This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer File: xJ7uJN6rVSARm2o9oEV9OcQGQds.cer (raw, json) Hash identifier: 5e6PLTuqFGsNoJuACC7F5eSLGEM83T1J8xjGwozGabg= Subject key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38950FF6FD625DE523C489A06BBA59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43667 IP: 77.91.192.0/21 IP: 94.198.128.0/21 IP: 185.32.132.0/22 IP: 2a00:be20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:95:0f:f6:fd:62:5d:e5:23:c4:89:a0:6b:ba:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c49eee24deab5520119b6a3da0457d39c40641db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:5d:cb:de:2b:d3:60:4c:d3:4e:f5:8e:c1: fe:76:4a:6a:4a:71:21:8c:ff:44:37:04:7f:05:a8: fb:23:cc:2f:2d:42:96:6e:2a:eb:87:e8:fb:e9:a3: 02:3d:50:bf:25:cb:a1:99:b4:69:40:80:16:20:5a: af:d3:6d:51:64:39:3f:d7:6e:ec:2a:26:a8:94:2b: 98:09:76:39:4c:ae:91:ed:fd:97:19:d4:c4:c7:0c: 01:01:ff:7b:2b:5d:db:c1:40:a5:14:c2:2d:ff:ff: 78:d1:7e:48:0c:a1:4e:0b:d2:a1:c6:24:7b:69:ef: c8:a2:69:fe:ae:7c:90:76:bb:5f:0e:79:41:e2:99: 0e:c8:24:d8:ed:d0:ae:6d:12:87:2a:45:f6:92:dd: 21:78:a3:a8:4a:4d:b8:75:6d:63:98:b9:8e:4f:2a: 59:76:e4:81:2c:b4:25:f3:28:ac:4d:a9:46:d0:2b: 16:ae:d5:9d:48:c2:a2:83:f0:7b:57:20:6c:84:c3: f2:5b:02:48:9b:54:49:cf:f7:ab:3d:fa:0d:34:d5: 8e:f3:ea:b7:cf:d2:67:80:22:3c:1c:c2:4d:84:9b: 9d:10:87:96:32:30:6e:09:1e:a5:51:be:ab:16:b8: 31:75:12:cd:4d:89:59:73:ff:db:60:b3:f2:33:aa: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.192.0/21 94.198.128.0/21 185.32.132.0/22 IPv6: 2a00:be20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43667 Signature Algorithm: sha256WithRSAEncryption 5c:87:44:df:3d:33:a1:6c:c7:68:dc:46:c1:6b:2c:06:f7:69: ac:6f:d3:c4:38:0d:0e:ec:21:e0:c5:5b:7e:ad:f7:b8:1d:7a: 81:30:69:fe:c9:67:b1:43:47:b2:99:9c:9b:fd:5e:75:80:e3: 4c:44:96:4e:76:53:54:ef:a5:20:72:f9:ae:a0:44:f6:d8:7f: c0:e9:85:5a:37:4d:94:d4:03:24:3d:37:69:f8:40:78:c9:34: 08:b5:7b:65:47:b7:44:76:5c:59:ac:a2:c5:69:31:c7:4a:91: 09:41:86:f1:bd:fe:41:17:2b:5a:da:1f:8c:96:ad:77:fc:45: c8:67:76:22:a3:56:9a:e7:73:a4:48:21:6d:02:a8:a9:87:cb: a2:00:96:c6:b3:74:ce:d9:cf:05:9c:b9:81:26:20:2a:45:a6: 41:2b:a5:d8:9c:1e:64:89:7a:7f:4e:f0:24:bf:88:1b:b3:69: 7e:d0:60:a7:dd:14:37:e5:8a:84:e9:01:79:1d:06:7d:a6:1f: b8:d2:bd:14:ab:a8:c6:31:b8:50:0f:c8:c1:e6:83:cc:9a:cf: f8:f4:4a:23:17:5f:04:be:10:24:1e:db:f0:c5:54:7e:58:6f: 8a:ec:ff:92:67:0c:c3:d9:dc:c8:c5:5f:85:b1:5e:d4:a6:9f: e1:23:aa:7a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt+OJUP9v1iXeUjxImga7pZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDllZWUyNGRlYWI1NTIwMTE5YjZhM2RhMDQ1N2QzOWM0MDY0MWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKldy94r02BM0071jsH+dkpqSnEh jP9ENwR/Baj7I8wvLUKWbirrh+j76aMCPVC/JcuhmbRpQIAWIFqv021RZDk/127s KiaolCuYCXY5TK6R7f2XGdTExwwBAf97K13bwUClFMIt//940X5IDKFOC9KhxiR7 ae/Iomn+rnyQdrtfDnlB4pkOyCTY7dCubRKHKkX2kt0heKOoSk24dW1jmLmOTypZ duSBLLQl8yisTalG0CsWrtWdSMKig/B7VyBshMPyWwJIm1RJz/erPfoNNNWO8+q3 z9JngCI8HMJNhJudEIeWMjBuCR6lUb6rFrgxdRLNTYlZc//bYLPyM6rGDQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMSe7iTeq1UgEZtqPaBFfTnEBkHbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzk3ODZm NC1kZDU0LTRlNDMtYWVhNC01OWM0YzEwYWViZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvOTc4NmY0 LWRkNTQtNGU0My1hZWE0LTU5YzRjMTBhZWJkOS8xL3hKN3VKTjZyVlNBUm0ybzlv RVY5T2NRR1Fkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDTVvAAwQDXsaAAwQCuSCEMA0EAgACMAcDBQAq AL4gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqkzANBgkqhkiG9w0BAQsFAAOC AQEAXIdE3z0zoWzHaNxGwWssBvdprG/TxDgNDuwh4MVbfq33uB16gTBp/slnsUNH spmcm/1edYDjTESWTnZTVO+lIHL5rqBE9th/wOmFWjdNlNQDJD03afhAeMk0CLV7 ZUe3RHZcWayixWkxx0qRCUGG8b3+QRcrWtofjJatd/xFyGd2IqNWmudzpEghbQKo qYfLogCWxrN0ztnPBZy5gSYgKkWmQSul2JweZIl6f07wJL+IG7NpftBgp90UN+WK hOkBeR0GfaYfuNK9FKuoxjG4UA/IweaDzJrP+PRKIxdfBL4QJB7b8MVUflhviuz/ kmcMw9ncyMVfhbFe1Kaf4SOqeg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:29 2026 by rpki-client