This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer File: xVa8y9yfLkutwKBX6gj3x0gYix8.cer (raw, json) Hash identifier: DWhbEhs7uQLU4X5Ev8UPm9kOxG2IW6AdRItrRZ/2Yr0= Subject key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C6B46649195A1CE4293445A95CAF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.203.84.0/22 IP: 2a0a:e4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6b:46:64:91:95:a1:ce:42:93:44:5a:95:ca:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:9e:27:5c:56:f7:b8:ef:eb:3b:5c:24:17: 06:9f:35:cb:b5:1f:e3:61:b3:c9:d8:83:61:43:b4: 98:ed:75:93:a7:0b:f4:a1:d8:07:b4:e9:e7:28:6e: 21:2f:5f:60:2e:83:2b:61:b0:02:f4:03:d4:ea:bd: 0a:67:4d:58:3f:dc:9d:19:c4:70:e4:eb:14:74:34: d4:a5:ee:44:f3:09:36:31:75:a0:14:a3:2c:98:bc: 25:47:32:37:32:4e:b0:9c:f9:c8:19:92:02:c9:94: b5:bf:5b:7b:ae:a8:49:3c:47:10:05:ad:ab:7c:d1: 7d:cb:56:a7:a4:89:50:8b:a7:ef:d2:d9:d9:fb:b6: a8:b2:ae:b0:fe:40:39:96:b4:cf:f4:48:3f:66:0e: 4f:4e:73:81:58:f2:ec:93:65:d8:5a:63:77:aa:7d: 25:9e:00:fc:0c:ae:d7:7c:54:3b:e4:02:2e:32:13: d9:ff:f6:a2:2a:c5:33:4b:a0:27:95:8f:a2:fc:a4: 8a:ac:1a:19:f1:0d:f2:c6:a9:ae:dd:69:d4:81:45: 10:d3:b2:7c:f5:df:fb:2b:a6:c5:2d:71:6d:a7:c8: bc:a6:52:31:5b:28:c8:9c:44:40:cc:43:fe:1b:c7: 6e:8b:88:9d:69:88:1a:7e:12:13:64:ea:d3:d5:1e: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.84.0/22 IPv6: 2a0a:e4c0::/29 Signature Algorithm: sha256WithRSAEncryption 1e:75:91:41:37:1f:53:db:ce:f7:63:f4:bf:c2:41:48:07:3d: 6e:c7:e7:f0:89:0e:d8:cb:6a:92:0d:cc:c5:4a:43:56:d4:e1: 33:cd:00:fd:0c:7c:9a:5d:5f:8c:ac:1d:44:94:bf:1a:4a:03: ad:9a:e3:3a:08:98:4f:74:bd:15:aa:7f:5a:b4:44:50:41:27: 83:21:c7:4d:97:97:da:72:9a:fc:cb:5b:89:f5:17:26:3a:4a: 47:4c:84:4a:51:e8:05:4f:c7:50:b9:57:9b:f4:ba:b8:87:b2: bb:79:a5:c9:46:20:ae:07:52:84:b9:ae:7c:6a:da:53:ca:8c: f4:81:99:36:38:b5:50:fc:a0:f1:83:2c:e5:fe:ec:48:6f:5a: 03:7f:42:f3:b7:d2:9a:f0:a2:8c:e7:cf:8d:f4:b8:ac:94:fd: d2:4a:5b:ec:e1:58:f3:c7:a0:9c:3e:1c:ea:74:4b:cd:92:f3: 05:b9:cf:33:39:51:04:01:34:70:28:44:41:e4:b2:aa:47:e8: 96:18:9a:dd:57:f6:b0:30:bf:41:cc:dc:0d:25:08:5d:ec:26: 23:e3:f7:f7:2c:43:06:6d:4a:38:09:a7:aa:99:9d:d1:a1:65: 86:82:d8:00:64:9f:6d:0b:da:57:15:21:d4:35:23:58:e9:85: 6f:22:4f:cb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XGtGZJGVoc5Ck0Ralcr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU2YmNjYmRjOWYyZTRiYWRjMGEwNTdlYTA4ZjdjNzQ4MTg4YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJWeJ1xW97jv6ztcJBcGnzXLtR/j YbPJ2INhQ7SY7XWTpwv0odgHtOnnKG4hL19gLoMrYbAC9APU6r0KZ01YP9ydGcRw 5OsUdDTUpe5E8wk2MXWgFKMsmLwlRzI3Mk6wnPnIGZICyZS1v1t7rqhJPEcQBa2r fNF9y1anpIlQi6fv0tnZ+7aosq6w/kA5lrTP9Eg/Zg5PTnOBWPLsk2XYWmN3qn0l ngD8DK7XfFQ75AIuMhPZ//aiKsUzS6AnlY+i/KSKrBoZ8Q3yxqmu3WnUgUUQ07J8 9d/7K6bFLXFtp8i8plIxWyjInERAzEP+G8dui4idaYgafhITZOrT1R75CQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMVWvMvcny5LrcCgV+oI98dIGIsfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzdkZWYx My1jNGNkLTQ2YTYtODI1Zi00MmVhNTUxNGU3MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvN2RlZjEz LWM0Y2QtNDZhNi04MjVmLTQyZWE1NTE0ZTcyMi8xL3hWYTh5OXlmTGt1dHdLQlg2 Z2ozeDBnWWl4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuctUMA0EAgACMAcDBQMqCuTAMA0GCSqGSIb3 DQEBCwUAA4IBAQAedZFBNx9T2873Y/S/wkFIBz1ux+fwiQ7Yy2qSDczFSkNW1OEz zQD9DHyaXV+MrB1ElL8aSgOtmuM6CJhPdL0Vqn9atERQQSeDIcdNl5facpr8y1uJ 9RcmOkpHTIRKUegFT8dQuVeb9Lq4h7K7eaXJRiCuB1KEua58atpTyoz0gZk2OLVQ /KDxgyzl/uxIb1oDf0Lzt9Ka8KKM58+N9LislP3SSlvs4Vjzx6CcPhzqdEvNkvMF uc8zOVEEATRwKERB5LKqR+iWGJrdV/awML9BzNwNJQhd7CYj4/f3LEMGbUo4Caeq mZ3RoWWGgtgAZJ9tC9pXFSHUNSNY6YVvIk/L -----END CERTIFICATE-----Generated at Wed Feb 4 02:16:48 2026 by rpki-client