This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer File: _xwhiBHZKUrWMSU6RF7R05WpY58.cer (raw, json) Hash identifier: F5Uknn82dDBIN0QFCZ9sLzChc3ffbZwteXA2yA0kHuQ= Subject key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC871B69A37A546CB398CCAFBDBEAAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207435 IP: 82.115.212.0/24 IP: 2a10:3a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:71:b6:9a:37:a5:46:cb:39:8c:ca:fb:db:ea:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1c218811d9294ad631253a445ed1d395a9639f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:3a:f9:c0:ca:05:c4:39:65:c6:57:b8:84: 84:45:b2:93:b1:bc:05:59:ae:57:40:d8:53:c5:db: 92:75:69:54:97:da:7b:91:dd:2c:a1:89:7e:e4:95: 35:ae:c7:31:09:3e:f8:cd:ec:62:e8:53:0a:0a:ec: 0a:fe:50:de:24:43:c2:aa:1f:00:67:1d:a8:00:ce: 87:6b:de:3c:06:7e:e0:39:b4:2d:c9:92:ca:dc:ed: 3e:0e:3e:94:6b:0f:66:48:d3:e5:6f:44:22:84:f7: 22:56:a8:62:ca:97:f4:83:f7:1d:64:92:4b:bf:2e: 2a:81:b8:5a:eb:4a:75:31:8a:56:e3:c3:29:0b:65: ce:36:69:bf:1e:dc:fc:cd:80:6d:71:e8:7a:65:6d: c4:5f:9e:e7:65:14:b2:71:0b:d3:7e:6f:13:1a:da: 91:9d:16:f9:bb:96:d5:e9:ce:60:ff:8e:d0:e6:d0: 24:7b:5b:b2:6a:d0:d6:1a:df:1e:3d:86:6a:32:12: cc:ce:ff:b2:7d:9d:14:fc:ae:e3:03:0b:a5:17:1d: 09:52:7c:e1:9f:d1:4f:08:2f:6e:25:14:7d:1b:3c: aa:d4:ab:2a:4e:fc:82:0e:ae:3c:2e:88:fc:47:cc: 36:20:73:7d:78:2e:2a:0a:30:f5:f2:fe:9f:cc:b0: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.212.0/24 IPv6: 2a10:3a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207435 Signature Algorithm: sha256WithRSAEncryption 0e:2d:28:e7:51:c7:cd:0c:00:8b:c2:e8:7b:2c:39:1d:85:e9: a5:b2:20:a2:d9:10:8a:ec:b5:d1:26:d2:74:b0:f2:22:5f:3d: 02:39:33:30:d1:3f:a7:cc:7b:83:6a:07:59:b8:e8:d0:0b:21: 05:19:00:7d:d0:c0:3a:f6:8a:7b:a9:28:1c:12:c7:6f:e7:eb: ae:6a:c1:5b:c0:58:8e:42:fb:ef:6d:38:cb:a9:ac:d9:7f:d1: 9d:48:6f:62:c7:cc:ee:35:17:91:ce:b4:8b:a7:dd:7d:79:03: 53:bb:a7:ac:87:66:7a:f4:dc:3d:22:76:08:78:02:32:15:06: a2:a9:ec:2f:75:52:fe:a8:a0:8d:6c:16:25:b5:35:46:de:ea: e4:ad:bb:ea:38:a4:07:5d:86:35:1d:d3:71:af:fc:e5:8d:a8: df:40:7a:57:0c:d3:f7:f4:3a:df:68:5c:7f:28:df:3b:81:aa: 82:b7:72:16:e5:41:2c:70:a4:c8:7f:17:9f:31:f2:42:cc:64: 22:99:62:1d:0f:5e:64:ed:17:02:4f:21:58:5e:cd:33:34:ec: 65:01:1b:32:0d:19:fa:68:b5:ec:d8:6b:06:4d:ed:68:8d:d6: 91:65:23:46:f7:42:ca:d6:bd:8c:79:20:eb:c6:0b:23:67:95: 63:c6:8b:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yHG2mjelRss5jMr72+qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFjMjE4ODExZDkyOTRhZDYzMTI1M2E0NDVlZDFkMzk1YTk2MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP86+cDKBcQ5ZcZXuISERbKTsbwF Wa5XQNhTxduSdWlUl9p7kd0soYl+5JU1rscxCT74zexi6FMKCuwK/lDeJEPCqh8A Zx2oAM6Ha948Bn7gObQtyZLK3O0+Dj6Uaw9mSNPlb0QihPciVqhiypf0g/cdZJJL vy4qgbha60p1MYpW48MpC2XONmm/Htz8zYBtceh6ZW3EX57nZRSycQvTfm8TGtqR nRb5u5bV6c5g/47Q5tAke1uyatDWGt8ePYZqMhLMzv+yfZ0U/K7jAwulFx0JUnzh n9FPCC9uJRR9Gzyq1KsqTvyCDq48Loj8R8w2IHN9eC4qCjD18v6fzLBu4wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP8cIYgR2SlK1jElOkRe0dOVqWOfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzJjNmIx NC03ZTg3LTQ5YzctYTNiMy1hMGE2MGJiOWNkOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMmM2YjE0 LTdlODctNDljNy1hM2IzLWEwYTYwYmI5Y2Q5Yi8xL194d2hpQkhaS1VyV01TVTZS RjdSMDVXcFk1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAUnPUMA0EAgACMAcDBQMqEDoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqSzANBgkqhkiG9w0BAQsFAAOCAQEADi0o51HHzQwA i8Loeyw5HYXppbIgotkQiuy10SbSdLDyIl89AjkzMNE/p8x7g2oHWbjo0AshBRkA fdDAOvaKe6koHBLHb+frrmrBW8BYjkL77204y6ms2X/RnUhvYsfM7jUXkc60i6fd fXkDU7unrIdmevTcPSJ2CHgCMhUGoqnsL3VS/qigjWwWJbU1Rt7q5K276jikB12G NR3Tca/85Y2o30B6VwzT9/Q632hcfyjfO4GqgrdyFuVBLHCkyH8XnzHyQsxkIpli HQ9eZO0XAk8hWF7NMzTsZQEbMg0Z+mi17NhrBk3taI3WkWUjRvdCyta9jHkg68YL I2eVY8aLHA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:51 2026 by rpki-client