This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer (raw, json) Hash identifier: xbokQ+oJ8MbexaPe/P2cai0Sj4iQH2IJC8yH5jSdND0= Subject key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE412B2A19F7E106FD5447962C343F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 167.94.24.0/24 IP: 193.30.116.0/24 IP: 2a13:4b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:41:2b:2a:19:f7:e1:06:fd:54:47:96:2c:34:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:f5:b0:9f:4c:a9:4f:61:3b:23:c0:a5:d4: ff:68:0c:fe:ca:0c:e3:3c:1c:33:eb:e4:bd:63:a0: 46:66:91:57:fa:06:09:49:e5:bc:98:f4:03:d1:aa: f4:c7:cf:46:46:24:db:93:fe:ce:f3:47:ca:16:11: 7f:48:7d:42:1c:8a:ff:e3:49:11:e9:0e:6a:55:cf: 91:d0:5b:e8:df:4f:25:6b:8a:e7:18:9d:29:f1:be: 17:11:e7:79:7f:7e:33:7c:7e:06:06:65:bc:97:9f: 89:9f:e9:b6:87:3d:65:33:51:d3:a4:14:63:15:1f: 10:cb:20:b1:4d:5f:23:95:f6:d3:37:12:83:e7:8a: 69:98:cc:96:d6:ea:6d:40:51:35:c3:b4:55:f7:39: b6:48:78:40:fc:c2:4a:b2:3f:f9:46:33:7a:21:f1: 70:3b:5b:f3:9c:9d:95:6d:38:32:ab:e5:0a:52:0b: a8:9e:9c:e6:fb:6e:f0:a5:48:c4:6e:f4:68:b0:51: 3e:66:0a:bd:20:fe:ca:5b:e5:c5:e6:3a:9e:79:87: 69:fa:a5:15:f4:00:20:a7:06:ad:47:5b:5a:06:c4: 98:40:df:fc:84:3c:0b:95:e6:69:c4:06:4e:ce:8a: 0b:16:19:a8:09:ed:1a:ec:ca:bc:aa:7f:b9:60:b7: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.94.24.0/24 193.30.116.0/24 IPv6: 2a13:4b00::/29 Signature Algorithm: sha256WithRSAEncryption 66:86:af:0d:f9:09:48:ae:0a:f8:1f:77:3a:e0:d1:4f:bb:c6: a9:6c:ba:0a:f6:3c:a9:46:17:3b:24:c6:bc:7b:fc:98:d1:44: 32:cd:e9:5a:e1:c1:30:6e:fc:cc:46:49:ae:e3:62:d6:de:94: 02:6e:cb:cd:c5:a0:26:89:f3:80:9a:30:6e:bb:43:30:36:cf: f4:25:b0:5b:a7:af:f1:a0:09:ee:6f:28:e8:1f:a4:c6:9a:78: a5:4f:25:9f:51:65:73:9a:5d:86:6d:60:73:11:6b:ec:72:eb: 07:c8:ef:73:26:d0:38:fe:f1:ea:b8:7b:ef:e6:dc:23:1b:b5: 0c:ee:35:61:80:b2:6d:52:75:3f:55:9c:d8:0f:8d:68:03:87: 57:43:65:59:15:34:cb:22:52:7f:54:d5:68:31:2f:a7:11:8e: a5:01:12:5e:7b:be:da:4a:2b:5f:24:0b:d2:eb:d8:ad:5e:c4: 39:de:2c:ea:b9:56:39:54:63:44:4c:74:ca:44:52:e2:9f:a7: 66:af:9c:60:13:0b:73:47:9c:f3:ab:6e:89:d9:b8:61:0b:bc: 08:99:da:11:ac:e4:68:d8:91:b9:98:62:c5:b3:9a:e6:e1:63: cc:4a:1f:be:b1:6b:f2:10:29:ea:2d:8a:b1:eb:8a:22:06:ed: 4c:17:ce:8b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt87kErKhn34Qb9VEeWLDQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTBlMDgwMTgyM2YxOWQ1MWI5NjJhYjZkNGViYmJjMjdkZDRlZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrj1sJ9MqU9hOyPApdT/aAz+ygzj PBwz6+S9Y6BGZpFX+gYJSeW8mPQD0ar0x89GRiTbk/7O80fKFhF/SH1CHIr/40kR 6Q5qVc+R0Fvo308la4rnGJ0p8b4XEed5f34zfH4GBmW8l5+Jn+m2hz1lM1HTpBRj FR8QyyCxTV8jlfbTNxKD54ppmMyW1uptQFE1w7RV9zm2SHhA/MJKsj/5RjN6IfFw O1vznJ2VbTgyq+UKUguonpzm+27wpUjEbvRosFE+Zgq9IP7KW+XF5jqeeYdp+qUV 9AAgpwatR1taBsSYQN/8hDwLleZpxAZOzooLFhmoCe0a7Mq8qn+5YLelXwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFMUOCAGCPxnVG5YqttTru8J91O2WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzQ3NGY2 NS1mZTI5LTQ4MjItYmExNC1jZTgyMTRjZWY2YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvNDc0ZjY1 LWZlMjktNDgyMi1iYTE0LWNlODIxNGNlZjZiNS8xL3hRNElBWUlfR2RVYmxpcTIx T3U3d24zVTdaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAp14YAwQAwR50MA0EAgACMAcDBQMqE0sAMA0G CSqGSIb3DQEBCwUAA4IBAQBmhq8N+QlIrgr4H3c64NFPu8apbLoK9jypRhc7JMa8 e/yY0UQyzela4cEwbvzMRkmu42LW3pQCbsvNxaAmifOAmjBuu0MwNs/0JbBbp6/x oAnubyjoH6TGmnilTyWfUWVzml2GbWBzEWvscusHyO9zJtA4/vHquHvv5twjG7UM 7jVhgLJtUnU/VZzYD41oA4dXQ2VZFTTLIlJ/VNVoMS+nEY6lARJee77aSitfJAvS 69itXsQ53izquVY5VGNETHTKRFLin6dmr5xgEwtzR5zzq26J2bhhC7wImdoRrORo 2JG5mGLFs5rm4WPMSh++sWvyECnqLYqx64oiBu1MF86L -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:51 2026 by rpki-client