsPTleleI3+uyIBcXD7frOFlDuxbG7mMn8kZ4GLaOhd5j6lJ Br+cNcXzGoOgt31CKQxhef8HzLuu6dNUk4hjkeyquwNdOw6HOO5FQY4ghwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF8XaOJv9PmiqKVtpNy34ewMLkqTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2U1ZTUz YS1kZmU4LTRlOTktODVhOC0xZTAzNjdjMDdkNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZTVlNTNh LWRmZTgtNGU5OS04NWE4LTFlMDM2N2MwN2Q0Ni8xL1h4ZG80bV8wLWFLb3BXMmsz TGZoN0F3dVNwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwe/MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMDSDANBgkqhkiG9w0BAQsFAAOCAQEAmhJP7lRmT0DkbSSqPB+uMgUji3w93in5 iOEeYYKKHPaYd3i+QFsnrGVKvi2evvgOlyeg4d7ZGRFBQxNEJk2TTo7YpnpzfKb/ +pgSeRlvm4r5eO/6YsX/SVxhreYQRKVYFKYtDDUEXPc0KIMLZLfiL9P4XsNj8n9v RpPb0dbXAUxyboL65m33u/6wsCRie9wStmC9yYFpGgazyecILnP3jagDFiyDchOp Fk6faV3OEajRE3ubEFwPZ++kbkmPlBtxx0juV75CI7ys9JROo+ajCm4GQBAzZqEe 0vAe+rPgBsBDZD20pL2PSGc8zGedVM37vm+NaLLOKa44MjI7OUOqbA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:50 2026 by rpki-client