This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer File: xJkOwgER9C-2LzmoHHOSqSGVW_I.cer (raw, json) Hash identifier: POYvn4o8Iae4yD63fo7GdW0UsJtRU/NymHnuN5iuDFk= Subject key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C507F0CEBE5B19E1A7D9F443368EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199585 IP: 45.158.108.0/22 IP: 81.162.208.0/21 IP: 194.93.99.0/24 IP: 2a0f:5a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:50:7f:0c:eb:e5:b1:9e:1a:7d:9f:44:33:68:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4990ec20111f42fb62f39a81c7392a921955bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:65:a1:df:dc:a3:51:ec:98:bc:f8:eb:85: c9:50:3a:e9:c9:0b:f6:3a:e3:1a:f5:fa:7e:80:87: 9d:06:29:27:0c:ae:96:d3:cf:76:58:dc:fa:c0:c7: a2:bf:d6:b1:db:0d:d1:09:b3:66:25:c9:59:1c:3a: 99:27:bc:4c:00:fb:a8:59:ef:aa:d6:82:be:3c:6e: 47:55:7f:34:ff:14:e4:9d:46:5e:32:99:c5:f2:25: 85:4f:8d:61:8c:4b:d8:e5:d3:79:c8:7e:9a:5e:ba: 9c:b5:7e:7d:01:4c:25:46:e1:60:ec:7c:fa:70:af: eb:c1:cf:c0:6d:b5:38:4a:0b:da:60:a1:c5:77:c4: 49:c8:ab:18:3d:f8:31:67:7d:68:8b:06:65:ba:f7: e9:dc:6d:ba:8a:56:cd:2a:42:4d:1d:92:d1:53:28: 8f:e8:01:a4:6d:fc:3b:da:df:06:65:9f:61:d9:8c: 18:8a:7d:26:4d:f0:69:02:73:5b:dd:b9:ae:81:01: 15:b2:c8:97:c5:ef:e5:85:7a:36:42:c9:8f:1b:e6: cf:32:ef:94:64:b7:9a:31:ee:df:16:db:6c:73:cb: 60:dd:7a:9f:dd:8f:d5:29:93:07:62:a8:4a:19:16: b6:58:c3:56:34:7a:a5:c4:e0:d3:f1:00:5f:7f:d8: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.108.0/22 81.162.208.0/21 194.93.99.0/24 IPv6: 2a0f:5a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199585 Signature Algorithm: sha256WithRSAEncryption 9e:c5:19:bc:2c:b6:b2:90:82:5e:82:a3:a1:32:e9:05:30:36: 46:ed:28:42:7f:a7:8d:77:91:19:2b:4c:79:e4:07:6d:41:80: 02:e7:ba:ff:a5:77:c2:46:b5:93:11:14:28:10:6a:52:44:ac: be:f6:e2:73:d9:e3:13:83:c0:d6:3f:db:2d:c0:12:18:ef:3c: 95:9e:46:8a:a2:4f:f0:25:7a:99:96:87:6e:b9:76:04:9b:f4: 3e:95:a7:de:0b:e9:88:b2:1b:4d:25:3d:4e:e9:65:78:7f:52: 93:76:ae:e4:04:a5:58:08:34:c2:74:69:c5:16:be:a3:91:9e: 34:5e:1a:5a:0d:77:33:6a:aa:b9:4d:e3:a6:18:b9:00:a7:92: d8:bc:4c:ca:12:d7:55:07:b8:4c:51:90:07:11:73:43:c8:53: 0e:df:17:4e:e5:54:c4:d2:7c:ff:3e:11:84:4d:96:a0:61:44: 9b:c9:01:24:62:c8:45:9d:e4:8b:f2:b7:ba:0a:9b:ad:06:69: e5:37:f6:f5:82:fc:5d:39:3e:46:d4:e1:f4:d5:c4:e5:dd:3c: dd:88:b8:b0:9e:5d:e2:88:4a:32:ff:28:b8:17:f6:b4:a3:77: 20:26:e5:62:1c:20:f4:46:c2:25:67:78:62:8d:cd:36:79:a8: 9c:94:b2:aa -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9XFB/DOvlsZ4afZ9EM2jvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk5MGVjMjAxMTFmNDJmYjYyZjM5YTgxYzczOTJhOTIxOTU1YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP1lod/co1HsmLz464XJUDrpyQv2 OuMa9fp+gIedBiknDK6W0892WNz6wMeiv9ax2w3RCbNmJclZHDqZJ7xMAPuoWe+q 1oK+PG5HVX80/xTknUZeMpnF8iWFT41hjEvY5dN5yH6aXrqctX59AUwlRuFg7Hz6 cK/rwc/AbbU4SgvaYKHFd8RJyKsYPfgxZ31oiwZluvfp3G26ilbNKkJNHZLRUyiP 6AGkbfw72t8GZZ9h2YwYin0mTfBpAnNb3bmugQEVssiXxe/lhXo2QsmPG+bPMu+U ZLeaMe7fFttsc8tg3Xqf3Y/VKZMHYqhKGRa2WMNWNHqlxODT8QBff9j/3wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMSZDsIBEfQvti85qBxzkqkhlVvyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzljN2Nl NC0yY2Q0LTQ4NTQtODg0MC1iMGZlOTIyMWVmYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOWM3Y2U0 LTJjZDQtNDg1NC04ODQwLWIwZmU5MjIxZWZiNy8xL3hKa093Z0VSOUMtMkx6bW9I SE9TcVNHVldfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLZ5sAwQDUaLQAwQAwl1jMA0EAgACMAcDBQMq D1qAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLoTANBgkqhkiG9w0BAQsFAAOC AQEAnsUZvCy2spCCXoKjoTLpBTA2Ru0oQn+njXeRGStMeeQHbUGAAue6/6V3wka1 kxEUKBBqUkSsvvbic9njE4PA1j/bLcASGO88lZ5GiqJP8CV6mZaHbrl2BJv0PpWn 3gvpiLIbTSU9TulleH9Sk3au5ASlWAg0wnRpxRa+o5GeNF4aWg13M2qquU3jphi5 AKeS2LxMyhLXVQe4TFGQBxFzQ8hTDt8XTuVUxNJ8/z4RhE2WoGFEm8kBJGLIRZ3k i/K3ugqbrQZp5Tf29YL8XTk+RtTh9NXE5d083Yi4sJ5d4ohKMv8ouBf2tKN3ICbl Yhwg9EbCJWd4Yo3NNnmonJSyqg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:20 2026 by rpki-client