This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer (raw, json) Hash identifier: xqEstR60E6Pv/0M06SCXVB/d3Q9Xmdmkxt9SZhuAPWw= Subject key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F148F52F9615584E1DDAB4A0FE68B9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207275 IP: 91.226.33.0/24 IP: 2a10:3180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:8f:52:f9:61:55:84:e1:dd:ab:4a:0f:e6:8b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:25:8e:e6:83:5c:23:a6:c2:db:4d:e2:a6: 4d:fa:89:96:e9:b3:a4:60:99:76:70:fa:71:82:2c: 91:53:27:da:43:30:1b:5a:f2:de:ee:6f:ee:c2:02: c9:d9:f1:00:c6:d5:49:80:f7:8f:44:15:ef:01:5f: 3d:ea:03:16:6e:fb:b9:22:47:2a:94:a6:74:ac:70: 22:9c:b2:ac:f0:82:b2:64:43:0d:2d:8a:0d:ea:71: 04:0d:34:fb:b2:f8:02:5a:96:67:97:10:87:29:4c: d8:8d:5d:a7:dc:22:0f:1b:66:20:5d:c9:6b:cf:30: 1c:fd:39:28:67:a2:18:df:44:f5:45:ab:3d:82:ee: 7b:4c:90:1d:42:91:d5:82:66:ac:56:c0:b6:7b:b4: e9:98:19:92:3f:8f:de:90:62:07:05:90:29:5b:0e: 62:a2:e4:53:8a:06:d5:f0:78:2f:d3:c3:5a:a7:4a: c1:98:4a:43:32:4f:9d:2c:53:b2:a0:04:13:7d:11: d3:56:01:28:e3:9e:ce:86:53:c8:7f:f5:2e:a9:fe: e7:20:a9:a6:54:07:67:c2:de:13:67:60:47:f4:1b: e7:74:59:d5:80:2e:1d:16:ce:09:a6:08:ae:58:d2: d6:e8:06:96:ee:78:ed:16:1c:79:a7:8e:b4:32:3d: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.33.0/24 IPv6: 2a10:3180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207275 Signature Algorithm: sha256WithRSAEncryption 92:eb:eb:02:8d:78:8f:7a:b5:ac:bc:c9:ec:8d:b0:59:6b:46: 2c:29:b7:fb:c3:da:26:c2:40:76:60:c3:b4:62:1b:bb:94:df: 10:0e:10:7e:b1:59:4b:80:01:6f:06:ef:5c:78:1c:72:08:c2: a3:a3:a1:88:10:8c:18:2a:90:a4:7b:e8:b9:d9:4a:2f:aa:6d: 37:17:07:2d:c4:d1:2a:e7:7d:c0:51:79:d6:7a:ca:2c:3a:da: 12:58:d5:a8:96:86:7c:f4:ad:ac:67:47:76:aa:1b:4d:ac:9b: 4e:f0:2d:7b:cd:6a:7a:91:5b:d7:49:62:e9:f9:82:d6:42:ca: 02:a9:71:a0:61:0a:aa:89:c7:a3:73:4a:61:57:ed:b4:fe:fa: f2:fe:3f:36:3b:f1:11:fb:c9:f6:bb:0e:6e:6a:56:b1:bf:24: 4b:78:1c:08:36:97:61:f1:d9:6e:45:43:ae:ef:c4:20:a3:3a: 56:85:dd:84:8d:1b:e5:7f:3f:16:07:08:7b:5b:0c:9f:fb:40: 2e:ca:a1:d2:8e:b9:dc:1c:93:3c:a1:e8:60:1d:37:8f:40:83: 3b:61:91:a9:ec:c1:b5:41:1f:70:8c:2a:91:d0:2a:4a:75:02: 74:59:1b:ce:5f:d2:29:48:76:15:48:8e:a9:d4:2c:16:3a:6d: 77:32:3d:ec -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FI9S+WFVhOHdq0oP5oubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTUzODY5MzE2N2FmZDRjNWFhZTUxZGVhN2U1ZjNmOTliYTY1YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhgljuaDXCOmwttN4qZN+omW6bOk YJl2cPpxgiyRUyfaQzAbWvLe7m/uwgLJ2fEAxtVJgPePRBXvAV896gMWbvu5Ikcq lKZ0rHAinLKs8IKyZEMNLYoN6nEEDTT7svgCWpZnlxCHKUzYjV2n3CIPG2YgXclr zzAc/TkoZ6IY30T1Ras9gu57TJAdQpHVgmasVsC2e7TpmBmSP4/ekGIHBZApWw5i ouRTigbV8Hgv08Nap0rBmEpDMk+dLFOyoAQTfRHTVgEo457OhlPIf/Uuqf7nIKmm VAdnwt4TZ2BH9BvndFnVgC4dFs4JpgiuWNLW6AaW7njtFhx5p460Mj2tnwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMVThpMWev1MWq5R3qfl8/mbplvpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzVkZWYw Zi00MGE0LTQwNzEtYTYwMi1iYzJiN2U2ZjFjYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNWRlZjBm LTQwYTQtNDA3MS1hNjAyLWJjMmI3ZTZmMWNhNC8xL3hWT0dreFo2X1V4YXJsSGVw LVh6LVp1bVctay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW+IhMA0EAgACMAcDBQMqEDGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpqzANBgkqhkiG9w0BAQsFAAOCAQEAkuvrAo14j3q1 rLzJ7I2wWWtGLCm3+8PaJsJAdmDDtGIbu5TfEA4QfrFZS4ABbwbvXHgccgjCo6Oh iBCMGCqQpHvoudlKL6ptNxcHLcTRKud9wFF51nrKLDraEljVqJaGfPStrGdHdqob TaybTvAte81qepFb10li6fmC1kLKAqlxoGEKqonHo3NKYVfttP768v4/NjvxEfvJ 9rsObmpWsb8kS3gcCDaXYfHZbkVDru/EIKM6VoXdhI0b5X8/FgcIe1sMn/tALsqh 0o653ByTPKHoYB03j0CDO2GRqezBtUEfcIwqkdAqSnUCdFkbzl/SKUh2FUiOqdQs FjptdzI97A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:37 2026 by rpki-client