This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer (raw, json) Hash identifier: hc8rpej7XWkZBxQ30s3vnNBWHQm8XNTNk/kbD0sjkfM= Subject key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE115A37C60A1D9C130AD630BB2B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41782 IP: 84.38.243.0/24 IP: 91.216.57.0/24 IP: 193.84.103.0/24 IP: 195.238.248.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:15:a3:7c:60:a1:d9:c1:30:ad:63:0b:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:25:9b:88:c6:f3:56:af:64:df:fc:f3:32: 89:52:6f:54:89:47:44:2c:fd:4d:11:3e:a3:23:1d: a4:51:8e:a6:52:d0:42:9d:81:99:01:07:05:1c:71: 61:2c:00:18:ce:12:7b:61:bc:07:4a:d2:28:bd:d1: 76:b0:ab:34:0d:9d:d3:09:c6:ed:e6:37:82:d3:a8: cc:23:ff:4a:ee:b7:4c:e6:65:fd:b9:15:03:fd:9b: 06:5c:6e:05:90:45:55:9f:04:de:1e:bc:4e:9d:46: 87:8a:30:c8:ab:37:e1:c5:6d:8c:72:80:9b:99:f1: ed:13:8e:21:12:13:1c:b9:af:9b:fe:59:9d:bc:29: f2:f6:b3:a4:86:1e:26:e8:f1:e0:bd:30:6f:9e:f1: af:8d:64:36:69:b4:60:82:09:b5:4e:e3:71:c0:90: a0:cb:97:a8:6b:6b:39:ee:1e:82:a0:20:de:96:39: 40:51:43:c4:ef:5e:6f:d7:42:d4:f8:b7:03:4f:85: 75:e6:9b:f3:55:cf:1f:ec:ee:2c:2a:be:bd:c1:22: a4:8f:0a:e3:bb:fa:e0:60:8e:7b:ba:07:04:61:16: 86:e7:30:c1:b3:cc:4f:15:e8:c7:b5:e5:2a:e1:48: 33:67:ca:3b:dd:8c:34:4b:93:1d:03:76:07:db:b2: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.243.0/24 91.216.57.0/24 193.84.103.0/24 195.238.248.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41782 Signature Algorithm: sha256WithRSAEncryption 63:d5:12:ca:fc:10:63:0f:9a:b5:ec:a8:cb:d0:53:34:5f:87: d9:1c:20:8d:ea:a8:48:63:e6:21:60:73:91:c0:24:64:24:ed: c2:4d:b5:01:82:8a:4a:e6:6e:d6:ae:7c:f0:36:1c:00:9c:71: a8:2d:8a:87:2e:33:59:7b:02:8e:63:0b:90:08:02:63:93:2a: 99:4c:a8:8d:2c:6f:46:1c:c2:ec:5f:52:d4:5f:6a:a6:11:e2: 35:11:bc:bf:28:39:78:d9:44:96:ed:7d:3d:83:b7:61:80:60: ec:ca:04:0a:28:a1:d9:28:52:85:65:7b:e4:70:36:d7:90:48: f4:52:d8:31:c6:8e:33:c2:93:4b:3a:ca:5c:5e:ce:c5:da:84: b4:5b:08:bc:69:34:c1:13:83:1e:a4:93:6e:82:d8:4b:4f:19: 48:bc:af:55:f7:33:8c:4c:99:e4:3e:26:15:9b:63:e6:02:0b: 1b:ef:b8:76:97:11:40:17:eb:39:8f:33:38:e0:f2:95:15:88: 34:11:ca:89:eb:ca:74:39:35:57:ab:0c:87:7d:54:e4:17:34: 94:66:2f:97:7b:98:96:70:9a:7a:63:43:18:2f:df:9a:17:f4: f7:e9:39:24:bb:15:50:87:4e:f3:73:77:66:7b:a7:79:5c:e2: ce:dd:55:06 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt5fuEVo3xgodnBMK1jC7KyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDA2ZWE4ZDVkNzA1NGVmODk5N2U2MjkyZTNiMDQ0YjA5M2EyN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fslm4jG81avZN/88zKJUm9UiUdE LP1NET6jIx2kUY6mUtBCnYGZAQcFHHFhLAAYzhJ7YbwHStIovdF2sKs0DZ3TCcbt 5jeC06jMI/9K7rdM5mX9uRUD/ZsGXG4FkEVVnwTeHrxOnUaHijDIqzfhxW2McoCb mfHtE44hEhMcua+b/lmdvCny9rOkhh4m6PHgvTBvnvGvjWQ2abRgggm1TuNxwJCg y5eoa2s57h6CoCDeljlAUUPE715v10LU+LcDT4V15pvzVc8f7O4sKr69wSKkjwrj u/rgYI57ugcEYRaG5zDBs8xPFejHteUq4UgzZ8o73Yw0S5MdA3YH27LuDQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFMQG6o1dcFTviZfmKS47BEsJOifGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2IxYjI2 Yy0yYjdjLTQxMTctYjIzNS04YjMwMWJhYzMwYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvYjFiMjZj LTJiN2MtNDExNy1iMjM1LThiMzAxYmFjMzBjOS8xL3hBYnFqVjF3Vk8tSmwtWXBM anNFU3drNko4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAVCbzAwQAW9g5AwQAwVRnAwQAw+74MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwCjNjANBgkqhkiG9w0BAQsFAAOCAQEAY9USyvwQ Yw+ateyoy9BTNF+H2RwgjeqoSGPmIWBzkcAkZCTtwk21AYKKSuZu1q588DYcAJxx qC2Khy4zWXsCjmMLkAgCY5MqmUyojSxvRhzC7F9S1F9qphHiNRG8vyg5eNlElu19 PYO3YYBg7MoECiih2ShShWV75HA215BI9FLYMcaOM8KTSzrKXF7OxdqEtFsIvGk0 wRODHqSTboLYS08ZSLyvVfczjEyZ5D4mFZtj5gILG++4dpcRQBfrOY8zOODylRWI NBHKievKdDk1V6sMh31U5Bc0lGYvl3uYlnCaemNDGC/fmhf09+k5JLsVUIdO83N3 ZnuneVzizt1VBg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:25 2026 by rpki-client