This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer File: xDwiL60sJ8phLJjCc9TxZQbhsuU.cer (raw, json) Hash identifier: NooR2XhgLV4BIfeeTCuR6x1j9D5A22fM9NqfJ3UleaE= Subject key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81175602BB9D0AAB657D5247B53332 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49718 IP: 176.100.64.0/18 IP: 213.108.168.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:17:56:02:bb:9d:0a:ab:65:7d:52:47:b5:33:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:90:8a:1b:1f:50:2f:09:75:bb:2e:34:16: ea:62:e0:87:4f:c7:8c:8a:0d:cb:11:f4:d2:0a:2a: f6:24:74:04:ec:55:e6:4a:69:d6:54:a4:4d:04:db: 8d:31:23:e9:9e:de:7d:13:e3:e3:14:0c:96:80:68: 94:7c:21:a8:a7:06:4e:ee:b6:fc:a4:59:f1:26:e1: 48:e1:b1:ff:f3:0c:5a:26:1f:d8:51:61:a7:fd:55: 53:d1:93:00:d3:ac:93:e6:7f:a2:1a:1b:ca:79:3f: 3f:4d:2f:1b:42:52:6a:8f:2e:d8:c2:e3:3b:36:c8: ec:eb:f2:3f:ce:fc:ef:82:a7:0a:b1:17:b1:48:52: 10:11:96:f7:15:9b:a6:cd:ed:d0:88:d8:b2:b3:fe: 71:94:0e:f7:45:9e:94:38:b0:e0:ff:25:ff:02:3d: 83:88:30:d2:62:8f:3d:7d:da:71:9e:c5:7e:f0:51: 76:a0:8e:1e:ff:9c:e0:a8:c4:2b:f0:c0:4f:30:92: bc:50:58:60:af:50:0e:e3:f3:2a:1e:28:ee:f2:f0: 7f:7f:6e:5c:42:b7:95:c6:47:df:6a:19:22:bc:93: 08:ae:8c:c7:90:ae:1f:2d:33:bd:6a:fb:48:21:22: ea:a1:b1:67:0a:d5:42:c2:e7:fd:b2:90:73:13:78: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.64.0/18 213.108.168.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49718 Signature Algorithm: sha256WithRSAEncryption 45:58:c1:f0:bb:cf:9e:c0:6a:18:a5:3d:f4:15:70:99:59:e4: 57:3d:03:e1:24:dd:01:f5:c4:d9:74:90:54:b9:a5:3e:7d:a3: 92:fa:c9:ac:63:5b:d2:d4:8c:e0:cc:30:f5:b0:b5:5b:1d:38: ae:b8:b0:ad:16:8e:2c:fb:19:3e:cd:83:46:ab:84:c7:50:00: 27:3c:2a:d9:54:e0:55:86:46:da:03:da:3c:a0:2b:57:9b:13: fc:64:10:0d:74:89:ed:bc:4c:ff:c2:6f:92:21:97:5c:a9:e9: d3:89:b3:a3:2f:78:43:95:4a:21:6c:69:76:4a:ba:a3:ab:ab: e9:7e:f7:a4:87:53:50:c6:2c:ca:9b:48:bf:6c:f8:47:d1:4d: 92:59:77:70:45:ad:28:3f:c5:97:37:75:4d:89:3a:38:1f:70: 82:14:0e:73:c3:39:1d:68:10:a0:f1:52:55:61:88:18:f4:dc: 87:ed:c4:dc:36:9a:51:ed:1e:5d:84:92:6b:b7:8e:57:8d:fd: dd:cd:c2:9d:eb:19:69:1a:f4:6b:90:51:df:cd:77:7a:2d:67: 75:98:f7:57:8e:5c:81:16:a0:f2:bc:9f:52:d9:c6:70:30:0f: 99:38:fd:8c:b3:d9:32:ce:bc:ba:ed:fa:23:56:b0:49:b8:c9: be:a8:35:4e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/gRdWArudCqtlfVJHtTMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDNjMjIyZmFkMmMyN2NhNjEyYzk4YzI3M2Q0ZjE2NTA2ZTFiMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mKQihsfUC8JdbsuNBbqYuCHT8eM ig3LEfTSCir2JHQE7FXmSmnWVKRNBNuNMSPpnt59E+PjFAyWgGiUfCGopwZO7rb8 pFnxJuFI4bH/8wxaJh/YUWGn/VVT0ZMA06yT5n+iGhvKeT8/TS8bQlJqjy7YwuM7 Nsjs6/I/zvzvgqcKsRexSFIQEZb3FZumze3QiNiys/5xlA73RZ6UOLDg/yX/Aj2D iDDSYo89fdpxnsV+8FF2oI4e/5zgqMQr8MBPMJK8UFhgr1AO4/MqHiju8vB/f25c QreVxkffahkivJMIrozHkK4fLTO9avtIISLqobFnCtVCwuf9spBzE3i1IwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFMQ8Ii+tLCfKYSyYwnPU8WUG4bLlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzY4YTdl YS1kNTBhLTRhMzAtOTUxMy1lOTA5YTc3Y2RhOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNjhhN2Vh LWQ1MGEtNGEzMC05NTEzLWU5MDlhNzdjZGE5OC8xL3hEd2lMNjBzSjhwaExKakNj OVR4WlFiaHN1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQGsGRAAwQD1WyoMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDCNjANBgkqhkiG9w0BAQsFAAOCAQEARVjB8LvPnsBqGKU99BVwmVnk Vz0D4STdAfXE2XSQVLmlPn2jkvrJrGNb0tSM4Mww9bC1Wx04rriwrRaOLPsZPs2D RquEx1AAJzwq2VTgVYZG2gPaPKArV5sT/GQQDXSJ7bxM/8JvkiGXXKnp04mzoy94 Q5VKIWxpdkq6o6ur6X73pIdTUMYsyptIv2z4R9FNkll3cEWtKD/Flzd1TYk6OB9w ghQOc8M5HWgQoPFSVWGIGPTch+3E3DaaUe0eXYSSa7eOV4393c3CnesZaRr0a5BR 3813ei1ndZj3V45cgRag8ryfUtnGcDAPmTj9jLPZMs68uu36I1awSbjJvqg1Tg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:49 2026 by rpki-client