This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer (raw, json) Hash identifier: SDbjDu2NbyVJ59XMZgsVyuovM2xa5R+n+mcDTcqXso0= Subject key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36F146E19E7E253120C9C0F636692A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8639 AS: 208521 IP: 185.121.20.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f1:46:e1:9e:7e:25:31:20:c9:c0:f6:36:69:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53435f4be2c543bf3483e377f80314d28230184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:e6:52:56:b7:cb:4a:8a:11:c8:83:34:b3: a9:7c:d2:62:5d:86:c9:e8:eb:1c:52:49:ae:6b:9f: 7c:84:b8:3b:27:b9:44:64:ec:a4:96:ab:7e:ec:4b: c4:31:e2:6e:fa:8b:83:5b:df:08:f2:80:70:dd:13: ce:cb:89:4d:28:2a:f1:06:a5:21:84:4f:e2:92:4c: de:a4:af:b4:0e:60:08:f7:64:da:81:20:87:cb:42: 87:22:8e:61:97:6e:d8:92:76:19:15:37:d8:09:72: 76:05:dc:62:c1:aa:46:9d:84:ec:17:18:5c:1d:c1: 93:11:3d:79:cb:0d:81:53:3d:7a:1e:d1:19:7c:6d: de:dc:8c:23:af:52:e6:fe:7e:64:1b:a2:2e:ea:26: 32:e2:ac:ef:52:05:43:2e:0f:e5:2c:00:82:99:32: 72:cb:e1:f0:98:24:33:dd:ac:2c:d9:ba:aa:88:e1: a5:3d:fd:53:a9:33:69:7a:6e:cc:d3:d3:3c:dc:06: e3:11:de:11:e8:9d:95:0f:4b:3d:6b:65:bd:31:98: 49:cb:9b:11:5a:0e:53:6b:87:fc:0e:69:3c:dd:2a: 74:7f:b9:32:f7:14:a9:78:b5:62:89:2e:59:f0:ed: a5:2c:3e:e3:2b:eb:f2:7c:82:88:6c:7d:70:35:18: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8639 208521 Signature Algorithm: sha256WithRSAEncryption 98:74:4c:79:94:84:97:f2:a2:0d:98:73:ab:4d:40:a0:a2:08: cd:f3:38:62:69:5e:7b:3e:9a:a5:bd:c1:f4:84:62:44:b3:cd: 66:88:fb:69:f5:b2:26:ab:97:45:32:1b:c8:42:32:ce:47:83: b7:79:54:15:12:3b:16:57:a0:e9:2c:44:2d:bd:f3:45:26:10: 04:b7:37:d3:52:bd:b8:81:bd:fb:86:45:ee:79:16:b2:07:43: 80:bd:29:be:3f:a2:c6:0a:cf:b1:ae:7a:62:56:01:46:0d:65: 34:49:b7:9b:70:95:83:5e:12:0c:17:cf:84:07:75:7e:54:ae: 95:23:7a:2d:ef:e1:bd:c7:a0:b9:2d:c5:92:66:1b:51:8e:0d: f1:3e:39:80:d8:d6:17:67:df:33:fe:fc:1f:96:d4:bd:00:30: 94:d9:dd:3d:30:40:e4:8d:51:1a:16:4b:76:e3:ef:e1:9c:b9: 97:44:90:07:c6:d4:d2:62:53:8a:3a:6c:e4:cf:65:b6:4f:ff: b7:1e:67:1e:3b:fc:8e:3e:6f:e8:b7:17:fa:f9:98:57:be:3b: 2a:26:9c:15:5e:ee:33:72:3a:71:fd:d3:ec:b7:77:e3:45:31: 23:1e:6b:73:c2:fe:42:76:36:f3:54:d2:b8:83:dd:a6:bc:22: 2d:1d:ec:0f -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt7NvFG4Z5+JTEgycD2NmkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTM0MzVmNGJlMmM1NDNiZjM0ODNlMzc3ZjgwMzE0ZDI4MjMwMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE3mUla3y0qKEciDNLOpfNJiXYbJ 6OscUkmua598hLg7J7lEZOyklqt+7EvEMeJu+ouDW98I8oBw3RPOy4lNKCrxBqUh hE/ikkzepK+0DmAI92TagSCHy0KHIo5hl27YknYZFTfYCXJ2BdxiwapGnYTsFxhc HcGTET15yw2BUz16HtEZfG3e3Iwjr1Lm/n5kG6Iu6iYy4qzvUgVDLg/lLACCmTJy y+HwmCQz3aws2bqqiOGlPf1TqTNpem7M09M83AbjEd4R6J2VD0s9a2W9MZhJy5sR Wg5Ta4f8Dmk83Sp0f7ky9xSpeLViiS5Z8O2lLD7jK+vyfIKIbH1wNRhOmQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFMU0NfS+LFQ780g+N3+AMU0oIwGEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzQzZjYw Ny1hN2Y0LTQ5ODUtYjZlYi05ZjRmZTRjZDAyNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNDNmNjA3 LWE3ZjQtNDk4NS1iNmViLTlmNGZlNGNkMDI0Ni8xL3hUUTE5TDRzVkR2elNENDNm NEF4VFNnakFZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXkUMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC AiG/AgMDLokwDQYJKoZIhvcNAQELBQADggEBAJh0THmUhJfyog2Yc6tNQKCiCM3z OGJpXns+mqW9wfSEYkSzzWaI+2n1siarl0UyG8hCMs5Hg7d5VBUSOxZXoOksRC29 80UmEAS3N9NSvbiBvfuGRe55FrIHQ4C9Kb4/osYKz7GuemJWAUYNZTRJt5twlYNe EgwXz4QHdX5UrpUjei3v4b3HoLktxZJmG1GODfE+OYDY1hdn3zP+/B+W1L0AMJTZ 3T0wQOSNURoWS3bj7+GcuZdEkAfG1NJiU4o6bOTPZbZP/7ceZx47/I4+b+i3F/r5 mFe+OyomnBVe7jNyOnH90+y3d+NFMSMea3PC/kJ2NvNU0riD3aa8Ii0d7A8= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:46 2026 by rpki-client