This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer File: r-xPShbMUb1RYhARU5zrV0rBXQI.cer (raw, json) Hash identifier: bfKw4v7eDekePZfygo8J+mOeHkAt+fKK08lABGsuPXk= Subject key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE8A82907518103C42924D596D803 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41290 AS: 61309 AS: 198385 IP: 5.1.96.0/21 IP: 37.35.104.0/21 IP: 89.249.40.0/22 IP: 185.50.188.0/22 IP: 185.63.36.0/22 IP: 185.75.32.0/22 IP: 185.109.240.0/22 IP: 2a00:e6c0::/32 IP: 2a03:2040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e8:a8:29:07:51:81:03:c4:29:24:d5:96:d8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2d:ed:14:a7:5a:43:96:15:aa:f5:45:7a:16: 5e:58:e9:f1:8e:9a:a0:45:6e:f8:43:e9:b1:b7:e3: 2a:f7:60:8f:79:e2:69:36:d8:bd:6e:79:cf:0b:70: 2d:d7:b7:92:4f:82:80:b8:69:29:3c:da:87:2d:39: 84:6a:c0:a8:64:ad:d8:34:27:ae:bc:93:04:2b:d3: ad:ca:7b:f8:c2:04:7b:61:f4:d0:6d:7e:3f:1c:1a: af:b3:a0:0b:69:f8:09:56:cc:ba:ba:dd:6f:94:22: f1:15:a7:67:9c:d5:5e:08:b1:93:46:60:54:c5:40: ec:46:a3:65:21:13:ca:f1:b3:f7:be:fb:e6:eb:6a: 24:aa:17:92:02:c9:73:8a:cb:de:ca:57:31:b2:9b: 47:99:ad:70:7f:3e:1c:ed:22:88:c8:21:29:33:22: 4e:5e:54:46:8b:8f:b9:40:a6:d1:44:45:ba:a7:e6: 05:e0:49:f9:58:21:e6:0c:75:bb:24:85:9e:df:83: 9f:a0:dd:e0:d1:c7:26:ab:07:a3:d0:fd:92:0d:c8: 89:1f:e3:84:82:cd:55:79:2c:4a:1b:08:be:84:e0: 11:f1:20:f7:66:27:a1:07:b5:da:b3:fe:8c:fb:36: f6:60:9e:71:d6:d8:b0:1c:5b:7f:da:98:34:6e:b8: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.96.0/21 37.35.104.0/21 89.249.40.0/22 185.50.188.0/22 185.63.36.0/22 185.75.32.0/22 185.109.240.0/22 IPv6: 2a00:e6c0::/32 2a03:2040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41290 61309 198385 Signature Algorithm: sha256WithRSAEncryption 7f:ab:3e:fd:dc:37:a2:67:f7:aa:2f:f2:c4:a3:12:a2:c5:00: a9:f2:18:39:9b:38:d1:3f:ce:b1:8e:b1:dd:24:66:3e:fd:a5: 24:60:ac:4a:94:87:07:1b:26:2e:b2:8c:6d:c3:81:dd:14:b7: ae:ce:b3:95:b2:45:ff:3f:4c:75:50:1a:6e:e5:e0:c7:26:5c: 86:b1:19:32:1f:8b:b2:10:8e:04:46:6b:b9:99:e0:39:89:c3: 3b:1b:2a:47:35:e5:85:ba:b5:90:43:ab:e6:ad:85:c6:0e:75: 2f:4e:68:e4:96:a1:ac:ba:9f:59:90:0e:53:1e:81:6c:51:1f: 6a:37:8a:fc:47:dd:63:1f:a6:b0:e4:67:25:54:eb:0f:cd:8f: a7:51:99:66:27:74:e9:a8:e2:83:29:2b:0f:3d:00:b1:85:03: ae:e0:ec:29:ee:f0:48:cd:14:75:c2:a1:bb:17:ca:1b:db:0a: cc:a8:4c:b9:9d:e2:cb:53:52:b9:2f:af:ba:15:d2:bc:65:c8: 3d:4d:c1:e7:da:80:b4:78:aa:49:7b:fb:7e:cb:b0:ac:5c:fe: 75:8a:95:f9:1b:3b:c1:f2:bc:de:cc:27:96:0d:1b:d9:7d:f9: d8:f6:a9:31:91:32:37:79:7e:c5:d9:a7:3e:c3:91:f4:0a:ce: 47:40:ec:b7 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt5fuioKQdRgQPEKSTVltgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmVjNGY0YTE2Y2M1MWJkNTE2MjEwMTE1MzljZWI1NzRhYzE1ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S3tFKdaQ5YVqvVFehZeWOnxjpqg RW74Q+mxt+Mq92CPeeJpNti9bnnPC3At17eST4KAuGkpPNqHLTmEasCoZK3YNCeu vJMEK9Otynv4wgR7YfTQbX4/HBqvs6ALafgJVsy6ut1vlCLxFadnnNVeCLGTRmBU xUDsRqNlIRPK8bP3vvvm62okqheSAslzisveylcxsptHma1wfz4c7SKIyCEpMyJO XlRGi4+5QKbRREW6p+YF4En5WCHmDHW7JIWe34OfoN3g0ccmqwej0P2SDciJH+OE gs1VeSxKGwi+hOAR8SD3ZiehB7Xas/6M+zb2YJ5x1tiwHFt/2pg0brhwIQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFK/sT0oWzFG9UWIQEVOc61dKwV0CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzlmN2I2 Yi1iMjlkLTQ4NmUtODQ3OC0yN2VmYzEzYWZmMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvOWY3YjZi LWIyOWQtNDg2ZS04NDc4LTI3ZWZjMTNhZmYxZS8xL3IteFBTaGJNVWIxUlloQVJV NXpyVjByQlhRSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQDBQFgAwQDJSNoAwQCWfkoAwQCuTK8AwQCuT8k AwQCuUsgAwQCuW3wMBQEAgACMA4DBQAqAObAAwUDKgMgQDAkBggrBgEFBQcBCAEB /wQVMBOgETAPAgMAoUoCAwDvfQIDAwbxMA0GCSqGSIb3DQEBCwUAA4IBAQB/qz79 3DeiZ/eqL/LEoxKixQCp8hg5mzjRP86xjrHdJGY+/aUkYKxKlIcHGyYusoxtw4Hd FLeuzrOVskX/P0x1UBpu5eDHJlyGsRkyH4uyEI4ERmu5meA5icM7GypHNeWFurWQ Q6vmrYXGDnUvTmjklqGsup9ZkA5THoFsUR9qN4r8R91jH6aw5GclVOsPzY+nUZlm J3TpqOKDKSsPPQCxhQOu4Owp7vBIzRR1wqG7F8ob2wrMqEy5neLLU1K5L6+6FdK8 Zcg9TcHn2oC0eKpJe/t+y7CsXP51ipX5GzvB8rzezCeWDRvZffnY9qkxkTI3eX7F 2ac+w5H0Cs5HQOy3 -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:45 2026 by rpki-client