This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer (raw, json) Hash identifier: AV8AWZ6QAgJqqw91Q1EorNOf4SpXV00RS2rAVGTqt0M= Subject key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E721F4575EEEC485CD26D310E0F65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205893 AS: 209007 IP: 45.11.40.0/22 IP: 185.188.29.0/24 IP: 185.202.240.0/22 IP: 194.15.45.0/24 IP: 2a0a:e240::/29 IP: 2a13:e300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:72:1f:45:75:ee:ec:48:5c:d2:6d:31:0e:0f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:f4:f5:d2:94:69:52:49:0f:d6:65:85:02: 2c:20:99:94:5b:50:27:fa:1b:b3:23:cb:9e:27:55: 04:e7:a3:97:52:c3:92:9f:69:f6:4a:b0:96:bc:37: 6e:b6:f5:44:61:46:d8:e4:bd:ed:d2:9b:b7:22:cf: 59:87:0c:3e:dc:b4:4e:ff:a8:a6:d9:04:8d:cc:29: cd:66:f0:cf:28:3f:72:36:ca:00:44:99:ed:0e:7b: bc:af:78:b3:28:43:04:82:3a:aa:d5:22:72:58:7c: 01:ab:19:25:65:f8:d3:63:b7:2b:5b:58:a1:97:0b: 3d:e5:78:1c:01:a3:ec:f3:fd:16:48:21:97:15:c1: cc:c6:37:c1:5b:21:5a:69:99:69:4b:d3:a7:ed:77: 7c:3e:c0:99:a9:fa:dd:93:e9:6c:bb:6e:3b:ff:ea: 0d:97:04:cf:a2:7b:db:63:ed:4f:26:17:ff:3d:d6: b3:c6:5c:16:a8:f5:f6:07:b2:54:80:4f:41:76:1e: 90:58:43:68:67:8c:e3:c9:9b:4e:fd:61:fe:23:48: 73:17:67:52:fe:67:1e:27:81:cf:2d:6b:b4:d0:e3: 83:85:37:37:08:20:a4:d8:d8:00:01:0a:fd:b7:91: 1d:67:0b:a8:29:c6:3e:17:13:09:0b:93:14:f7:80: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.40.0/22 185.188.29.0/24 185.202.240.0/22 194.15.45.0/24 IPv6: 2a0a:e240::/29 2a13:e300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205893 209007 Signature Algorithm: sha256WithRSAEncryption 35:4c:c2:53:53:e1:a5:18:6a:94:4d:3e:87:01:c2:b3:03:3d: e1:cf:90:e5:de:67:15:0e:cc:ba:8e:3e:7c:f2:ca:f0:95:02: 1f:19:a1:f2:40:39:e7:d6:01:03:00:ff:70:fa:a8:ad:be:2d: cd:6e:d1:15:2a:3d:c7:d5:88:6a:20:66:9d:a3:d1:a9:8d:9e: 52:66:8b:7c:74:99:6a:78:f2:ab:c3:91:28:45:65:4f:e2:fb: b3:10:81:4c:2c:93:14:43:1e:cf:5b:b3:f4:28:20:e4:0e:e2: 6d:2f:48:ee:69:3d:c0:99:6b:fe:be:21:81:37:7f:7e:c5:c3: a7:a4:f9:6f:bc:12:bb:96:fc:9c:42:ff:ae:f9:b5:ac:9f:7b: c7:02:ad:12:c4:58:07:6f:f1:38:20:64:5d:52:a2:e9:87:1c: 59:1c:ea:78:cc:e9:4d:4e:c1:d4:29:83:1e:a2:b8:5d:34:1e: 58:e9:d4:50:96:f1:e4:91:75:bf:2b:d5:10:87:a9:6f:dc:49: 10:0e:cc:dc:58:a2:08:52:90:48:4f:f3:e9:cd:41:10:5a:c3: 08:c1:fb:60:28:22:81:7a:b1:8a:5e:7b:b0:60:b2:0c:bc:b0: f2:04:f9:e7:6c:75:27:79:b9:92:f6:4d:bf:c0:a9:c5:22:c5: c2:cb:2d:17 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt5fnIfRXXu7Ehc0m0xDg9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGIyMWM4OWJjN2UyYjIxNDA2N2YzMDcwN2E0YTAzZGMzNDZlZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGv09dKUaVJJD9ZlhQIsIJmUW1An +huzI8ueJ1UE56OXUsOSn2n2SrCWvDdutvVEYUbY5L3t0pu3Is9Zhww+3LRO/6im 2QSNzCnNZvDPKD9yNsoARJntDnu8r3izKEMEgjqq1SJyWHwBqxklZfjTY7crW1ih lws95XgcAaPs8/0WSCGXFcHMxjfBWyFaaZlpS9On7Xd8PsCZqfrdk+lsu247/+oN lwTPonvbY+1PJhf/PdazxlwWqPX2B7JUgE9Bdh6QWENoZ4zjyZtO/WH+I0hzF2dS /mceJ4HPLWu00OODhTc3CCCk2NgAAQr9t5EdZwuoKcY+FxMJC5MU94C2BQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFMSyHIm8fishQGfzBwekoD3DRu4FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzYxMzdi OC0xMzgzLTRiNzEtYTE4OS0wNjNiNDAxNzQ1OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvNjEzN2I4 LTEzODMtNGI3MS1hMTg5LTA2M2I0MDE3NDU5Ny8xL3hMSWNpYngtS3lGQVpfTUhC NlNnUGNORzdnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCLQsoAwQAubwdAwQCucrwAwQAwg8tMBQEAgAC MA4DBQMqCuJAAwUDKhPjADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDJEUCAwMw bzANBgkqhkiG9w0BAQsFAAOCAQEANUzCU1PhpRhqlE0+hwHCswM94c+Q5d5nFQ7M uo4+fPLK8JUCHxmh8kA559YBAwD/cPqorb4tzW7RFSo9x9WIaiBmnaPRqY2eUmaL fHSZanjyq8ORKEVlT+L7sxCBTCyTFEMez1uz9Cgg5A7ibS9I7mk9wJlr/r4hgTd/ fsXDp6T5b7wSu5b8nEL/rvm1rJ97xwKtEsRYB2/xOCBkXVKi6YccWRzqeMzpTU7B 1CmDHqK4XTQeWOnUUJbx5JF1vyvVEIepb9xJEA7M3FiiCFKQSE/z6c1BEFrDCMH7 YCgigXqxil57sGCyDLyw8gT552x1J3m5kvZNv8CpxSLFwsstFw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:25:58 2026 by rpki-client