This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer File: xFvSa8XYHu6cjhotDXjRDarggZU.cer (raw, json) Hash identifier: 1XrTRvQhkAG/WtMeTPaUSOpu2IKZljcCuotBquvZNTg= Subject key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80A7D6024E009FED5EB19D48D04C52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51168 IP: 91.216.4.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:a7:d6:02:4e:00:9f:ed:5e:b1:9d:48:d0:4c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:76:28:9b:32:b1:ed:ea:d7:6d:64:b1:7b: b7:1f:5c:50:fb:36:b3:a0:3a:02:f0:28:3c:02:6e: 76:b4:7f:5d:d3:7c:c8:7a:98:a7:8f:79:f7:63:b1: 5a:5a:25:e9:6e:c3:0d:a4:19:a9:99:43:75:cc:e0: f9:c4:92:a1:c9:f2:e9:df:45:0e:59:e1:60:db:64: cb:8c:fc:f5:a3:ee:0a:e6:49:ab:87:f1:ff:ca:ae: 6a:3c:35:38:8e:1c:97:b3:c6:0a:1f:67:c8:06:a2: 76:59:4b:f6:c8:50:22:f0:46:ce:ed:ec:fe:91:1e: 78:de:88:0b:ef:40:4d:71:0a:a4:4f:fd:41:34:5e: c3:f3:18:66:ee:da:43:6c:1f:57:b5:21:8a:0d:32: aa:7b:93:b1:ee:8f:05:8b:ca:a6:8f:d7:0e:41:69: 28:8b:df:43:98:6a:86:9f:b9:35:74:e0:e0:99:95: ac:63:be:79:ce:2d:27:0d:7e:6f:88:b7:16:86:ca: 95:aa:68:a4:0e:2b:8d:8a:c4:13:1a:0f:4b:d8:0b: e6:05:5e:77:bf:18:ab:89:15:6c:e9:94:2a:8b:fe: ab:a3:92:2f:75:fa:a0:69:8a:1f:e3:bc:25:cb:49: 8c:27:68:30:d1:f9:3d:17:bb:29:cd:34:a5:af:42: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.4.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51168 Signature Algorithm: sha256WithRSAEncryption 4e:de:2c:b8:bd:29:bd:6e:cd:bb:bc:2a:9f:bf:7d:f8:a6:fd: 95:2d:66:eb:82:d1:ea:91:b8:f3:7e:0d:90:7d:49:b9:f8:8e: 91:46:1f:1b:cf:fa:da:ec:16:8b:b5:b5:b1:6f:48:c1:77:b0: a0:4c:e3:72:d3:38:4e:05:9c:d1:7d:a7:ee:35:70:c8:bd:2e: 4c:f2:1b:07:d7:05:e7:38:46:89:1d:e6:f6:b6:06:8d:47:45: 5f:7f:10:60:0d:7c:43:b8:a0:57:bf:80:76:7e:21:35:01:ab: a8:90:b5:b5:1e:b5:c2:6a:fa:45:7b:0a:0c:b5:98:22:c7:03: 6c:c8:d1:2f:8f:5a:9b:7d:8f:98:d9:2b:15:2d:64:81:bb:34: 70:9e:fc:92:d4:c4:00:8d:80:a5:67:70:61:a1:85:f7:22:5e: af:47:b8:e3:71:6c:01:61:5a:4b:93:63:7c:a2:77:15:57:df: 99:f3:26:19:50:f9:27:1d:e2:d1:a2:82:a5:97:5e:89:9a:db: f0:f4:a2:c2:96:2b:44:66:3b:27:44:83:ad:b0:fc:a8:c4:09: 88:2e:d0:bb:46:df:8d:95:cf:df:05:f8:f3:a2:0d:b9:ff:d9: ea:3b:f8:f8:52:0a:c0:a6:eb:f0:09:7b:c7:b0:c6:1e:6d:1f: be:ee:d5:71 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gKfWAk4An+1esZ1I0ExSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDViZDI2YmM1ZDgxZWVlOWM4ZTFhMmQwZDc4ZDEwZGFhZTA4MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM52KJsyse3q121ksXu3H1xQ+zaz oDoC8Cg8Am52tH9d03zIepinj3n3Y7FaWiXpbsMNpBmpmUN1zOD5xJKhyfLp30UO WeFg22TLjPz1o+4K5kmrh/H/yq5qPDU4jhyXs8YKH2fIBqJ2WUv2yFAi8EbO7ez+ kR543ogL70BNcQqkT/1BNF7D8xhm7tpDbB9XtSGKDTKqe5Ox7o8Fi8qmj9cOQWko i99DmGqGn7k1dODgmZWsY755zi0nDX5viLcWhsqVqmikDiuNisQTGg9L2AvmBV53 vxiriRVs6ZQqi/6ro5IvdfqgaYof47wly0mMJ2gw0fk9F7spzTSlr0KfqQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMRb0mvF2B7unI4aLQ140Q2q4IGVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzg3ODI5 YS1lMzMyLTQyNGYtOWM0Zi1lNDQ3YmUyYWM2OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvODc4Mjlh LWUzMzItNDI0Zi05YzRmLWU0NDdiZTJhYzY4ZS8xL3hGdlNhOFhZSHU2Y2pob3RE WGpSRGFyZ2daVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9gEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDH4DANBgkqhkiG9w0BAQsFAAOCAQEATt4suL0pvW7Nu7wqn799+Kb9lS1m64LR 6pG4834NkH1JufiOkUYfG8/62uwWi7W1sW9IwXewoEzjctM4TgWc0X2n7jVwyL0u TPIbB9cF5zhGiR3m9rYGjUdFX38QYA18Q7igV7+Adn4hNQGrqJC1tR61wmr6RXsK DLWYIscDbMjRL49am32PmNkrFS1kgbs0cJ78ktTEAI2ApWdwYaGF9yJer0e443Fs AWFaS5NjfKJ3FVffmfMmGVD5Jx3i0aKCpZdeiZrb8PSiwpYrRGY7J0SDrbD8qMQJ iC7Qu0bfjZXP3wX486INuf/Z6jv4+FIKwKbr8Al7x7DGHm0fvu7VcQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:28:34 2026 by rpki-client