This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer File: XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer (raw, json) Hash identifier: dpm+ZstzWRKK2jrpYLJ22KS6OowoxvWhEJcB6e+ea7Y= Subject key identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D1A00A9383A1DCE70660597B8D25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56579 IP: 91.218.59.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d1:a0:0a:93:83:a1:dc:e7:06:60:59:7b:8d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:57:66:25:c0:77:0a:8e:23:ae:15:98:94: c0:6c:cd:ff:c0:ac:aa:a3:e6:22:0f:b0:ce:a7:10: 32:ae:49:f2:3d:ce:4d:f3:57:04:88:40:0c:2a:05: ae:1a:87:94:e1:7e:20:26:8c:ac:8e:a3:f8:af:72: a7:62:45:17:00:37:cf:14:71:4a:83:65:29:6b:61: 6f:d4:6e:66:53:3b:59:b9:8a:84:5f:7f:82:51:57: de:46:bd:e6:17:e0:9c:de:b6:d6:0c:39:8f:96:2f: e4:1e:bb:58:53:e0:9e:24:6f:4c:dc:d0:9b:eb:76: 03:97:58:43:ad:e2:eb:35:43:f1:a2:1e:83:c7:df: 3d:03:41:9a:60:ad:d8:aa:7b:a9:e3:b6:be:a8:36: 27:7e:eb:a8:a5:ad:da:d8:9c:44:5d:55:d6:38:90: ce:14:d2:73:f2:1b:20:dc:05:9a:19:55:2a:e4:8c: e0:7c:d4:f9:ec:21:2c:95:e1:9d:4b:22:30:ae:1a: a0:0c:bc:a2:02:cf:de:9d:0f:8d:c3:32:ed:6c:44: d8:14:1f:e7:31:25:13:76:85:bb:d5:c9:1a:ab:d5: e1:bc:4b:25:fc:5e:63:61:90:25:07:62:f6:ef:87: 41:fc:c5:71:c9:1c:90:8f:83:86:fc:b1:d8:53:9d: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.59.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56579 Signature Algorithm: sha256WithRSAEncryption 8b:6a:2b:68:f3:78:6d:c8:59:4e:9a:d1:42:70:1c:ae:a3:0c: 7f:47:29:db:f3:7d:0d:f0:5a:4e:20:1b:07:a2:83:28:6e:29: 17:3c:a1:94:d8:89:60:d3:d4:77:ae:91:33:ff:fd:62:f6:ef: bb:b1:40:80:2f:eb:f3:5f:a7:4a:7e:d7:6f:5f:bc:c8:4a:53: 72:c9:9e:b2:1c:be:84:45:21:cf:d5:ca:dd:8f:f9:c5:11:45: 86:3d:29:b1:45:2a:66:67:17:13:38:1a:7d:86:90:38:99:a7: e7:f2:d2:ae:00:65:67:d4:47:ab:13:aa:ea:ad:4f:d3:6c:5c: 05:65:5e:13:59:3a:15:dd:fa:4a:c6:c3:48:55:c6:2b:4e:ab: b9:64:bc:3b:bb:a0:5e:45:46:f6:e2:82:6d:4f:7d:5b:39:b3: fc:f5:7f:9e:ca:15:00:2d:93:8f:c1:c2:13:2d:54:c0:b0:f6: e8:3a:8a:c4:cc:95:e4:a2:5a:ee:e6:38:e2:a8:0d:22:f8:18: ae:bd:c6:fd:30:3e:aa:5b:c7:3b:39:73:44:aa:14:7a:12:d9: ad:8b:3f:11:ad:70:31:21:d0:e6:7d:e7:e9:bb:d8:93:c5:00: 3a:be:c5:f7:ab:f3:47:2b:bd:5b:01:4d:44:5c:02:23:91:dc: 9c:16:b0:3e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ENGgCpODodznBmBZe40lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjJhMTMzZWMyZmU2MDY3YjU2NDk2ZTgxOWQ1YmZiNGU0NDcxZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QtXZiXAdwqOI64VmJTAbM3/wKyq o+YiD7DOpxAyrknyPc5N81cEiEAMKgWuGoeU4X4gJoysjqP4r3KnYkUXADfPFHFK g2Upa2Fv1G5mUztZuYqEX3+CUVfeRr3mF+Cc3rbWDDmPli/kHrtYU+CeJG9M3NCb 63YDl1hDreLrNUPxoh6Dx989A0GaYK3Yqnup47a+qDYnfuuopa3a2JxEXVXWOJDO FNJz8hsg3AWaGVUq5IzgfNT57CEsleGdSyIwrhqgDLyiAs/enQ+NwzLtbETYFB/n MSUTdoW71ckaq9XhvEsl/F5jYZAlB2L274dB/MVxyRyQj4OG/LHYU508mQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF8qEz7C/mBntWSW6BnVv7TkRx+UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzE2MWQy Zi1lYzg3LTQ3MTgtOTM2NC1mYTJjMTUzNzE3MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMTYxZDJm LWVjODctNDcxOC05MzY0LWZhMmMxNTM3MTcyNi8xL1h5b1RQc0wtWUdlMVpKYm9H ZFdfdE9SSEg1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9o7MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdAzANBgkqhkiG9w0BAQsFAAOCAQEAi2oraPN4bchZTprRQnAcrqMMf0cp2/N9 DfBaTiAbB6KDKG4pFzyhlNiJYNPUd66RM//9Yvbvu7FAgC/r81+nSn7Xb1+8yEpT csmeshy+hEUhz9XK3Y/5xRFFhj0psUUqZmcXEzgafYaQOJmn5/LSrgBlZ9RHqxOq 6q1P02xcBWVeE1k6Fd36SsbDSFXGK06ruWS8O7ugXkVG9uKCbU99Wzmz/PV/nsoV AC2Tj8HCEy1UwLD26DqKxMyV5KJa7uY44qgNIvgYrr3G/TA+qlvHOzlzRKoUehLZ rYs/Ea1wMSHQ5n3n6bvYk8UAOr7F96vzRyu9WwFNRFwCI5HcnBawPg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:33 2026 by rpki-client