This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer File: xEGuJhLSUnFnyD96_Bb15nTYiw8.cer (raw, json) Hash identifier: 6XagfnBcjvkb5yvYYAhf5wSQZnHrISR2eWey8nPBS0U= Subject key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA56BC13A00696F6C643BC5152EA3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60023 IP: 185.62.52.0/22 IP: 2a04:ef40::/29 IP: 2a0b:d180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:56:bc:13:a0:06:96:f6:c6:43:bc:51:52:ea:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:a4:1c:a9:52:0d:08:8b:1a:45:16:ff:eb: 2c:41:fa:f2:a7:ef:a1:87:91:06:fa:cb:0f:d4:a7: d4:88:33:d3:dd:ee:ea:74:57:bc:4d:e7:94:35:4f: 7e:c7:cb:74:03:a2:60:b2:17:7b:b9:1c:ca:9a:fb: a5:5c:6c:1d:4a:e1:95:80:1d:d2:27:e4:40:ad:be: aa:6b:3d:12:18:81:32:61:cb:e6:bc:50:11:2c:bb: e0:58:21:c1:5f:f0:e4:e9:0f:69:69:c0:22:7a:1f: 1f:69:ef:77:72:02:51:15:a5:eb:0b:4c:5d:b7:45: 93:51:3b:84:d7:60:44:19:e6:f0:68:62:bb:e8:96: 62:86:42:59:e0:e8:b1:e6:50:9c:41:e1:38:fc:f0: fb:e5:55:8c:cc:df:92:ab:d3:79:ea:25:6e:b5:5f: d5:2a:05:30:0a:54:9c:cf:30:8d:9c:77:88:6d:c6: 48:92:00:25:85:38:9d:cc:0f:83:3d:6c:21:75:ee: 67:c0:7c:8f:b2:f0:9e:ae:7e:57:63:6e:1c:7c:32: ec:52:51:69:ff:40:cd:e5:57:af:18:9f:99:56:f7: 4f:ed:d6:10:90:6d:e3:c6:c3:94:04:68:db:9a:52: 90:10:d7:87:ba:df:27:30:37:7d:76:85:d6:ec:82: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.52.0/22 IPv6: 2a04:ef40::/29 2a0b:d180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60023 Signature Algorithm: sha256WithRSAEncryption 3a:a5:4f:f9:06:d6:cf:5f:0c:b2:92:a1:8b:b0:33:31:29:45: a0:61:2a:92:ee:48:40:17:49:8b:f2:cc:4b:e7:9c:a0:1a:8f: f3:de:a4:12:b7:fb:fb:38:56:48:5c:f8:44:b4:8b:a9:b6:20: 44:12:c3:84:3f:1f:6f:d3:76:97:d6:bc:33:86:5c:f8:08:74: 01:72:fa:1c:41:e7:f2:cc:87:bf:5d:65:77:22:14:51:e4:8d: 72:be:f6:89:58:34:bd:5f:43:74:ca:fe:fc:eb:14:ef:2f:d2: 5d:f3:f6:8e:35:85:d0:f4:ad:95:3a:69:12:e8:24:50:37:41: 9c:c9:14:28:d4:64:b4:18:23:1b:33:ca:d1:ef:db:df:9b:60: 82:99:42:70:88:c1:57:2a:77:d0:3d:bf:d9:29:99:92:6c:10: 55:90:53:ce:92:c9:ae:70:68:3d:d0:33:5d:5d:d9:26:07:2d: 35:8e:a0:7e:e3:3d:fe:aa:05:3c:ff:0e:7f:c0:47:e0:8b:66: 75:68:ce:0b:6d:20:6c:d2:f6:b8:8f:13:5e:e5:a1:f3:5a:0d: 49:f1:c8:0f:b6:22:c0:b8:b0:d2:e9:e5:4d:ec:56:f4:07:3f: 9c:1d:59:34:d9:99:86:e5:fe:80:bd:f7:40:fc:b6:be:70:c2: 85:dc:9d:9a -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt9yla8E6AGlvbGQ7xRUuo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQxYWUyNjEyZDI1MjcxNjdjODNmN2FmYzE2ZjVlNjc0ZDg4YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCmkHKlSDQiLGkUW/+ssQfryp++h h5EG+ssP1KfUiDPT3e7qdFe8TeeUNU9+x8t0A6Jgshd7uRzKmvulXGwdSuGVgB3S J+RArb6qaz0SGIEyYcvmvFARLLvgWCHBX/Dk6Q9pacAieh8fae93cgJRFaXrC0xd t0WTUTuE12BEGebwaGK76JZihkJZ4Oix5lCcQeE4/PD75VWMzN+Sq9N56iVutV/V KgUwClSczzCNnHeIbcZIkgAlhTidzA+DPWwhde5nwHyPsvCern5XY24cfDLsUlFp /0DN5VevGJ+ZVvdP7dYQkG3jxsOUBGjbmlKQENeHut8nMDd9doXW7IJNbQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFMRBriYS0lJxZ8g/evwW9eZ02IsPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2VjZGUz ZS0xZmNmLTQ1MzEtYjBmOS0yNGU3ZTZhZGExZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvZWNkZTNl LTFmY2YtNDUzMS1iMGY5LTI0ZTdlNmFkYTFlMi8xL3hFR3VKaExTVW5GbnlEOTZf QmIxNW5UWWl3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQCuT40MBQEAgACMA4DBQMqBO9AAwUDKgvRgDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6ncwDQYJKoZIhvcNAQELBQADggEBADql T/kG1s9fDLKSoYuwMzEpRaBhKpLuSEAXSYvyzEvnnKAaj/PepBK3+/s4Vkhc+ES0 i6m2IEQSw4Q/H2/TdpfWvDOGXPgIdAFy+hxB5/LMh79dZXciFFHkjXK+9olYNL1f Q3TK/vzrFO8v0l3z9o41hdD0rZU6aRLoJFA3QZzJFCjUZLQYIxszytHv29+bYIKZ QnCIwVcqd9A9v9kpmZJsEFWQU86Sya5waD3QM11d2SYHLTWOoH7jPf6qBTz/Dn/A R+CLZnVozgttIGzS9riPE17lofNaDUnxyA+2IsC4sNLp5U3sVvQHP5wdWTTZmYbl /oC990D8tr5wwoXcnZo= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:30 2026 by rpki-client