This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer File: XyxxJryPOQVnRN4hOyzia3a8mSM.cer (raw, json) Hash identifier: shxUw5Es/9mBAsZoo/yMz8x65SMWQGjb6NdjBq5BSa8= Subject key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2DCE78B81C94F438E8F2211BC58AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206589 IP: 185.182.96.0/22 IP: 2a0a:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:dc:e7:8b:81:c9:4f:43:8e:8f:22:11:bc:58:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:da:c9:b1:f0:fa:d6:84:27:94:fc:3a:95: 26:8a:8a:82:f2:e0:d6:3c:fb:f9:e1:18:08:f8:29: 60:f1:36:4a:ff:6d:f0:d7:a5:51:9e:da:ee:9c:a3: 0a:16:2d:49:be:eb:21:62:02:75:b4:79:ab:c5:29: 24:19:43:28:fa:77:02:7f:93:d8:65:38:70:17:18: f7:e2:3a:cb:29:a2:97:ca:ff:14:de:8b:92:08:94: 7f:e8:91:b3:e0:ff:80:70:69:8a:6d:bc:e9:e2:1d: d4:44:a0:92:18:c9:05:70:a0:24:8a:ae:a4:e1:95: 59:b4:8f:3a:62:03:78:c2:05:38:a6:2f:93:08:af: 3d:2e:eb:fc:36:38:a5:81:e1:7c:68:b1:43:d4:47: b6:76:58:51:09:17:1a:a1:56:ab:f5:c6:01:36:ce: fc:5e:17:e6:f1:e6:0f:11:b3:1b:41:9f:2a:7f:4d: c8:7c:c5:c0:26:1c:e2:e8:ea:d0:c0:f3:2f:98:e2: 57:52:98:29:38:07:e1:0b:39:ed:bd:c1:50:ee:b4: 8d:cd:29:d6:32:59:08:28:55:8a:4a:21:e8:be:66: db:4c:0b:46:8a:39:ee:f6:d9:f6:b4:98:b9:cd:b4: ec:1b:8d:8e:f1:8f:8b:4a:2d:d1:c5:a3:13:69:b8: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.96.0/22 IPv6: 2a0a:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206589 Signature Algorithm: sha256WithRSAEncryption 3b:62:c4:57:38:fb:73:cd:f1:34:1d:e0:4b:3a:d8:9c:2e:5a: 6a:cd:56:1b:52:de:19:50:b1:bf:1c:c9:1e:83:61:ef:be:db: db:e3:cd:c8:e6:2f:d7:4a:4d:d6:4c:9e:f1:1c:75:51:f8:cb: 12:a5:38:60:75:00:c1:e2:11:4e:bc:cb:42:72:b3:94:e2:09: 3d:c5:ed:b1:2c:c9:fb:03:21:68:f3:a7:71:11:44:63:74:7c: 86:4b:db:2c:1f:cf:ae:f3:3f:54:9d:be:2a:b5:9f:c0:ad:ed: 12:00:d1:ee:d9:bd:9c:a8:a6:1e:d6:15:38:44:21:d1:94:b6: 9e:36:f9:95:2c:25:87:62:35:27:92:19:73:41:78:39:69:96: 04:91:83:f9:82:ba:94:a2:02:cc:be:a3:7d:88:3b:dc:b7:54: f0:a2:1c:ef:31:72:58:84:f3:3d:4b:d3:c1:88:05:b1:69:64: c5:48:94:7d:fb:de:72:20:f5:75:5a:83:69:7e:d1:26:ac:22: 14:0a:b5:a1:a4:fe:1d:32:70:72:c5:2f:b7:e5:d9:4f:b7:35: 12:09:f1:b0:bb:d8:59:ab:ad:3f:f5:be:bc:09:83:0a:3c:55: 4d:56:17:1b:88:22:05:bd:83:49:a1:f7:63:99:08:3d:6e:8a: a5:a4:95:c0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4otzni4HJT0OOjyIRvFivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjJjNzEyNmJjOGYzOTA1Njc0NGRlMjEzYjJjZTI2Yjc2YmM5OTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3aybHw+taEJ5T8OpUmioqC8uDW PPv54RgI+Clg8TZK/23w16VRntrunKMKFi1JvushYgJ1tHmrxSkkGUMo+ncCf5PY ZThwFxj34jrLKaKXyv8U3ouSCJR/6JGz4P+AcGmKbbzp4h3URKCSGMkFcKAkiq6k 4ZVZtI86YgN4wgU4pi+TCK89Luv8NjilgeF8aLFD1Ee2dlhRCRcaoVar9cYBNs78 Xhfm8eYPEbMbQZ8qf03IfMXAJhzi6OrQwPMvmOJXUpgpOAfhCzntvcFQ7rSNzSnW MlkIKFWKSiHovmbbTAtGijnu9tn2tJi5zbTsG42O8Y+LSi3RxaMTabinZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF8scSa8jzkFZ0TeITss4mt2vJkjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2Y3NmIx ZC00OGNiLTRhYjEtOTBlYy1lNjE1ZjU2Zjc4YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZjc2YjFk LTQ4Y2ItNGFiMS05MGVjLWU2MTVmNTZmNzhiMS8xL1h5eHhKcnlQT1FWblJONGhP eXppYTNhOG1TTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubZgMA0EAgACMAcDBQMqCuqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMm/TANBgkqhkiG9w0BAQsFAAOCAQEAO2LEVzj7c83x NB3gSzrYnC5aas1WG1LeGVCxvxzJHoNh777b2+PNyOYv10pN1kye8Rx1UfjLEqU4 YHUAweIRTrzLQnKzlOIJPcXtsSzJ+wMhaPOncRFEY3R8hkvbLB/PrvM/VJ2+KrWf wK3tEgDR7tm9nKimHtYVOEQh0ZS2njb5lSwlh2I1J5IZc0F4OWmWBJGD+YK6lKIC zL6jfYg73LdU8KIc7zFyWITzPUvTwYgFsWlkxUiUffveciD1dVqDaX7RJqwiFAq1 oaT+HTJwcsUvt+XZT7c1EgnxsLvYWautP/W+vAmDCjxVTVYXG4giBb2DSaH3Y5kI PW6KpaSVwA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:39 2026 by rpki-client