This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer File: xVfBn2xy2JAMTYnsers11PqSEUs.cer (raw, json) Hash identifier: JhoLMprYI570tE5oOC+y+jV3rI9kpQ3x+aYKRJg+5q8= Subject key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAEA7FB7CE47AB44DB974DCB96D9F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209848 IP: 213.184.88.0/22 IP: 2a09:3e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ea:7f:b7:ce:47:ab:44:db:97:4d:cb:96:d9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:01:a6:16:c4:ef:44:42:4d:10:9e:7a:38: eb:f6:cc:1a:8e:34:6c:78:a3:a3:c7:92:53:2b:a2: 00:c9:dc:9b:1d:a6:e9:8a:f3:f6:6d:4a:64:62:35: 21:bd:69:ce:f8:12:2b:86:6f:70:32:61:3e:61:65: c6:ea:33:5d:1a:33:c5:bf:e4:b6:b0:48:11:48:1a: 14:95:0e:c1:ed:5b:6c:95:8e:ca:15:76:57:d3:db: 9d:18:55:d4:06:7d:b3:df:0b:bd:5d:67:a8:e6:01: ce:30:80:71:b8:9c:be:d2:80:9a:c3:7f:13:e3:be: 86:34:ba:30:7e:f8:d1:fa:f5:6b:bc:b3:b7:d8:67: 51:f4:a8:f3:e9:65:64:1c:fb:34:09:a1:47:5c:d1: 3d:d8:15:0d:2c:73:91:db:01:b5:ce:b6:99:d6:47: 18:79:1c:96:9b:74:00:32:d0:7e:20:5f:03:18:55: 17:17:83:84:66:82:c3:3a:2b:45:e1:81:b8:cf:30: 50:cc:be:95:6a:bd:96:11:f0:6c:1c:01:58:af:ba: fe:f8:29:e1:b3:86:7a:bb:ae:8d:f2:61:94:71:84: eb:2b:0f:87:76:cd:a8:83:cd:60:d7:80:45:d7:20: 49:fe:6c:de:a0:05:f9:b4:cc:35:0d:9b:d3:11:05: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.184.88.0/22 IPv6: 2a09:3e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209848 Signature Algorithm: sha256WithRSAEncryption 13:93:16:4c:af:aa:45:b8:9a:ea:2f:1a:58:2f:3c:bc:8c:9a: 81:9d:0f:c9:e0:fe:47:59:58:59:ec:8e:d7:09:e5:88:52:84: af:e9:54:78:72:aa:20:56:3e:68:84:3d:d6:cb:2d:85:e3:17: a2:0c:3d:6e:c4:85:1a:a8:f1:f2:bb:53:b0:d1:93:6c:bf:98: fa:1e:04:40:4b:b5:09:7b:2c:68:04:83:b6:ed:55:8c:29:88: f9:ea:b2:72:78:f3:e9:bf:18:21:40:e6:5b:cf:80:50:82:0d: 42:58:06:da:3a:9f:16:a2:d1:19:7f:16:1b:75:aa:62:f9:cc: 3c:e6:a0:72:28:60:c5:ec:7a:0a:72:61:e8:a1:5c:fa:74:be: f1:6e:8c:5c:73:32:06:5d:2a:4d:d5:5a:c7:6c:b4:37:5b:18: cf:a3:a2:51:a0:16:2d:3b:89:9c:92:2c:96:f1:91:65:a5:1e: 2a:21:62:26:34:f2:db:92:3e:e6:85:04:09:2d:e6:5b:a6:f7: 2b:ad:7a:f0:43:7e:3f:32:48:10:43:d4:ef:d9:fc:b3:42:c5: 90:0c:08:07:40:10:5f:70:7e:83:ea:e5:dd:b6:bb:17:a3:b4: 1a:be:86:f8:f0:2f:4d:45:2c:ba:48:a7:6b:f3:c4:96:8c:12: 2f:db:dd:77 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yup/t85Hq0Tbl03Lltn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU3YzE5ZjZjNzJkODkwMGM0ZDg5ZWM3YWJiMzVkNGZhOTIxMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLgBphbE70RCTRCeejjr9swajjRs eKOjx5JTK6IAydybHabpivP2bUpkYjUhvWnO+BIrhm9wMmE+YWXG6jNdGjPFv+S2 sEgRSBoUlQ7B7VtslY7KFXZX09udGFXUBn2z3wu9XWeo5gHOMIBxuJy+0oCaw38T 476GNLowfvjR+vVrvLO32GdR9Kjz6WVkHPs0CaFHXNE92BUNLHOR2wG1zraZ1kcY eRyWm3QAMtB+IF8DGFUXF4OEZoLDOitF4YG4zzBQzL6Var2WEfBsHAFYr7r++Cnh s4Z6u66N8mGUcYTrKw+Hds2og81g14BF1yBJ/mzeoAX5tMw1DZvTEQWMIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMVXwZ9sctiQDE2J7Hq7NdT6khFLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2U3Mzk4 OC1jMWMyLTQwOGYtYjczOC0zOTA0NmI0YTkxNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZTczOTg4 LWMxYzItNDA4Zi1iNzM4LTM5MDQ2YjRhOTE3MC8xL3hWZkJuMnh5MkpBTVRZbnNl cnMxMVBxU0VVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQC1bhYMA0EAgACMAcDBQMqCT4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMzuDANBgkqhkiG9w0BAQsFAAOCAQEAE5MWTK+qRbia 6i8aWC88vIyagZ0PyeD+R1lYWeyO1wnliFKEr+lUeHKqIFY+aIQ91sstheMXogw9 bsSFGqjx8rtTsNGTbL+Y+h4EQEu1CXssaASDtu1VjCmI+eqycnjz6b8YIUDmW8+A UIINQlgG2jqfFqLRGX8WG3WqYvnMPOagcihgxex6CnJh6KFc+nS+8W6MXHMyBl0q TdVax2y0N1sYz6OiUaAWLTuJnJIslvGRZaUeKiFiJjTy25I+5oUECS3mW6b3K616 8EN+PzJIEEPU79n8s0LFkAwIB0AQX3B+g+rl3ba7F6O0Gr6G+PAvTUUsukina/PE lowSL9vddw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:17 2026 by rpki-client