This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer File: xFyYQwiFYolxMHxZtc8kFoIQI3g.cer (raw, json) Hash identifier: KspidZlXalVfVIYsKSHJgGHROWK+jfMDG4BMPGPlV3s= Subject key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70C9C82EEABBB9779BC9D6A0454D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8774 IP: 109.237.0.0/20 IP: 185.113.208.0/22 IP: 195.135.212.0/22 IP: 2a05:3740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:9c:82:ee:ab:bb:97:79:bc:9d:6a:04:54:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45c98430885628971307c59b5cf241682102378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:79:29:15:02:41:fc:da:3b:31:6e:06:ac: e0:f0:73:21:a8:1f:1a:bf:a9:dd:e6:2f:80:f7:7d: 63:82:d8:2b:fa:1b:a6:87:42:c6:bf:7f:de:fa:22: 07:16:8b:9e:09:aa:8a:ac:77:94:b5:0d:4f:0f:d3: 3a:3e:8b:2b:a3:5f:45:15:bc:01:ef:6c:e6:51:0f: 25:8b:68:88:48:1e:28:da:cb:87:40:5c:ea:61:14: 39:f4:fb:d3:24:a9:80:85:7c:2e:81:35:0e:a4:b5: da:e2:6c:31:75:91:5a:8f:98:61:d3:0d:b8:2b:20: 07:40:56:5d:fd:c9:ea:36:e0:47:29:18:0b:31:13: 12:43:f4:8f:9e:96:8f:f4:2b:58:1b:5e:ac:b6:a1: 89:6e:93:1d:3e:7d:8d:e8:8c:fa:21:c5:df:fb:43: 0d:a4:ac:51:d8:bd:b8:8d:35:5e:cc:1d:ba:93:54: cf:bb:f7:5e:fd:b0:3a:66:8b:42:14:93:49:62:46: 6e:a7:47:1d:7c:62:7d:94:dd:01:25:9c:f8:3b:fe: 90:e0:49:56:09:e7:29:74:a5:3b:f5:b7:fc:86:16: 68:35:76:e9:b4:c1:a9:95:df:06:ab:ff:a6:ae:d3: 5f:85:37:0c:a2:69:97:3a:2a:98:1d:2b:48:f6:dd: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.0.0/20 185.113.208.0/22 195.135.212.0/22 IPv6: 2a05:3740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8774 Signature Algorithm: sha256WithRSAEncryption 68:a7:22:b6:eb:34:3c:4a:af:96:d1:1c:f9:7e:dc:b9:0b:73: 95:40:d3:93:37:78:72:f8:e7:2c:6b:40:b3:b9:a3:b2:51:81: c1:d7:19:94:06:48:8c:f3:e5:9d:d7:6e:5b:eb:79:30:2a:c1: 09:b3:6d:0c:55:35:44:e8:fd:4f:48:75:f3:05:3d:45:ef:48: 51:1f:c4:18:58:f3:ec:1f:bc:d6:8e:0a:95:4d:b1:8c:e5:27: 7a:d0:4f:16:0e:ab:f8:6b:40:31:e4:06:a7:8a:be:de:1a:ae: 75:1f:e8:eb:51:fb:78:19:9a:1f:c6:90:49:e8:0d:21:b2:1f: 8b:bd:98:f2:93:93:4a:f5:5c:00:f5:22:07:23:dc:bb:c7:f6: 9a:22:6e:e2:0a:7d:62:9e:21:9f:ef:c1:9c:57:e7:12:24:cb: 6a:ba:7e:b3:e7:e3:2d:ba:91:7d:e2:4e:d9:a5:e6:65:7a:1b: 8e:a7:23:b8:28:72:9c:2d:8a:47:50:0c:eb:04:74:aa:eb:e5: 3b:b6:10:43:e8:d2:70:7c:7b:0c:d9:8c:76:df:15:69:55:69: c1:67:af:04:ea:0f:cc:24:cb:9b:f5:a3:8c:0f:11:1c:ee:38: e5:19:cd:e7:75:09:03:a3:2f:68:b0:5a:4d:07:27:d4:ff:44: 47:80:f2:c2 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3xwycgu6ru5d5vJ1qBFTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDVjOTg0MzA4ODU2Mjg5NzEzMDdjNTliNWNmMjQxNjgyMTAyMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrl5KRUCQfzaOzFuBqzg8HMhqB8a v6nd5i+A931jgtgr+humh0LGv3/e+iIHFoueCaqKrHeUtQ1PD9M6Posro19FFbwB 72zmUQ8li2iISB4o2suHQFzqYRQ59PvTJKmAhXwugTUOpLXa4mwxdZFaj5hh0w24 KyAHQFZd/cnqNuBHKRgLMRMSQ/SPnpaP9CtYG16stqGJbpMdPn2N6Iz6IcXf+0MN pKxR2L24jTVezB26k1TPu/de/bA6ZotCFJNJYkZup0cdfGJ9lN0BJZz4O/6Q4ElW CecpdKU79bf8hhZoNXbptMGpld8Gq/+mrtNfhTcMommXOiqYHStI9t3VBQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFMRcmEMIhWKJcTB8WbXPJBaCECN4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzMwN2Mz My0zOGE3LTRmZGEtOWEwOC05YWJkY2EzOWQ0ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvMzA3YzMz LTM4YTctNGZkYS05YTA4LTlhYmRjYTM5ZDRmNy8xL3hGeVlRd2lGWW9seE1IeFp0 YzhrRm9JUUkzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEbe0AAwQCuXHQAwQCw4fUMA0EAgACMAcDBQMq BTdAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiJGMA0GCSqGSIb3DQEBCwUAA4IB AQBopyK26zQ8Sq+W0Rz5fty5C3OVQNOTN3hy+Ocsa0CzuaOyUYHB1xmUBkiM8+Wd 125b63kwKsEJs20MVTVE6P1PSHXzBT1F70hRH8QYWPPsH7zWjgqVTbGM5Sd60E8W Dqv4a0Ax5Aanir7eGq51H+jrUft4GZofxpBJ6A0hsh+LvZjyk5NK9VwA9SIHI9y7 x/aaIm7iCn1iniGf78GcV+cSJMtqun6z5+MtupF94k7ZpeZlehuOpyO4KHKcLYpH UAzrBHSq6+U7thBD6NJwfHsM2Yx23xVpVWnBZ68E6g/MJMub9aOMDxEc7jjlGc3n dQkDoy9osFpNByfU/0RHgPLC -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:12 2026 by rpki-client