This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer File: XxpCcHKzHUR4TDdd-uQieOcfqDY.cer (raw, json) Hash identifier: F9sNxJc17sUoflMphQPFgG5J8SAJnFtN6u2Cerno50s= Subject key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AFC08A2234617C6F2786150862AC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202603 IP: 185.236.181.0 -- 185.236.183.255 IP: 213.173.36.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fc:08:a2:23:46:17:c6:f2:78:61:50:86:2a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1a427072b31d44784c375dfae42278e71fa836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:46:45:7f:e7:dd:62:6d:ab:04:4f:c7:13:8c: 61:ce:d4:28:65:ce:d4:9f:8f:96:ef:78:8b:66:9f: 22:dd:d8:d7:fb:61:14:66:91:66:51:78:14:41:bd: e9:ed:3f:c4:c8:50:4e:3d:68:50:57:bf:64:85:54: 48:b3:97:c8:db:43:76:09:6a:1b:d1:b2:e6:6d:29: 93:18:2c:40:da:c3:9e:74:e9:28:7b:d8:3e:f3:18: ed:d4:25:7c:20:d2:68:18:10:e7:cf:f6:59:8b:60: a8:aa:15:14:b9:19:63:12:4d:cd:e7:5c:a1:57:73: 33:c1:70:ac:bf:14:bb:9b:fe:cc:20:df:d4:a5:2f: 53:01:2d:15:67:83:11:4b:b7:a2:e4:88:1d:c6:5a: 81:bd:ab:2d:a2:1d:ae:14:4c:23:7e:e1:fe:84:62: 82:ff:80:79:08:d6:cd:c3:94:ca:c8:87:4e:5b:fc: 3f:c9:7b:d8:9d:b6:b4:69:c4:54:62:95:95:69:5d: 32:49:9b:c3:83:1d:76:dc:2d:f2:af:22:46:8b:84: 95:65:39:c3:59:fa:c4:d8:9d:2d:e0:34:9c:f0:ba: e0:d9:5c:a7:3b:c3:d3:ea:68:61:6e:95:da:ef:2d: 48:f3:ec:4e:7c:18:89:61:2a:85:05:48:81:93:80: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.181.0-185.236.183.255 213.173.36.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202603 Signature Algorithm: sha256WithRSAEncryption 06:8e:4f:80:73:e1:b6:7d:66:f5:a9:5b:ff:23:36:81:89:70: f8:dd:bf:7b:81:ea:f9:e0:e0:9a:7d:c5:cf:29:2f:7d:5c:e3: 09:47:a9:d4:a6:25:ba:bb:74:35:05:ce:a3:c8:d4:73:c1:6e: c6:52:eb:59:d9:34:c9:d8:d4:a6:d9:ac:6b:d8:58:37:6a:db: d5:03:56:b1:74:f1:66:11:43:1b:7d:ea:2e:2d:5b:d4:49:78: c0:f5:e9:8f:9c:7d:68:83:a2:78:33:37:b2:b4:d2:cd:82:97: b7:85:d4:cf:2e:bf:65:49:d7:6c:f4:ac:2e:4b:8d:be:8f:81: c4:8c:9d:37:a5:a6:3e:62:14:a8:e6:74:26:16:11:ba:a0:e3: 45:bb:ac:33:26:e0:70:fc:81:90:29:2a:98:65:23:8f:3c:12: 69:e4:da:9a:cf:32:73:06:4d:85:b2:fb:b1:13:13:62:62:05: 09:f1:a7:4a:7b:e7:27:c3:ab:d6:1f:45:8b:2e:5e:b9:f7:fd: bf:73:d6:ac:35:69:94:90:77:87:e5:53:6b:6a:1e:2a:af:45: 2a:87:41:55:0c:2d:7c:e6:20:9e:bb:a5:d3:9e:d6:b2:32:63: f1:35:4d:91:03:3f:ca:87:63:53:2f:a5:2d:4f:54:8c:e4:ce: b8:41:12:fd -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt6WvwIoiNGF8byeGFQhirBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFhNDI3MDcyYjMxZDQ0Nzg0YzM3NWRmYWU0MjI3OGU3MWZhODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kZFf+fdYm2rBE/HE4xhztQoZc7U n4+W73iLZp8i3djX+2EUZpFmUXgUQb3p7T/EyFBOPWhQV79khVRIs5fI20N2CWob 0bLmbSmTGCxA2sOedOkoe9g+8xjt1CV8INJoGBDnz/ZZi2CoqhUUuRljEk3N51yh V3MzwXCsvxS7m/7MIN/UpS9TAS0VZ4MRS7ei5IgdxlqBvastoh2uFEwjfuH+hGKC /4B5CNbNw5TKyIdOW/w/yXvYnba0acRUYpWVaV0ySZvDgx123C3yryJGi4SVZTnD WfrE2J0t4DSc8Lrg2VynO8PT6mhhbpXa7y1I8+xOfBiJYSqFBUiBk4CJ6wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFF8aQnBysx1EeEw3XfrkInjnH6g2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzA3N2Y2 NC1iODQzLTQ2OWYtODU0Ny1kZDIwYmIyMDhiYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMDc3ZjY0 LWI4NDMtNDY5Zi04NTQ3LWRkMjBiYjIwOGJiYS8xL1h4cENjSEt6SFVSNFREZGQt dVFpZU9jZnFEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBAC57LUDBAO57LADBADVrSQwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAxdrMA0GCSqGSIb3DQEBCwUAA4IBAQAGjk+Ac+G2fWb1 qVv/IzaBiXD43b97ger54OCafcXPKS99XOMJR6nUpiW6u3Q1Bc6jyNRzwW7GUutZ 2TTJ2NSm2axr2Fg3atvVA1axdPFmEUMbfeouLVvUSXjA9emPnH1og6J4MzeytNLN gpe3hdTPLr9lSdds9KwuS42+j4HEjJ03paY+YhSo5nQmFhG6oONFu6wzJuBw/IGQ KSqYZSOPPBJp5NqazzJzBk2FsvuxExNiYgUJ8adKe+cnw6vWH0WLLl659/2/c9as NWmUkHeH5VNrah4qr0Uqh0FVDC185iCeu6XTntayMmPxNU2RAz/Kh2NTL6UtT1SM 5M64QRL9 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:07 2026 by rpki-client