This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer (raw, json) Hash identifier: ZVXfKlXLOmv9jjTxnHr4hdPJuGF/sZunupPn26iHQzM= Subject key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A22F94EDF314C309847119442FC9E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203266 IP: 185.140.24.0/22 IP: 2a07:1a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2f:94:ed:f3:14:c3:09:84:71:19:44:2f:c9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:86:a8:eb:9d:3a:89:5c:94:39:18:e1:8a: e8:11:09:53:3c:20:6a:86:4b:9b:5b:7d:3e:14:9a: 59:d8:5b:6d:db:99:fb:47:a5:37:29:67:14:af:4e: ae:b1:21:d1:81:65:f6:60:ed:fb:14:21:49:a1:5c: a9:ba:88:22:57:c4:2d:9e:e5:d5:8e:46:54:80:9a: 07:3a:a2:c2:e0:8c:34:d0:5c:68:78:62:61:1d:41: b8:42:51:80:42:ee:d7:e3:42:c1:2a:3d:30:c2:f4: eb:f9:3d:9c:93:f9:04:81:52:7b:53:be:4d:0e:71: cb:cd:23:82:36:e5:f1:b8:ac:6b:44:36:6e:c1:f9: 8f:ff:79:c6:3f:77:75:98:c4:21:81:39:1c:fe:f9: 26:c4:a7:e6:42:a6:4b:a2:9a:91:51:fa:d2:38:23: c3:3f:b5:8e:b2:82:3b:20:03:3f:45:ca:95:a6:84: 23:1f:cd:bb:c4:d8:76:6b:be:37:9d:fb:4a:05:92: e5:8e:34:b8:3c:f6:a8:f1:87:2f:60:60:9b:b2:a3: b0:65:70:83:3d:e6:48:4d:81:61:14:18:65:24:c8: f1:d0:e4:57:0b:25:c9:4e:7c:a1:92:04:04:48:73: 14:ce:6e:54:e3:7f:15:96:6b:06:fc:84:bc:08:56: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.24.0/22 IPv6: 2a07:1a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203266 Signature Algorithm: sha256WithRSAEncryption 1f:ac:20:cb:47:c4:f5:5c:52:75:95:0a:43:12:78:14:f3:a0: 4e:de:ed:f4:e6:03:73:6c:ff:4a:3d:ea:36:d4:a4:3a:dd:d6: ef:ba:f6:f1:62:07:05:cd:c8:bf:69:96:92:a9:19:5f:60:b6: ba:62:64:e8:fc:da:68:08:6f:7f:24:bd:6e:85:ce:eb:01:79: 91:0a:76:1a:2f:6f:99:55:b3:8a:b6:dc:5b:eb:7a:58:17:b1: 97:d5:62:4f:19:fa:4f:ed:d2:1f:d5:21:bd:14:82:b6:11:a3: aa:c4:c0:2a:47:91:7d:40:92:04:6d:03:10:cb:5a:da:1d:68: 9f:16:71:c8:86:86:31:35:ba:d5:b5:a0:bd:f5:6a:75:64:24: 94:28:1e:9c:d7:af:db:22:19:a9:55:2a:22:a0:7c:85:20:7d: e3:4f:1a:e0:4f:b9:6d:c1:95:3e:09:44:cd:a7:a8:e6:ff:60: f4:21:79:43:c0:95:1c:30:3f:9f:50:be:ea:db:0a:c0:1a:cd: bb:ea:4c:d6:b2:79:d4:7c:52:04:7d:59:89:50:4a:52:a8:17: 13:50:84:4e:9f:60:a3:36:45:e4:01:f5:57:d6:93:9f:1b:dc: aa:06:4d:f3:10:41:fb:b1:c1:27:8b:fb:3b:61:85:08:10:20: 5f:ce:d7:a2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4oi+U7fMUwwmEcRlEL8npMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGFjYzllMjk5OTY0N2Q4MDFkNDYwNmVjOTRkNmI3MjFmN2E2NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDuGqOudOolclDkY4YroEQlTPCBq hkubW30+FJpZ2Ftt25n7R6U3KWcUr06usSHRgWX2YO37FCFJoVypuogiV8QtnuXV jkZUgJoHOqLC4Iw00FxoeGJhHUG4QlGAQu7X40LBKj0wwvTr+T2ck/kEgVJ7U75N DnHLzSOCNuXxuKxrRDZuwfmP/3nGP3d1mMQhgTkc/vkmxKfmQqZLopqRUfrSOCPD P7WOsoI7IAM/RcqVpoQjH827xNh2a743nftKBZLljjS4PPao8YcvYGCbsqOwZXCD PeZITYFhFBhlJMjx0ORXCyXJTnyhkgQESHMUzm5U438VlmsG/IS8CFYMjwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMSsyeKZlkfYAdRgbslNa3IfemQUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzA3ZThj Yy05Y2QyLTQzMjYtYTkyYS1hMDRhMmM5YWZkZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMDdlOGNj LTljZDItNDMyNi1hOTJhLWEwNGEyYzlhZmRlZS8xL3hLeko0cG1XUjlnQjFHQnV5 VTFyY2g5NlpCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYwYMA0EAgACMAcDBQMqBxpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaAjANBgkqhkiG9w0BAQsFAAOCAQEAH6wgy0fE9VxS dZUKQxJ4FPOgTt7t9OYDc2z/Sj3qNtSkOt3W77r28WIHBc3Iv2mWkqkZX2C2umJk 6PzaaAhvfyS9boXO6wF5kQp2Gi9vmVWzirbcW+t6WBexl9ViTxn6T+3SH9UhvRSC thGjqsTAKkeRfUCSBG0DEMta2h1onxZxyIaGMTW61bWgvfVqdWQklCgenNev2yIZ qVUqIqB8hSB9408a4E+5bcGVPglEzaeo5v9g9CF5Q8CVHDA/n1C+6tsKwBrNu+pM 1rJ51HxSBH1ZiVBKUqgXE1CETp9gozZF5AH1V9aTnxvcqgZN8xBB+7HBJ4v7O2GF CBAgX87Xog== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:00 2026 by rpki-client