This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer (raw, json) Hash identifier: /M3XwO9Nmgx5aWMyt8x/NmVE70gKYfX5k/Ex5nCOZuk= Subject key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35594315146A8B287AAF6B405AAFB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215718 IP: 185.206.255.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:59:43:15:14:6a:8b:28:7a:af:6b:40:5a:af:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2be62be753ba9929355b4ce988bae12af7272a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:1e:63:5a:9a:f5:da:1b:17:b4:ad:07:94: 53:6e:a9:cb:5f:60:0f:85:6e:45:29:53:34:39:5f: 53:45:af:4e:11:91:69:b4:7e:2d:7e:42:b6:11:8b: fe:16:e9:46:33:88:a9:90:99:5e:39:63:87:34:7e: 48:71:46:4d:af:b9:06:b9:7e:b8:cd:cc:fa:b6:c4: b9:98:ad:67:90:32:ac:5f:77:67:b8:5b:b2:69:4a: 10:a9:f2:8c:aa:86:21:56:4a:a0:75:1b:3c:eb:03: e9:83:59:5a:c8:16:ff:ac:45:5e:ba:d1:93:f1:6a: d5:39:85:2b:3d:a0:52:b5:93:47:6b:50:46:ba:88: 22:01:7f:a8:10:9a:00:01:e6:b7:f9:f1:c3:e3:29: 30:a6:e7:ba:ac:76:04:d3:b0:8e:be:27:7f:d3:52: 4b:36:cc:71:25:ae:c4:82:88:b1:85:b3:3f:2c:8b: 95:2c:5c:20:d7:3e:71:31:26:a4:2d:cb:ef:8c:c6: 0c:29:a6:18:e4:48:4a:45:ce:fc:bf:84:e2:e2:99: 39:a4:4c:21:10:6b:e8:b2:71:ca:95:60:b5:6a:f0: 85:32:60:84:d9:ad:2b:e9:7c:2b:ee:95:6d:60:6a: c3:c9:bd:1c:8c:ef:93:cb:f8:7e:19:1f:9b:4a:be: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215718 Signature Algorithm: sha256WithRSAEncryption 72:61:67:cf:b2:33:7b:7f:9d:1f:28:eb:3d:98:51:6c:47:cf: 25:eb:ad:27:2f:76:b8:3d:3b:49:84:98:22:7d:ec:ce:97:30: 6a:b5:f9:2b:a4:5c:64:de:dc:b3:6a:f1:b9:54:c9:17:7e:d5: a1:9c:9e:fc:0e:fc:a6:6e:2c:94:9c:3e:fd:78:fc:ca:6c:2a: 13:02:e5:16:f8:0d:f9:8d:52:e4:98:8d:1a:70:fa:d8:11:be: ce:58:b3:6f:85:49:8e:c0:a8:cd:e8:2b:cf:91:b6:3f:55:6f: 39:0d:e6:3c:69:1e:f7:b2:eb:f2:16:6a:fd:3f:c2:f2:1b:86: 3e:16:d0:9c:7d:19:a7:35:ff:ce:af:c4:3e:49:e1:57:26:1c: 18:21:d2:c3:97:f0:1a:41:b2:76:f3:34:6e:97:d8:51:ab:80: f7:10:84:6f:63:e9:ea:f4:25:60:3b:72:23:62:ee:b8:a7:5e: 0b:a8:d1:76:96:52:95:f8:38:d7:f4:89:42:5b:22:20:70:64: 8c:24:93:cb:b4:85:20:0a:44:70:34:1a:81:ee:b7:e4:9c:38: e8:a8:9b:39:2e:c8:eb:89:7c:d8:b3:01:29:36:e3:99:8d:72: af:1f:33:c6:64:25:ea:62:eb:f2:ae:90:f5:5e:91:9a:38:69: 5c:00:87:a9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NVlDFRRqiyh6r2tAWq+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjJiZTYyYmU3NTNiYTk5MjkzNTViNGNlOTg4YmFlMTJhZjcyNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssIeY1qa9dobF7StB5RTbqnLX2AP hW5FKVM0OV9TRa9OEZFptH4tfkK2EYv+FulGM4ipkJleOWOHNH5IcUZNr7kGuX64 zcz6tsS5mK1nkDKsX3dnuFuyaUoQqfKMqoYhVkqgdRs86wPpg1layBb/rEVeutGT 8WrVOYUrPaBStZNHa1BGuogiAX+oEJoAAea3+fHD4ykwpue6rHYE07COvid/01JL NsxxJa7EgoixhbM/LIuVLFwg1z5xMSakLcvvjMYMKaYY5EhKRc78v4Ti4pk5pEwh EGvosnHKlWC1avCFMmCE2a0r6Xwr7pVtYGrDyb0cjO+Ty/h+GR+bSr6SHQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF8r5ivnU7qZKTVbTOmIuuEq9ycqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5L2ZkYTI2 MC05YmNmLTRmNjctYmY3Yi1lNTIyY2FlNjM0NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZmRhMjYw LTliY2YtNGY2Ny1iZjdiLWU1MjJjYWU2MzQ3MC8xL1h5dm1LLWRUdXBrcE5WdE02 WWk2NFNyM0p5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuc7/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNKpjANBgkqhkiG9w0BAQsFAAOCAQEAcmFnz7Ize3+dHyjrPZhRbEfPJeutJy92 uD07SYSYIn3szpcwarX5K6RcZN7cs2rxuVTJF37VoZye/A78pm4slJw+/Xj8ymwq EwLlFvgN+Y1S5JiNGnD62BG+zlizb4VJjsCozegrz5G2P1VvOQ3mPGke97Lr8hZq /T/C8huGPhbQnH0ZpzX/zq/EPknhVyYcGCHSw5fwGkGydvM0bpfYUauA9xCEb2Pp 6vQlYDtyI2LuuKdeC6jRdpZSlfg41/SJQlsiIHBkjCSTy7SFIApEcDQage635Jw4 6KibOS7I64l82LMBKTbjmY1yrx8zxmQl6mLr8q6Q9V6RmjhpXACHqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:19 2026 by rpki-client