This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer File: xC4WYonhwfw6mLVFQLzHMUbXSII.cer (raw, json) Hash identifier: OR7Morez3roGMC7C1HV5Up3cfzJlxh6PdP2VpEFs4VU= Subject key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2865C8BE041D0CE4A602248E5B0A6F39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 04 Feb 2026 11:24:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 158.94.175.0/24 IP: 2a09:5880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:65:c8:be:04:1d:0c:e4:a6:02:24:8e:5b:0a:6f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 4 11:24:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42e166289e1c1fc3a98b54540bcc73146d74882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:39:a3:ea:18:ef:00:f2:2f:6e:65:dc:e6: 1e:5c:5f:84:3b:02:f2:3c:47:d1:90:b6:a9:b8:c0: 2f:4a:00:10:92:ab:c2:f9:ea:3c:ee:79:e4:1c:90: 22:a2:e5:61:13:cc:cf:fe:97:53:9f:d8:c0:3e:35: 1b:1b:09:02:7a:d7:d8:ab:10:eb:bd:d5:a4:87:cb: ab:2c:11:28:24:df:5b:4a:f3:f8:6f:d4:e6:7a:a4: 70:3f:fd:73:97:58:fa:92:83:b1:07:9e:48:5d:3c: 02:2e:4b:59:10:fe:3d:28:c4:ef:46:a7:54:e2:5b: 70:17:ee:9b:49:6c:66:e5:48:ef:54:20:1c:90:9e: 36:85:0c:fe:b1:77:a1:89:5e:09:29:ca:47:3b:1b: 2e:8f:c5:d5:27:ff:18:94:ae:b9:76:8b:5e:46:19: bd:71:00:d3:61:6d:51:57:5a:b0:fe:a7:5b:3e:c8: 55:3a:5a:fc:4e:85:5c:26:90:fe:49:43:67:95:66: 08:c0:6a:c4:53:f4:5f:ae:7c:a7:f1:b8:07:78:22: a9:1e:83:ac:db:23:96:dc:8e:88:44:53:3f:d6:84: 24:1a:8f:42:0c:e8:88:c2:b4:85:00:76:23:2d:8f: e0:c0:ce:62:9e:b0:2c:2d:f3:e8:17:99:68:61:60: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.175.0/24 IPv6: 2a09:5880::/29 Signature Algorithm: sha256WithRSAEncryption 40:c1:8d:41:90:39:0c:b5:94:13:cd:c3:fd:ac:4d:47:46:96: 85:d9:91:9a:e5:ad:c7:0a:5e:f7:05:de:2d:27:48:3f:cf:9f: 5e:ca:b0:28:d2:fb:b5:72:f4:38:7b:b3:c5:e3:a3:a6:10:0d: 7a:fc:d9:ae:ba:a2:11:85:a0:5f:97:1c:a2:61:c5:ac:09:a7: 15:dd:4a:53:01:f5:49:6f:d1:2f:a9:13:b0:57:35:45:09:f1: 07:df:ab:ae:08:ce:35:e8:62:37:e9:61:0d:b6:f8:f1:f5:90: 65:8d:1b:68:90:2f:1d:09:3f:58:23:6b:ab:69:9a:4c:b2:5a: 32:e9:34:45:39:26:b2:1c:59:bf:f5:2a:af:2d:2a:fe:9d:f7: 92:5a:d3:2a:31:95:30:d7:22:b3:ac:aa:2d:a0:f4:35:56:08: ba:5f:6a:71:e6:c5:9b:5c:8d:57:f6:35:ac:7b:2f:cc:d9:70: ab:21:de:3d:50:a2:3f:d9:e5:fb:96:99:34:2c:84:0a:a8:63: 9a:91:7f:5e:e6:a9:da:d0:e7:8b:88:08:c2:40:e3:79:00:53: 1d:31:bc:d0:ee:42:ed:9f:39:19:28:e2:b5:9f:9d:e5:cc:01: 7f:b1:c0:b1:be:e0:b7:68:b7:55:24:20:16:05:9d:72:f3:02: 57:a7:fb:9e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZwoZci+BB0M5KYCJI5bCm85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA0MTEyNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJlMTY2Mjg5ZTFjMWZjM2E5OGI1NDU0MGJjYzczMTQ2ZDc0ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIs5o+oY7wDyL25l3OYeXF+EOwLy PEfRkLapuMAvSgAQkqvC+eo87nnkHJAiouVhE8zP/pdTn9jAPjUbGwkCetfYqxDr vdWkh8urLBEoJN9bSvP4b9TmeqRwP/1zl1j6koOxB55IXTwCLktZEP49KMTvRqdU 4ltwF+6bSWxm5UjvVCAckJ42hQz+sXehiV4JKcpHOxsuj8XVJ/8YlK65doteRhm9 cQDTYW1RV1qw/qdbPshVOlr8ToVcJpD+SUNnlWYIwGrEU/Rfrnyn8bgHeCKpHoOs 2yOW3I6IRFM/1oQkGo9CDOiIwrSFAHYjLY/gwM5inrAsLfPoF5loYWDwWQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMQuFmKJ4cH8Opi1RUC8xzFG10iCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2IyNTk4 Zi0wNjMxLTRiNWEtYWZlNS01YWQ5ODY0NTMyYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvYjI1OThm LTA2MzEtNGI1YS1hZmU1LTVhZDk4NjQ1MzJhNy8xL3hDNFdZb25od2Z3Nm1MVkZR THpITVViWFNJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAnl6vMA0EAgACMAcDBQMqCViAMA0GCSqGSIb3 DQEBCwUAA4IBAQBAwY1BkDkMtZQTzcP9rE1HRpaF2ZGa5a3HCl73Bd4tJ0g/z59e yrAo0vu1cvQ4e7PF46OmEA16/NmuuqIRhaBflxyiYcWsCacV3UpTAfVJb9EvqROw VzVFCfEH36uuCM416GI36WENtvjx9ZBljRtokC8dCT9YI2uraZpMsloy6TRFOSay HFm/9SqvLSr+nfeSWtMqMZUw1yKzrKotoPQ1Vgi6X2px5sWbXI1X9jWsey/M2XCr Id49UKI/2eX7lpk0LIQKqGOakX9e5qna0OeLiAjCQON5AFMdMbzQ7kLtnzkZKOK1 n53lzAF/scCxvuC3aLdVJCAWBZ1y8wJXp/ue -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:44 2026 by rpki-client