This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer File: xTtM8KdHHwAPilagSbFjlnzDvZk.cer (raw, json) Hash identifier: w+B9KSls0d61eKsO0+t1kfr2i9FkUU225z1b0INDBOo= Subject key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F159B26233584FBDB665D69F684494F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210150 IP: 79.171.64.0/21 IP: 85.158.80.0/21 IP: 217.145.232.0/22 IP: 2a0d:9c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9b:26:23:35:84:fb:db:66:5d:69:f6:84:49:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:9b:05:8c:f9:a9:98:82:c9:31:10:89:20: c6:b8:ea:47:9b:c8:b1:48:d0:1f:6e:a5:c0:8e:b7: 03:e1:a9:32:60:40:bd:ef:b8:40:b5:24:40:dd:2b: 15:52:8c:f4:42:00:d0:1d:b4:f8:62:29:3e:47:de: da:9d:2f:d2:fb:e2:f4:c1:e4:d9:48:53:a4:34:0b: 00:fe:ca:00:7e:c4:3b:0f:3d:5b:fa:ce:4f:72:23: 42:c8:d9:1f:54:18:3d:ea:96:e0:84:e2:1f:4c:a0: f2:92:88:f5:76:5c:1f:e8:d6:ca:45:85:f7:00:bc: 5b:a9:79:48:3d:af:e7:67:37:38:5d:ce:4c:08:4f: c9:be:83:06:33:d7:12:5a:18:2e:84:31:2d:f3:9f: be:7f:82:2e:fe:0b:c9:f7:88:30:f4:8d:cd:af:77: f8:84:8f:17:4f:31:66:71:8e:f4:5a:50:e2:15:3e: 10:07:a7:27:ce:41:7c:38:df:24:3d:b2:9c:04:0e: d5:fa:6e:6b:6c:6f:10:6f:81:29:2a:5d:f5:f4:53: dc:0c:98:86:0c:f2:9b:f5:73:ff:97:1d:d8:d2:0d: ff:16:21:4c:53:2b:61:e4:e8:70:23:07:8e:94:45: c0:c5:c6:eb:6c:40:90:ed:b4:08:8b:6d:2b:89:6d: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.64.0/21 85.158.80.0/21 217.145.232.0/22 IPv6: 2a0d:9c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210150 Signature Algorithm: sha256WithRSAEncryption 81:03:a5:b0:b0:e1:c4:7c:39:a9:52:93:b9:81:27:84:c1:be: 71:6f:9c:bd:e7:37:a9:f4:86:b3:9e:21:32:bf:c5:68:53:71: 47:15:d2:7e:fd:47:47:ba:1c:31:c6:44:f6:75:4c:a7:71:53: b4:a3:bb:9e:ea:bc:dc:22:e9:43:f7:68:3c:61:b8:7d:e0:80: 9a:c2:a2:00:05:e1:d2:8f:16:1b:c5:51:4c:66:6a:20:75:a1: f2:16:ee:2a:04:61:24:c7:1a:44:a0:94:54:fe:d5:01:98:4b: 02:b1:57:43:dd:a5:3c:0a:e0:c2:8e:30:b8:f3:1e:b9:50:80: 68:82:83:93:8e:c4:8b:15:71:0a:20:ec:59:ae:eb:eb:ae:04: e2:a3:27:6d:fc:51:40:80:16:a6:ad:9c:94:64:1c:e5:e4:65: 56:4f:7a:9a:df:51:16:34:2a:f4:bf:00:93:65:a0:e0:6b:d5: aa:99:e8:7c:f3:09:77:c5:bf:29:da:61:ce:71:08:29:39:02: 60:8d:aa:17:96:cb:9f:c7:46:56:28:ab:bc:5b:29:0a:a4:f8: 66:cb:2f:18:38:ba:de:6a:f0:05:85:c4:51:04:3e:dc:2b:f7: ef:c3:55:4c:05:65:b8:71:30:65:f9:a0:cb:74:e3:8f:14:29: 45:56:91:af -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/FZsmIzWE+9tmXWn2hElPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNiNGNmMGE3NDcxZjAwMGY4YTU2YTA0OWIxNjM5NjdjYzNiZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FSbBYz5qZiCyTEQiSDGuOpHm8ix SNAfbqXAjrcD4akyYEC977hAtSRA3SsVUoz0QgDQHbT4Yik+R97anS/S++L0weTZ SFOkNAsA/soAfsQ7Dz1b+s5PciNCyNkfVBg96pbghOIfTKDykoj1dlwf6NbKRYX3 ALxbqXlIPa/nZzc4Xc5MCE/JvoMGM9cSWhguhDEt85++f4Iu/gvJ94gw9I3Nr3f4 hI8XTzFmcY70WlDiFT4QB6cnzkF8ON8kPbKcBA7V+m5rbG8Qb4EpKl319FPcDJiG DPKb9XP/lx3Y0g3/FiFMUyth5OhwIweOlEXAxcbrbECQ7bQIi20riW0W1QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMU7TPCnRx8AD4pWoEmxY5Z8w72ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2JiMmI3 NS1iYzAyLTRhNmItOThkNi1kODRlNmQzYWY5NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYmIyYjc1 LWJjMDItNGE2Yi05OGQ2LWQ4NGU2ZDNhZjk3NS8xL3hUdE04S2RISHdBUGlsYWdT YkZqbG56RHZaay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDT6tAAwQDVZ5QAwQC2ZHoMA0EAgACMAcDBQMq DZxAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM05jANBgkqhkiG9w0BAQsFAAOC AQEAgQOlsLDhxHw5qVKTuYEnhMG+cW+cvec3qfSGs54hMr/FaFNxRxXSfv1HR7oc McZE9nVMp3FTtKO7nuq83CLpQ/doPGG4feCAmsKiAAXh0o8WG8VRTGZqIHWh8hbu KgRhJMcaRKCUVP7VAZhLArFXQ92lPArgwo4wuPMeuVCAaIKDk47EixVxCiDsWa7r 664E4qMnbfxRQIAWpq2clGQc5eRlVk96mt9RFjQq9L8Ak2Wg4GvVqpnofPMJd8W/ KdphznEIKTkCYI2qF5bLn8dGViirvFspCqT4ZssvGDi63mrwBYXEUQQ+3Cv378NV TAVluHEwZfmgy3TjjxQpRVaRrw== -----END CERTIFICATE-----Generated at Tue Jan 27 10:11:54 2026 by rpki-client