This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer File: xFz9uYA84FcULRh_hrxPVnHX63s.cer (raw, json) Hash identifier: W3ce41vbdEDY7+15dbuwuOZKAkvPwzDeCLR0cl5Xl4Q= Subject key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC93228E6693F25FEC0305793201951 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56675 IP: 31.193.40.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:32:28:e6:69:3f:25:fe:c0:30:57:93:20:19:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:c6:e6:88:1c:f7:1d:a9:82:ad:8d:cf:5d: e0:e4:d4:f1:06:68:b4:6e:00:70:ab:ed:ca:7c:6f: 83:9d:e1:74:5f:c1:c0:23:f0:89:ee:97:bf:c3:68: 15:8d:c7:69:1f:5c:86:16:19:90:b2:58:70:20:60: 26:9f:31:bd:bc:c9:f9:2a:19:97:5f:cc:a5:ef:fa: a9:01:b1:e7:63:b6:88:67:fb:bb:d5:a1:1b:1a:ea: 96:1b:25:0d:20:09:ff:fd:53:1e:fd:68:45:01:b1: 09:33:fb:f3:e5:4e:4a:3b:0a:f4:29:59:b6:9f:bb: 1e:b4:e6:0f:86:73:44:8c:99:ad:26:b7:de:2c:43: b8:79:89:bf:4a:fc:7a:9d:5f:1b:91:5d:9c:61:fa: 88:89:a6:92:43:39:0d:36:69:15:e3:50:96:82:94: d0:10:fd:e1:a0:cf:39:62:0a:5c:48:1e:30:18:68: 03:ff:75:b6:6d:ad:2a:73:7d:26:7d:c7:82:26:c6: f6:20:17:b5:fc:18:99:8f:6c:6b:f5:f9:07:81:98: 8a:2f:e8:4f:ce:e2:b7:25:1a:24:41:a7:8d:bb:af: e8:af:bc:2c:a0:92:1f:1f:ec:85:34:15:3c:36:36: 1a:b7:de:9b:e3:c4:74:dd:aa:8f:cf:0f:f7:44:27: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.40.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56675 Signature Algorithm: sha256WithRSAEncryption 76:4a:ec:b3:d8:53:ca:dc:91:f6:e6:87:10:e2:38:d3:b1:08: 68:27:be:a4:e8:22:04:5c:38:d7:18:d7:0a:7f:8a:99:b2:28: 7e:50:14:fa:53:06:85:0b:52:8b:e5:92:53:82:20:dd:d3:fd: bc:03:bf:d6:06:a0:27:72:40:0c:f5:ef:f9:42:3a:38:8d:8a: 73:fa:96:85:b8:b9:05:36:99:c9:fb:d3:55:c4:14:bf:90:53: 0f:9b:aa:2a:46:d5:1b:aa:96:86:f5:78:07:3e:76:cc:ac:47: 5d:a2:99:ff:06:0b:31:1f:3e:5c:8c:da:76:a0:07:a1:f3:f7: b1:e9:5b:11:78:d3:fc:90:bb:c7:3e:ff:e8:be:55:bf:a5:5f: 98:59:e1:42:c6:09:ff:58:7f:2a:09:64:37:72:77:86:1e:d2: 10:3d:95:f6:2b:37:42:96:b4:2a:64:ea:27:17:84:8f:f3:e3: 15:d5:9c:f6:46:53:91:7e:15:7d:cc:ee:c9:88:4e:32:00:04: be:09:01:53:14:48:21:42:63:03:90:b6:ee:ab:1f:a7:a9:2d: 38:e3:d1:5c:ad:13:75:24:aa:cf:88:be:64:a1:53:d6:43:1b: b0:4d:de:fd:cb:05:8e:40:9c:2e:a2:f7:a2:72:e8:ac:d5:37: e0:92:80:f3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yTIo5mk/Jf7AMFeTIBlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDVjZmRiOTgwM2NlMDU3MTQyZDE4N2Y4NmJjNGY1NjcxZDdlYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGfG5ogc9x2pgq2Nz13g5NTxBmi0 bgBwq+3KfG+DneF0X8HAI/CJ7pe/w2gVjcdpH1yGFhmQslhwIGAmnzG9vMn5KhmX X8yl7/qpAbHnY7aIZ/u71aEbGuqWGyUNIAn//VMe/WhFAbEJM/vz5U5KOwr0KVm2 n7setOYPhnNEjJmtJrfeLEO4eYm/Svx6nV8bkV2cYfqIiaaSQzkNNmkV41CWgpTQ EP3hoM85YgpcSB4wGGgD/3W2ba0qc30mfceCJsb2IBe1/BiZj2xr9fkHgZiKL+hP zuK3JRokQaeNu6/or7wsoJIfH+yFNBU8NjYat96b48R03aqPzw/3RCdumQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMRc/bmAPOBXFC0Yf4a8T1Zx1+t7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2IyNTRi ZC0xNDVjLTQwMTktODhhNC1kNWExNzcxNzhmNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvYjI1NGJk LTE0NWMtNDAxOS04OGE0LWQ1YTE3NzE3OGY0YS8xL3hGejl1WUE4NEZjVUxSaF9o cnhQVm5IWDYzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDH8EoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdYzANBgkqhkiG9w0BAQsFAAOCAQEAdkrss9hTytyR9uaHEOI407EIaCe+pOgi BFw41xjXCn+KmbIoflAU+lMGhQtSi+WSU4Ig3dP9vAO/1gagJ3JADPXv+UI6OI2K c/qWhbi5BTaZyfvTVcQUv5BTD5uqKkbVG6qWhvV4Bz52zKxHXaKZ/wYLMR8+XIza dqAHofP3selbEXjT/JC7xz7/6L5Vv6VfmFnhQsYJ/1h/KglkN3J3hh7SED2V9is3 Qpa0KmTqJxeEj/PjFdWc9kZTkX4VfczuyYhOMgAEvgkBUxRIIUJjA5C27qsfp6kt OOPRXK0TdSSqz4i+ZKFT1kMbsE3e/csFjkCcLqL3onLorNU34JKA8w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:51 2026 by rpki-client