This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer File: xLCiTzhOiW3lHlg149KEYHtJxZE.cer (raw, json) Hash identifier: GMOzvBHV99v6R9ECHZcF2weB1K5XNknfdqbDT8XZIQk= Subject key identifier: C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4CE532FC026792BF63BBBAC2710B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209280 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ce:53:2f:c0:26:79:2b:f6:3b:bb:ac:27:10:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b0a24f384e896de51e5835e3d284607b49c591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:0e:90:41:ec:86:e4:58:6f:88:8c:93:37: 1e:08:a9:3e:64:cb:0a:74:ad:32:ba:4f:5e:04:99: 12:1a:d1:72:d3:9d:33:f6:3d:a2:82:e1:d4:00:a7: 0b:30:0d:f4:42:e9:25:3b:49:9d:9c:96:c4:98:4e: c0:2e:0c:42:26:b4:9a:84:db:f5:16:e4:d6:88:af: 5b:ad:a9:99:7f:38:fd:95:cf:04:4d:eb:97:3e:e2: c3:3b:ae:8c:27:70:f0:d3:aa:f5:b1:63:b8:92:80: 6f:c1:9f:4e:f2:12:15:9b:5d:c9:84:eb:e1:e3:9a: 36:d1:db:f5:c1:de:1f:3c:ed:59:3c:40:14:6f:0b: 67:f0:db:0b:64:e1:98:6d:69:62:85:a8:fc:a1:32: 56:27:d3:47:21:22:80:88:39:e2:62:7e:14:4a:22: 9d:41:d5:a1:94:6b:1c:a3:82:42:29:dd:d4:0c:bc: 3e:ab:88:40:44:40:93:bf:61:82:d2:66:f9:d4:21: 8b:ac:98:ff:a6:1f:0f:7a:0c:c8:b8:5c:a2:79:6e: f4:25:b9:89:c8:b7:31:12:8c:d4:45:44:61:7d:d6: c3:1b:28:96:ce:6c:26:2c:ad:ff:ef:22:62:27:78: 2d:41:dc:6d:35:88:e6:33:27:fc:ef:e2:ba:3d:93: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209280 Signature Algorithm: sha256WithRSAEncryption 86:fb:20:bc:80:f6:bd:49:0a:47:1c:71:0e:31:5e:7a:13:d5: a5:09:ef:5a:26:21:88:54:d4:14:a4:01:f2:e0:b2:f4:79:80: ef:8b:b5:37:70:3b:9e:5f:e5:fc:1d:4d:40:aa:5b:2b:67:67: 83:c4:44:61:7f:dc:40:64:e1:c9:20:47:f4:5b:b6:14:98:4b: fe:c6:26:47:41:e6:d5:09:36:0c:16:bc:b3:6a:8e:b1:f4:d3: bc:ca:f2:e7:f8:cb:53:89:79:32:52:9f:de:04:4e:cb:4d:46: 7a:c7:39:cd:a8:fe:b2:1b:1a:6e:e3:65:6a:ff:06:1c:88:ef: 1e:44:36:80:d6:8e:65:b9:59:17:cf:5e:ca:8f:03:7a:0b:c4: c3:34:63:42:e9:4a:64:ad:ed:c2:12:39:fb:cb:09:5c:9d:89: fd:d9:4e:d4:7e:c3:2d:fd:ec:4c:62:47:b1:ef:04:0f:d0:e7: 3d:ee:9a:6c:06:ed:dc:88:89:c2:9b:a4:29:59:49:81:d6:2a: 6d:e9:3d:86:3a:45:a0:d8:1c:b7:6e:45:e8:f8:80:1b:00:6c: 41:e2:4c:e8:06:66:f3:1d:10:34:52:d4:14:e8:fb:8b:a0:f2: f2:4f:27:b2:83:ee:60:11:06:c1:87:e8:a2:08:7a:dc:75:39: 29:fb:e5:65 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pM5TL8AmeSv2O7usJxCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGIwYTI0ZjM4NGU4OTZkZTUxZTU4MzVlM2QyODQ2MDdiNDljNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EgOkEHshuRYb4iMkzceCKk+ZMsK dK0yuk9eBJkSGtFy050z9j2iguHUAKcLMA30QuklO0mdnJbEmE7ALgxCJrSahNv1 FuTWiK9bramZfzj9lc8ETeuXPuLDO66MJ3Dw06r1sWO4koBvwZ9O8hIVm13JhOvh 45o20dv1wd4fPO1ZPEAUbwtn8NsLZOGYbWlihaj8oTJWJ9NHISKAiDniYn4USiKd QdWhlGsco4JCKd3UDLw+q4hARECTv2GC0mb51CGLrJj/ph8PegzIuFyieW70JbmJ yLcxEozURURhfdbDGyiWzmwmLK3/7yJiJ3gtQdxtNYjmMyf87+K6PZNFDQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMSwok84Tolt5R5YNePShGB7ScWRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2UyOTI3 ZS1iZmYwLTRjNjEtOTE4OC1iODZhNmYyNjI2MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZTI5Mjdl LWJmZjAtNGM2MS05MTg4LWI4NmE2ZjI2MjYzMy8xL3hMQ2lUemhPaVczbEhsZzE0 OUtFWUh0SnhaRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxgDANBgkqhkiG9w0BAQsFAAOCAQEAhvsgvID2vUkK RxxxDjFeehPVpQnvWiYhiFTUFKQB8uCy9HmA74u1N3A7nl/l/B1NQKpbK2dng8RE YX/cQGThySBH9Fu2FJhL/sYmR0Hm1Qk2DBa8s2qOsfTTvMry5/jLU4l5MlKf3gRO y01Gesc5zaj+shsabuNlav8GHIjvHkQ2gNaOZblZF89eyo8DegvEwzRjQulKZK3t whI5+8sJXJ2J/dlO1H7DLf3sTGJHse8ED9DnPe6abAbt3IiJwpukKVlJgdYqbek9 hjpFoNgct25F6PiAGwBsQeJM6AZm8x0QNFLUFOj7i6Dy8k8nsoPuYBEGwYfoogh6 3HU5KfvlZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:36 2026 by rpki-client