This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer File: xMO8BapSq5610YT1CInx_wyQzng.cer (raw, json) Hash identifier: 1y29mLkjOwYzBONig1o/hQFF3tbbAJ1sHE4zfJcQuaM= Subject key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3651EF93C02BAD7EC4A96A398605DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.176.173.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:51:ef:93:c0:2b:ad:7e:c4:a9:6a:39:86:05:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:36:e2:4c:4c:a2:3a:65:c3:00:1d:48:32: e8:14:60:96:1d:ea:1a:a6:ac:03:ad:47:f4:c6:ec: ee:0f:a6:ed:4a:88:8d:0f:59:52:08:b6:0f:da:6d: 9c:5c:5a:4d:e6:03:ce:cc:1e:c8:5c:18:8b:db:31: 23:62:1e:13:e0:02:ed:67:87:5a:91:d5:60:bb:90: c6:98:5e:b2:85:61:d2:f2:fb:2c:e4:f7:be:9b:7b: 6a:c7:13:b4:38:15:9a:ae:8d:2d:c7:05:f9:aa:9b: fb:1d:f0:c7:91:d2:d6:e3:2a:f9:0e:65:12:3e:e6: 2d:7f:a9:4d:1f:ae:ae:10:00:ac:bd:9c:42:5a:85: 8d:1f:1e:8f:6c:6a:22:a4:a9:c3:6c:0d:70:c8:3e: 97:12:2f:d9:59:ef:4a:53:f9:37:e5:4f:96:c6:7f: 8f:95:36:48:20:76:2a:63:98:2c:07:03:33:f1:05: 21:18:8c:c0:32:dc:c4:34:82:5b:98:ae:55:15:dd: b2:b4:96:81:6c:e6:0e:14:a2:e8:a7:fa:3f:63:cd: 8f:e2:e3:64:be:ac:db:f9:a7:50:b0:de:69:0f:3f: 48:75:f5:1d:f0:2c:e8:d7:e1:86:9c:4b:d7:83:f9: 49:21:ac:d2:b1:4f:0f:62:e8:48:92:46:f1:16:9a: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.176.173.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:d4:ab:1f:70:dd:ac:37:fe:25:6a:e3:33:bc:68:02:6a:a1: 2d:e1:81:9e:40:e6:ba:d7:5f:21:ca:1b:6e:e4:45:e3:3b:c0: 41:07:49:56:e7:53:01:b8:b3:73:b3:d0:7b:b7:33:2c:68:e2: ce:65:b1:ea:ff:f7:ed:dc:13:98:0d:ec:84:55:bf:19:b2:c6: a4:97:ab:69:ba:f2:e2:02:40:c3:7c:f3:c7:07:11:cc:34:58: f2:c9:10:ac:e4:43:1c:9c:57:6c:78:67:0a:a8:78:d7:2e:0b: 63:80:69:9d:33:d6:06:e0:3a:ed:ba:2a:bb:76:40:7f:28:5e: bf:48:da:f9:0f:79:51:af:91:fd:d5:dd:0b:eb:ce:cc:c5:f3: d1:9b:36:c0:d3:53:ec:ed:16:d4:99:3f:1c:4c:d8:8f:4b:8a: 08:d6:6b:43:98:60:07:47:7b:57:95:1d:62:44:25:80:fe:1b: a0:ae:69:2a:26:19:be:74:2b:fe:81:b4:35:84:cf:1c:11:b1: 12:5f:26:a3:30:fb:62:cd:29:b9:f9:63:9c:2d:52:ae:3a:91: 5b:7e:67:51:5a:93:2f:4c:f4:61:03:d6:80:49:63:30:9f:ad: 81:1d:c0:bd:a1:a2:16:5e:59:b3:e0:78:70:fa:22:3b:85:a8: 11:6a:93:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NlHvk8ArrX7EqWo5hgXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGMzYmMwNWFhNTJhYjllYjVkMTg0ZjUwODg5ZjFmZjBjOTBjZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3024kxMojplwwAdSDLoFGCWHeoa pqwDrUf0xuzuD6btSoiND1lSCLYP2m2cXFpN5gPOzB7IXBiL2zEjYh4T4ALtZ4da kdVgu5DGmF6yhWHS8vss5Pe+m3tqxxO0OBWaro0txwX5qpv7HfDHkdLW4yr5DmUS PuYtf6lNH66uEACsvZxCWoWNHx6PbGoipKnDbA1wyD6XEi/ZWe9KU/k35U+Wxn+P lTZIIHYqY5gsBwMz8QUhGIzAMtzENIJbmK5VFd2ytJaBbOYOFKLop/o/Y82P4uNk vqzb+adQsN5pDz9IdfUd8Czo1+GGnEvXg/lJIazSsU8PYuhIkkbxFpowoQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMTDvAWqUquetdGE9QiJ8f8MkM54MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2QyMzdm YS1iMTA1LTQzMmUtODNjYi02ZDM1Yjc5NTZmY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZDIzN2Zh LWIxMDUtNDMyZS04M2NiLTZkMzViNzk1NmZjZS8xL3hNTzhCYXBTcTU2MTBZVDFD SW54X3d5UXpuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwrCtMA0GCSqGSIb3DQEBCwUAA4IBAQBc1Ksf cN2sN/4lauMzvGgCaqEt4YGeQOa6118hyhtu5EXjO8BBB0lW51MBuLNzs9B7tzMs aOLOZbHq//ft3BOYDeyEVb8Zssakl6tpuvLiAkDDfPPHBxHMNFjyyRCs5EMcnFds eGcKqHjXLgtjgGmdM9YG4Drtuiq7dkB/KF6/SNr5D3lRr5H91d0L687MxfPRmzbA 01Ps7RbUmT8cTNiPS4oI1mtDmGAHR3tXlR1iRCWA/hugrmkqJhm+dCv+gbQ1hM8c EbESXyajMPtizSm5+WOcLVKuOpFbfmdRWpMvTPRhA9aASWMwn62BHcC9oaIWXlmz 4Hhw+iI7hagRapM3 -----END CERTIFICATE-----Generated at Mon Jan 26 15:23:43 2026 by rpki-client