This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer File: xLMV8myhzbhEERaAw88EN7TBJ-Y.cer (raw, json) Hash identifier: NuhIL91+a+datHgNXuYJHn1SqRtAFj9n3N4JWZGTLrI= Subject key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F855D468335FBF2CD62D26B05960EC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208431 AS: 213342 IP: 45.136.220.0/22 IP: 194.116.239.0/24 IP: 2a0e:9b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5d:46:83:35:fb:f2:cd:62:d2:6b:05:96:0e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:32:f1:17:17:bd:90:c5:bb:e5:50:b2:70: 4d:34:bf:2d:ac:b1:da:3d:e6:03:dd:f0:de:e6:66: 40:b2:56:7e:0d:d4:be:64:d6:1e:c6:a3:1c:1a:c2: 0d:fd:37:91:e7:8d:e1:ac:ad:32:1e:f0:f2:1c:e9: d7:5f:90:b7:72:b5:4e:c6:0e:e4:d4:c5:44:92:6d: 6d:8a:2d:a7:b1:c7:5c:a4:5f:af:7f:fc:9a:15:30: 90:bb:34:4a:83:3a:72:69:eb:34:a3:3c:f1:7d:6e: 3d:eb:bb:91:49:0b:0d:49:33:28:ff:6a:14:88:c7: ba:7f:a5:6e:57:8f:3c:12:6b:c2:c3:7d:9d:78:e1: 3c:8e:7a:5c:c0:10:ad:e4:a8:45:ab:71:6b:95:21: c5:91:23:c3:57:a1:dd:f1:94:98:52:2e:7a:5a:84: 96:f2:ac:af:05:e1:0c:6d:01:2c:57:85:ad:54:c2: 41:cc:48:11:77:73:cd:bf:99:e6:78:0a:b5:47:79: 7f:ea:83:56:df:fc:13:44:2c:93:7a:f3:94:b6:5e: 74:44:d1:4d:fb:1f:91:0b:6d:11:9a:17:c8:fe:18: e1:79:1c:4d:87:bf:ca:67:fb:fb:73:8c:fd:e6:ff: 03:e0:ee:54:15:e0:2b:8d:a4:da:9f:68:20:af:e5: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.220.0/22 194.116.239.0/24 IPv6: 2a0e:9b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208431 213342 Signature Algorithm: sha256WithRSAEncryption 85:8d:d4:06:5f:3c:33:f7:58:26:e8:e0:78:28:ba:71:39:a7: 46:7d:a0:2b:33:46:01:76:31:2d:0f:bc:94:35:e4:36:34:2b: 50:05:41:87:a8:b5:ee:87:4d:ec:01:56:38:24:37:85:12:bf: fb:7f:bd:a8:f9:c1:19:9c:f7:1b:c9:3a:49:7f:de:fd:91:4c: 34:55:63:da:22:96:26:8b:b3:bb:ce:e2:6a:37:f2:7a:dc:8e: 97:fb:d4:de:3e:ac:f0:46:14:26:b7:78:86:09:5b:06:f2:e2: fb:bc:a5:82:01:ea:f5:2e:da:35:13:fb:f3:d3:15:be:89:a8: 56:2e:2c:35:44:1f:cc:28:1e:02:59:40:ff:ca:2d:90:78:aa: 5d:58:3e:71:d2:18:e2:f2:3c:ba:37:20:33:28:31:2c:5d:0c: 89:e3:b2:90:45:7c:f3:dd:ed:d7:0e:1d:cc:ed:88:65:92:e1: 29:b4:ee:9a:b4:0b:a8:64:3f:3d:67:8b:9a:0b:d1:2a:52:83: c3:3c:bf:c1:5c:53:9e:7e:0e:b0:90:c4:3e:e3:c7:f1:b3:7a: cf:7d:99:9d:4b:7f:bf:63:fe:6f:ea:58:e0:e6:2a:81:6e:26: 95:35:bf:72:63:5e:12:80:b3:ac:5a:34:28:e1:13:50:11:d4: e1:c1:e1:c2 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt/hV1GgzX78s1i0msFlg7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGIzMTVmMjZjYTFjZGI4NDQxMTE2ODBjM2NmMDQzN2I0YzEyN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4y8RcXvZDFu+VQsnBNNL8trLHa PeYD3fDe5mZAslZ+DdS+ZNYexqMcGsIN/TeR543hrK0yHvDyHOnXX5C3crVOxg7k 1MVEkm1tii2nscdcpF+vf/yaFTCQuzRKgzpyaes0ozzxfW4967uRSQsNSTMo/2oU iMe6f6VuV488EmvCw32deOE8jnpcwBCt5KhFq3FrlSHFkSPDV6Hd8ZSYUi56WoSW 8qyvBeEMbQEsV4WtVMJBzEgRd3PNv5nmeAq1R3l/6oNW3/wTRCyTevOUtl50RNFN +x+RC20RmhfI/hjheRxNh7/KZ/v7c4z95v8D4O5UFeArjaTan2ggr+X2FQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFMSzFfJsoc24RBEWgMPPBDe0wSfmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzEwYWEz ZC0xOTUyLTRkZGUtODBkNy0xMTYzZmMzYTIyMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMTBhYTNk LTE5NTItNGRkZS04MGQ3LTExNjNmYzNhMjIxZS8xL3hMTVY4bXloemJoRUVSYUF3 ODhFTjdUQkotWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLYjcAwQAwnTvMA0EAgACMAcDBQMqDptAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMuLwIDA0FeMA0GCSqGSIb3DQEBCwUAA4IB AQCFjdQGXzwz91gm6OB4KLpxOadGfaArM0YBdjEtD7yUNeQ2NCtQBUGHqLXuh03s AVY4JDeFEr/7f72o+cEZnPcbyTpJf979kUw0VWPaIpYmi7O7zuJqN/J63I6X+9Te PqzwRhQmt3iGCVsG8uL7vKWCAer1Lto1E/vz0xW+iahWLiw1RB/MKB4CWUD/yi2Q eKpdWD5x0hji8jy6NyAzKDEsXQyJ47KQRXzz3e3XDh3M7YhlkuEptO6atAuoZD89 Z4uaC9EqUoPDPL/BXFOefg6wkMQ+48fxs3rPfZmdS3+/Y/5v6ljg5iqBbiaVNb9y Y14SgLOsWjQo4RNQEdThweHC -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:25 2026 by rpki-client