This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer File: xVV8l9e7_0fKIq1fufBYn6rxWb0.cer (raw, json) Hash identifier: bCrQMZWEjeXKgkZMsbnAzUZaKyd9m6WbxnF7HRZL3fs= Subject key identifier: C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78B9F09685F05A174F0EEB7D1709D0C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:43:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213045 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:b9:f0:96:85:f0:5a:17:4f:0e:eb:7d:17:09:d0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5557c97d7bbff47ca22ad5fb9f0589faaf159bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:d1:e1:f8:04:cd:a8:51:06:f2:b5:44:7a: e7:eb:02:b5:18:96:4f:6d:20:3f:15:95:e7:6a:83: 57:eb:9e:34:45:cb:ed:dc:62:7a:78:c9:f2:83:b9: 08:ea:ae:12:83:aa:e0:b0:66:76:f1:59:44:8d:9b: 65:82:0b:ee:74:5d:1f:0b:1a:fe:c1:cf:f3:6d:51: f9:5b:89:3e:e4:68:8e:26:8b:a2:30:77:21:d4:0a: e1:cf:0e:56:7f:4d:63:45:1a:d5:ea:4e:02:89:b5: 80:aa:2d:26:52:12:59:ff:c2:ea:1b:d7:c4:24:e1: 1b:ad:ec:9c:4b:68:13:53:1f:eb:b0:d9:11:19:45: e4:6d:a8:ac:d6:58:82:bf:df:3c:29:c9:02:4b:e9: e6:f7:c7:70:de:10:20:e9:ef:31:2f:92:db:af:54: 4d:24:73:3b:a7:0b:3c:42:de:10:12:a0:cc:ce:a9: 5b:38:09:85:b7:33:1e:e6:83:41:b8:0e:4f:52:08: df:54:b4:2a:a2:94:cc:86:70:a5:5c:2f:87:31:ae: a7:0d:f1:0e:30:46:66:8a:3a:4d:c2:f2:43:5a:4f: bf:c4:33:6d:f0:97:68:58:ef:c3:d5:70:80:b7:3f: c5:a0:96:46:72:b6:a1:a0:ea:56:24:47:90:6a:3f: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213045 Signature Algorithm: sha256WithRSAEncryption 10:d8:35:a0:28:de:91:b5:6d:a6:7c:39:d2:43:7b:a3:62:0b: 41:83:1e:c3:1a:8e:c2:84:e1:78:22:9f:d9:11:1f:67:0a:fb: b0:a7:c9:07:2c:44:4d:4d:f5:33:a1:02:09:6f:59:9f:4c:5a: a8:94:27:aa:84:8d:68:9f:21:e9:ce:d1:08:eb:b3:be:01:fe: 29:8d:c3:7e:b2:29:7a:b4:6d:5a:81:8f:8c:a6:ca:81:c8:55: a7:72:19:59:83:77:63:2e:b6:63:46:ac:e9:b8:6f:48:cc:81: da:c3:9f:59:b4:5f:63:7f:87:2c:84:8e:88:de:e3:03:7e:0c: 67:d5:8c:3a:01:c7:ba:f7:52:76:f7:6e:2f:a6:dd:b7:5d:ea: 23:97:aa:a9:f8:f9:5c:a0:66:bb:0a:1c:7c:81:6a:9f:39:a9: 4e:67:f9:e0:09:1e:f3:7d:0f:dd:0e:a7:d3:fe:f2:32:f8:53: 50:9b:92:59:1a:3a:80:71:fa:49:7b:ab:f4:da:ab:fa:7d:56: ec:f1:de:86:fd:9a:d8:75:2a:4e:ba:99:50:6b:c3:c1:b4:e0: 5f:7a:69:03:54:03:1e:b0:83:49:e8:fe:88:9b:81:a7:3b:de: 26:64:11:ab:a5:6d:55:a2:62:0a:dd:0a:a7:0f:03:42:75:ce: 8b:e8:79:30 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4ufCWhfBaF08O630XCdDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDg0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU1N2M5N2Q3YmJmZjQ3Y2EyMmFkNWZiOWYwNTg5ZmFhZjE1OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj7R4fgEzahRBvK1RHrn6wK1GJZP bSA/FZXnaoNX6540Rcvt3GJ6eMnyg7kI6q4Sg6rgsGZ28VlEjZtlggvudF0fCxr+ wc/zbVH5W4k+5GiOJouiMHch1Arhzw5Wf01jRRrV6k4CibWAqi0mUhJZ/8LqG9fE JOEbreycS2gTUx/rsNkRGUXkbais1liCv988KckCS+nm98dw3hAg6e8xL5Lbr1RN JHM7pws8Qt4QEqDMzqlbOAmFtzMe5oNBuA5PUgjfVLQqopTMhnClXC+HMa6nDfEO MEZmijpNwvJDWk+/xDNt8JdoWO/D1XCAtz/FoJZGcrahoOpWJEeQaj/pZwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFMVVfJfXu/9HyiKtX7nwWJ+q8Vm9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyYmZk MzU3LWQ4M2ItNDAwYS04YzQ2LTRmYmQxMTE5ZjRhMy8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzJi ZmQzNTctZDgzYi00MDBhLThjNDYtNGZiZDExMTlmNGEzLzIvQzU1NTdDOTdEN0JC RkY0N0NBMjJBRDVGQjlGMDU4OUZBQUYxNTlCRC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDQDUw DQYJKoZIhvcNAQELBQADggEBABDYNaAo3pG1baZ8OdJDe6NiC0GDHsMajsKE4Xgi n9kRH2cK+7CnyQcsRE1N9TOhAglvWZ9MWqiUJ6qEjWifIenO0Qjrs74B/imNw36y KXq0bVqBj4ymyoHIVadyGVmDd2MutmNGrOm4b0jMgdrDn1m0X2N/hyyEjoje4wN+ DGfVjDoBx7r3Unb3bi+m3bdd6iOXqqn4+VygZrsKHHyBap85qU5n+eAJHvN9D90O p9P+8jL4U1CbklkaOoBx+kl7q/Taq/p9Vuzx3ob9mth1Kk66mVBrw8G04F96aQNU Ax6wg0no/oibgac73iZkEaulbVWiYgrdCqcPA0J1zovoeTA= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:53 2026 by rpki-client