This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer (raw, json) Hash identifier: 5osVsaempqJPBiR/bUmHIMnCK9FhgzVqIYjHpgkCGdc= Subject key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80410A5E5633BDB18ABDA0D8684B6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213155 IP: 5.204.0.0/16 IP: 37.234.0.0/16 IP: 84.224.0.0 -- 84.225.191.255 IP: 91.104.0.0/16 IP: 176.77.128.0/17 IP: 176.226.0.0/17 IP: 2a0a:f640::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:0a:5e:56:33:bd:b1:8a:bd:a0:d8:68:4b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:90:64:cb:8e:01:61:7c:97:e6:90:b8:d3: ee:9f:21:49:8e:31:1a:a3:69:0b:73:f2:5d:49:01: cb:83:b9:94:a4:ac:d8:74:00:ec:94:e8:6c:a3:00: 51:cc:7d:2a:f9:0f:6f:09:b1:58:2f:d5:56:63:5a: e1:d0:99:1d:d8:b5:ea:48:07:ca:0b:2b:4f:cd:fb: 06:ae:d6:3e:de:73:f1:20:6c:30:77:3d:9f:1c:91: 72:8a:53:95:ed:d2:f6:9a:35:c9:82:a9:71:9c:bf: f3:ae:5f:9f:72:ea:16:9d:51:8f:9c:08:2c:09:d0: 6e:a8:4a:53:96:d1:d8:c0:1a:2a:5d:af:7b:ae:79: ab:32:62:18:13:7a:25:2e:e7:ba:03:dd:f3:3d:d2: 64:16:2b:7b:ef:0c:43:22:41:6a:cc:b3:99:9c:3c: 9f:9a:97:c5:83:92:3a:d1:9f:97:b9:d6:53:d7:23: 8e:15:6c:c3:be:f3:03:01:83:8f:8d:dc:bf:ea:b2: 53:3e:c9:f5:e6:0b:f6:48:40:32:d1:29:e6:ae:d4: 11:ce:18:df:14:0d:34:68:41:17:80:19:ad:f9:13: 45:d2:0f:bd:5b:a7:a4:15:b2:e8:04:c0:5a:73:e5: dd:f2:a9:08:15:b9:f9:44:2a:9b:02:0f:8b:57:94: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.204.0.0/16 37.234.0.0/16 84.224.0.0-84.225.191.255 91.104.0.0/16 176.77.128.0/17 176.226.0.0/17 IPv6: 2a0a:f640::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213155 Signature Algorithm: sha256WithRSAEncryption 41:26:38:76:4d:29:dc:b3:7f:54:ea:3f:ad:63:15:64:2b:50: e7:93:1d:60:7b:f5:bb:d1:f8:a6:12:88:7b:cd:d8:24:11:7a: e2:cf:7a:41:36:27:75:d8:b0:c2:c5:55:b5:d9:8e:b9:b6:61: c5:7f:0d:51:98:8b:71:94:5d:3c:22:9d:df:d5:86:b5:54:fc: 34:f1:03:9d:34:57:6a:53:d7:dc:d4:03:7a:c5:45:36:0f:3d: 72:8a:2f:5a:1b:a4:ef:86:68:e1:0a:72:f6:58:9f:3f:81:fc: 65:90:81:84:aa:39:d1:cf:ab:be:a0:67:ab:35:4f:4d:51:d2: 69:11:91:a4:4c:8e:79:b4:86:1b:08:4b:e3:79:6c:5e:88:00: 31:c2:b2:8a:20:3c:a8:5c:bd:0a:5e:f6:8b:87:d3:bc:b0:d0: 09:ed:62:a1:88:48:96:2b:bf:ae:44:d1:4b:a0:24:08:e9:1f: ee:2a:72:c4:a9:f2:1a:26:ba:95:10:4b:29:a4:dc:1d:71:d9: 89:53:b4:29:f5:1e:9c:0d:23:1f:dc:7c:78:6a:d0:fd:65:03: 24:6e:b6:64:a4:f3:10:6a:81:21:ac:3c:17:fe:41:9e:b3:c9: 07:48:e0:1c:a2:76:a5:df:58:b9:c7:ca:4f:75:83:88:59:1d: b5:18:2d:06 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt8gEEKXlYzvbGKvaDYaEtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNmNDM4OGFhZGYwYWU0ZmY1ZWU3YmQzNzI2M2M5ZjFlODQ2N2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8GQZMuOAWF8l+aQuNPunyFJjjEa o2kLc/JdSQHLg7mUpKzYdADslOhsowBRzH0q+Q9vCbFYL9VWY1rh0Jkd2LXqSAfK CytPzfsGrtY+3nPxIGwwdz2fHJFyilOV7dL2mjXJgqlxnL/zrl+fcuoWnVGPnAgs CdBuqEpTltHYwBoqXa97rnmrMmIYE3olLue6A93zPdJkFit77wxDIkFqzLOZnDyf mpfFg5I60Z+XudZT1yOOFWzDvvMDAYOPjdy/6rJTPsn15gv2SEAy0SnmrtQRzhjf FA00aEEXgBmt+RNF0g+9W6ekFbLoBMBac+Xd8qkIFbn5RCqbAg+LV5R2/wIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2FiNTVj ZS03NWZmLTQzOWItYmNiNS1kZGEzNTBiMTFmMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYWI1NWNl LTc1ZmYtNDM5Yi1iY2I1LWRkYTM1MGIxMWYwMi8xL3hUOURpS3JmQ3VUX1h1ZTlO eVk4bng2RVo4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF BwEHAQH/BEEwPzAuBAIAATAoAwMABcwDAwAl6jALAwMFVOADBAZU4YADAwBbaAME B7BNgAMEB7DiADANBAIAAjAHAwUBKgr2QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQKMwDQYJKoZIhvcNAQELBQADggEBAEEmOHZNKdyzf1TqP61jFWQrUOeTHWB7 9bvR+KYSiHvN2CQReuLPekE2J3XYsMLFVbXZjrm2YcV/DVGYi3GUXTwind/VhrVU /DTxA500V2pT19zUA3rFRTYPPXKKL1obpO+GaOEKcvZYnz+B/GWQgYSqOdHPq76g Z6s1T01R0mkRkaRMjnm0hhsIS+N5bF6IADHCsoogPKhcvQpe9ouH07yw0AntYqGI SJYrv65E0UugJAjpH+4qcsSp8homupUQSymk3B1x2YlTtCn1HpwNIx/cfHhq0P1l AyRutmSk8xBqgSGsPBf+QZ6zyQdI4ByidqXfWLnHyk91g4hZHbUYLQY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:37 2026 by rpki-client