This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer File: xTLcpO-wjHGnrwa-wCHIhxMNR48.cer (raw, json) Hash identifier: fpqq2Ub8DXNHni+NVxllaRWiNiUP/n5cDaTu40zMg+A= Subject key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBD5FB313C18CA8047E5DF30F227FAEE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 16:38:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202089 IP: 95.141.112.0/20 IP: 185.105.136.0/22 IP: 2a02:4200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:5f:b3:13:c1:8c:a8:04:7e:5d:f3:0f:22:7f:ae:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 16:38:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c532dca4efb08c71a7af06bec021c887130d478f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:12:ad:ff:12:7c:82:57:b4:b2:da:fc:64:ea: 8e:4f:2f:15:59:5a:95:36:10:5c:b3:20:c7:74:3c: 85:27:cc:71:a7:3f:46:cb:34:6b:97:ea:64:a0:25: c7:35:fc:f8:84:3d:4a:00:94:6f:dc:d3:5a:f9:51: f1:ab:3e:90:43:a2:f5:d5:1f:ba:9a:1c:a5:32:a0: 58:40:66:70:20:33:99:9b:2f:35:ca:7c:90:3d:1a: fe:69:9e:0f:e5:52:0a:cb:bf:f7:c8:81:d3:56:36: 0a:5b:87:60:92:ac:49:cf:95:25:49:06:f1:9c:9f: a3:6b:c7:72:b2:2d:35:51:40:db:eb:01:37:e5:7e: d0:30:cb:c7:95:0a:83:e0:72:10:0f:e4:e9:cc:ec: 99:c0:d6:9f:3b:3e:42:f6:00:49:84:ef:27:b3:0e: 8a:a4:a8:79:ab:c3:0e:50:20:8f:ea:08:b9:27:ae: 7e:1c:40:c1:93:9c:b3:0f:de:73:e9:9e:bc:67:3b: 8e:77:96:34:6d:05:54:c3:f8:e3:e3:72:1e:44:bb: d7:52:13:8d:d7:dd:33:db:d8:a4:dc:e2:f2:90:eb: 94:43:c9:6e:ff:ff:97:8c:8d:07:fc:8b:5a:cd:12: de:d8:9c:fe:81:31:6c:4b:24:91:8a:9a:a4:4a:69: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.112.0/20 185.105.136.0/22 IPv6: 2a02:4200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202089 Signature Algorithm: sha256WithRSAEncryption 2d:5c:12:d9:26:aa:4d:37:a0:9f:e9:4a:fc:6a:17:8f:60:ae: 63:9b:e8:a6:de:7d:56:ec:dd:5d:69:71:76:38:b6:7b:1d:7e: 44:92:4c:4a:c5:9c:b3:d5:0a:4e:4b:de:d5:61:1e:1b:b1:fb: a7:e8:6e:30:d1:4e:ad:10:62:a1:9e:4b:cf:63:c1:e6:d8:ec: e5:a0:5d:d2:bc:0e:16:c1:ee:c7:81:b0:e9:cd:41:55:b0:e8: e8:88:ff:18:63:86:dc:db:16:97:1c:d0:e3:b7:2e:60:be:7b: 3f:b9:95:d0:d5:80:72:0e:56:6e:6b:61:a1:12:cf:3e:d5:68: 66:8e:7d:b7:55:f1:6e:1a:11:f2:b4:0e:a5:9c:64:09:c5:4e: 34:af:83:97:8c:65:98:11:c6:f1:9f:47:da:1d:a7:85:a6:ed: 0e:59:2e:d5:5e:16:e5:fb:b1:37:4d:87:21:70:fe:01:52:0f: 99:ab:a9:82:96:a3:fc:a7:0e:4d:98:22:a1:9f:0d:69:0e:3f: 96:55:11:1b:e1:a2:26:b9:ed:22:6d:b7:4b:aa:14:17:3d:62: 9f:4d:33:c2:7a:fc:70:87:51:75:39:15:c0:be:98:82:09:0e: f4:44:c1:d3:a7:c1:0a:d6:c6:28:5c:d7:64:d2:1d:a2:af:35: da:39:f3:b6 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZu9X7MTwYyoBH5d8w8if67mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MTYzODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTMyZGNhNGVmYjA4YzcxYTdhZjA2YmVjMDIxYzg4NzEzMGQ0NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RKt/xJ8gle0str8ZOqOTy8VWVqV NhBcsyDHdDyFJ8xxpz9GyzRrl+pkoCXHNfz4hD1KAJRv3NNa+VHxqz6QQ6L11R+6 mhylMqBYQGZwIDOZmy81ynyQPRr+aZ4P5VIKy7/3yIHTVjYKW4dgkqxJz5UlSQbx nJ+ja8dysi01UUDb6wE35X7QMMvHlQqD4HIQD+TpzOyZwNafOz5C9gBJhO8nsw6K pKh5q8MOUCCP6gi5J65+HEDBk5yzD95z6Z68ZzuOd5Y0bQVUw/jj43IeRLvXUhON 190z29ik3OLykOuUQ8lu//+XjI0H/ItazRLe2Jz+gTFsSySRipqkSmlhRQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMUy3KTvsIxxp68GvsAhyIcTDUePMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzU3N2Iy Mi1hODFmLTRiY2YtYmM3NS1jOTJhOTBjMTIxZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvNTc3YjIy LWE4MWYtNGJjZi1iYzc1LWM5MmE5MGMxMjFlOC8xL3hUTGNwTy13akhHbnJ3YS13 Q0hJaHhNTlI0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEX41wAwQCuWmIMA0EAgACMAcDBQAqAkIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVaTANBgkqhkiG9w0BAQsFAAOCAQEALVwS 2SaqTTegn+lK/GoXj2CuY5vopt59VuzdXWlxdji2ex1+RJJMSsWcs9UKTkve1WEe G7H7p+huMNFOrRBioZ5Lz2PB5tjs5aBd0rwOFsHux4Gw6c1BVbDo6Ij/GGOG3NsW lxzQ47cuYL57P7mV0NWAcg5WbmthoRLPPtVoZo59t1XxbhoR8rQOpZxkCcVONK+D l4xlmBHG8Z9H2h2nhabtDlku1V4W5fuxN02HIXD+AVIPmaupgpaj/KcOTZgioZ8N aQ4/llURG+GiJrntIm23S6oUFz1in00zwnr8cIdRdTkVwL6YggkO9ETB06fBCtbG KFzXZNIdoq812jnztg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:26 2026 by rpki-client