This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer File: xM-i_E8u6evIO-eTZrCulNHyv8c.cer (raw, json) Hash identifier: zRblb4JTddRBa9v46onhj1NjabJAsX4FC5WjFEZ8RiE= Subject key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FB8588A0D91C7F03C972C95BADDEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.37.131.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b8:58:8a:0d:91:c7:f0:3c:97:2c:95:ba:dd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:5b:8d:b7:69:f2:22:d4:07:97:37:34:78: 5d:8e:70:76:7b:e1:a8:25:de:fb:95:e3:3b:a1:8a: f1:d7:30:00:4d:02:64:ef:01:00:89:51:81:e0:43: 18:d0:5e:c8:04:c2:22:b1:f6:52:13:c5:30:f5:ec: ed:bf:9a:2b:4d:0c:dd:96:8f:13:8b:63:5f:43:5b: 91:ba:e0:9c:37:cb:3b:4f:c4:4a:4a:cf:8f:e3:19: b8:ea:d9:a4:c8:6d:29:26:ee:a3:af:25:14:c7:cf: 1d:be:b9:93:69:c3:b6:d1:dd:55:79:28:39:2b:95: 2d:a5:ac:2c:f1:04:cc:ca:a5:6a:02:39:2c:49:02: 2a:58:9c:84:b1:69:72:fb:9a:a4:cf:bd:6a:2f:cb: 14:b9:37:f4:92:0a:b3:5c:39:a2:5c:c5:b1:48:81: 3d:cc:32:7c:08:59:c1:88:65:44:f4:86:84:e7:11: 47:4a:65:f7:ed:c0:50:c1:e0:8c:37:7f:a0:b2:c4: be:5a:cc:33:72:c3:c7:c8:0a:fe:7a:28:33:9d:10: 0e:7a:a9:6c:81:df:c5:9d:ec:1e:2e:1c:8d:d1:38: 16:ab:1e:69:be:0e:43:d0:11:68:98:b5:2a:fe:c5: f3:34:dc:6e:c2:fd:e6:bb:a1:e9:4a:df:d1:54:41: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.131.0/24 Signature Algorithm: sha256WithRSAEncryption 02:af:63:93:df:e9:b7:1b:95:d3:27:08:bc:fa:18:06:ac:94: bd:d7:8a:f6:84:0d:54:61:3a:1c:af:e8:f1:e4:18:3f:ba:6d: 2b:14:12:52:8f:3f:2f:8d:78:00:f1:cf:31:b5:2d:2d:f7:be: d2:75:d5:71:00:13:81:8a:22:d6:21:44:83:54:17:39:a0:bb: d9:7a:1c:6d:c2:67:ff:4f:f0:5a:d1:14:e8:db:8f:e7:77:0c: 8e:19:2a:bb:05:97:46:1e:91:76:8c:a7:03:19:f0:3c:e0:ed: 99:2a:9c:41:50:6c:e3:21:4e:1f:00:bc:cf:00:a6:fb:4f:a0: 71:c7:6d:c7:49:93:e0:ee:3e:25:80:e5:fe:63:b5:61:f3:8a: 11:e2:b3:70:71:dd:f3:5f:1e:be:fc:b9:8f:66:90:e9:7a:58: d3:bf:ee:ef:77:8c:e4:4c:04:19:23:23:a3:02:fd:56:44:76: 8e:6b:a9:17:2c:6c:cb:fe:49:a0:d5:57:17:b2:44:e2:7f:52: 82:68:50:f4:4f:34:b0:a6:4e:6f:c3:e1:9d:04:d8:c4:61:c4: 72:c0:78:48:7b:eb:61:bc:99:1c:ae:6b:57:e6:47:da:fe:46: 22:2a:e5:53:da:0d:f7:fd:bd:40:f1:43:d3:0d:57:7c:0f:1b: 4d:51:6f:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8f7hYig2Rx/A8lyyVut3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGNmYTJmYzRmMmVlOWViYzgzYmU3OTM2NmIwYWU5NGQxZjJiZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HVbjbdp8iLUB5c3NHhdjnB2e+Go Jd77leM7oYrx1zAATQJk7wEAiVGB4EMY0F7IBMIisfZSE8Uw9eztv5orTQzdlo8T i2NfQ1uRuuCcN8s7T8RKSs+P4xm46tmkyG0pJu6jryUUx88dvrmTacO20d1VeSg5 K5Utpaws8QTMyqVqAjksSQIqWJyEsWly+5qkz71qL8sUuTf0kgqzXDmiXMWxSIE9 zDJ8CFnBiGVE9IaE5xFHSmX37cBQweCMN3+gssS+WswzcsPHyAr+eigznRAOeqls gd/FneweLhyN0TgWqx5pvg5D0BFomLUq/sXzNNxuwv3mu6HpSt/RVEHVcwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMTPovxPLunryDvnk2awrpTR8r/HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzQzOTZj Mi04ZWQxLTQzMmUtOTlmYi03YzU3M2I2ZTAwZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNDM5NmMy LThlZDEtNDMyZS05OWZiLTdjNTczYjZlMDBlYS8xL3hNLWlfRTh1NmV2SU8tZVRa ckN1bE5IeXY4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSWDMA0GCSqGSIb3DQEBCwUAA4IBAQACr2OT 3+m3G5XTJwi8+hgGrJS914r2hA1UYTocr+jx5Bg/um0rFBJSjz8vjXgA8c8xtS0t 977SddVxABOBiiLWIUSDVBc5oLvZehxtwmf/T/Ba0RTo24/ndwyOGSq7BZdGHpF2 jKcDGfA84O2ZKpxBUGzjIU4fALzPAKb7T6Bxx23HSZPg7j4lgOX+Y7Vh84oR4rNw cd3zXx6+/LmPZpDpeljTv+7vd4zkTAQZIyOjAv1WRHaOa6kXLGzL/kmg1VcXskTi f1KCaFD0TzSwpk5vw+GdBNjEYcRywHhIe+thvJkcrmtX5kfa/kYiKuVT2g33/b1A 8UPTDVd8DxtNUW9E -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:15 2026 by rpki-client