This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer File: xX5Yw0bntBVVDBOurdLPkO3QeJU.cer (raw, json) Hash identifier: SDcDQNFSCQLWH73WW2/35GsGhBe3CaDyMEibonD0JXU= Subject key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1323698322B3D97A4FE12F9876932A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39611 IP: 185.49.24.0/22 IP: 213.207.32.0/19 IP: 2a01:9d20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:23:69:83:22:b3:d9:7a:4f:e1:2f:98:76:93:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:2a:73:a5:c9:ff:be:60:82:eb:d8:a7:f7: 65:45:88:ef:1c:97:f0:44:f3:cc:c9:56:65:4f:b5: 5c:c5:90:47:3c:79:c8:8c:a9:9c:d6:3e:93:0d:21: a3:7d:5b:87:3d:34:39:67:fe:01:a9:8e:ad:b9:7c: 60:41:b5:75:ac:50:60:7f:9e:48:d2:8d:93:18:be: b2:30:9c:b8:22:bc:45:2b:30:fa:01:51:30:78:26: 21:87:4a:85:5e:0e:9e:07:ba:42:ec:72:57:e3:9c: d5:12:54:09:33:75:b1:98:0a:63:ea:37:29:50:8a: d4:b4:9b:ef:62:10:b6:9a:3f:b7:ec:eb:19:f3:5f: d3:75:0d:19:f2:30:f6:0e:f5:46:98:b7:11:9f:30: b0:6f:39:83:5f:49:6c:03:b1:34:d0:05:ba:ad:17: b1:a1:b0:02:54:65:a0:ca:84:18:fa:5e:e6:bf:ea: 8a:c6:d3:12:83:2f:b3:8c:e8:d4:e4:0e:1c:be:ec: 5c:7a:52:7d:fa:c3:7b:18:a9:a9:48:d8:0e:26:ac: 64:9f:74:4e:97:aa:cf:ef:fe:6d:c4:b4:55:12:16: 3c:f7:ec:83:fc:f4:46:5b:45:07:04:69:0b:cc:66: 39:48:62:8b:b8:ec:67:a2:89:ef:4b:f4:93:c2:8e: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.24.0/22 213.207.32.0/19 IPv6: 2a01:9d20::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39611 Signature Algorithm: sha256WithRSAEncryption a0:7a:7b:4e:03:89:cf:4f:af:70:29:bc:4c:70:e7:d4:1a:90: 06:5a:c6:6c:d4:cb:28:3c:51:ad:06:e5:ff:62:7f:d0:ed:0a: 07:ec:6f:20:44:da:b3:79:44:e2:5e:63:cd:78:f7:77:ab:f5: c4:50:d3:e7:ae:e6:3a:03:91:e1:eb:d8:77:b5:26:21:ec:a8: 54:b2:f4:b5:64:85:12:02:12:64:9f:28:5b:d0:af:b5:af:2a: 74:49:4b:50:b5:a9:3a:90:be:e3:b1:9f:b4:90:ab:a7:db:bd: 12:49:d2:3c:26:69:83:e3:c9:b8:68:11:d4:f2:07:72:aa:93: 91:f0:a1:43:3f:3e:70:fd:86:0b:2e:6e:38:8a:3c:60:98:bc: c4:01:43:4b:bb:3c:a1:96:ce:1f:14:5d:d1:29:92:d8:6c:a0: 84:20:6b:d2:75:96:f7:77:e5:79:3c:57:81:01:db:d3:49:49: 4a:ad:19:10:d1:14:14:64:8a:3d:54:79:cb:0d:1d:fe:9d:ab: c1:83:a7:f8:26:16:84:7c:39:1e:8b:07:e5:cc:e2:cf:c0:57: 99:2a:d2:94:56:70:85:65:39:b4:49:bd:81:b5:b6:7b:d4:76: 63:37:71:5b:14:93:4a:28:69:76:97:dc:34:84:7b:99:60:03: 30:61:f3:ac -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EyNpgyKz2XpP4S+YdpMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTdlNThjMzQ2ZTdiNDE1NTUwYzEzYWVhZGQyY2Y5MGVkZDA3ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18Eqc6XJ/75gguvYp/dlRYjvHJfw RPPMyVZlT7VcxZBHPHnIjKmc1j6TDSGjfVuHPTQ5Z/4BqY6tuXxgQbV1rFBgf55I 0o2TGL6yMJy4IrxFKzD6AVEweCYhh0qFXg6eB7pC7HJX45zVElQJM3WxmApj6jcp UIrUtJvvYhC2mj+37OsZ81/TdQ0Z8jD2DvVGmLcRnzCwbzmDX0lsA7E00AW6rRex obACVGWgyoQY+l7mv+qKxtMSgy+zjOjU5A4cvuxcelJ9+sN7GKmpSNgOJqxkn3RO l6rP7/5txLRVEhY89+yD/PRGW0UHBGkLzGY5SGKLuOxnoonvS/STwo7RZwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2NlZTcw ZC04YjUyLTRjMTEtYTc3Yy0wNzQzMDU3MzVhYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvY2VlNzBk LThiNTItNGMxMS1hNzdjLTA3NDMwNTczNWFjMi8xL3hYNVl3MGJudEJWVkRCT3Vy ZExQa08zUWVKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTEYAwQF1c8gMA0EAgACMAcDBQMqAZ0gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCauzANBgkqhkiG9w0BAQsFAAOCAQEAoHp7 TgOJz0+vcCm8THDn1BqQBlrGbNTLKDxRrQbl/2J/0O0KB+xvIETas3lE4l5jzXj3 d6v1xFDT567mOgOR4evYd7UmIeyoVLL0tWSFEgISZJ8oW9Cvta8qdElLULWpOpC+ 47GftJCrp9u9EknSPCZpg+PJuGgR1PIHcqqTkfChQz8+cP2GCy5uOIo8YJi8xAFD S7s8oZbOHxRd0SmS2GyghCBr0nWW93fleTxXgQHb00lJSq0ZENEUFGSKPVR5yw0d /p2rwYOn+CYWhHw5HosH5cziz8BXmSrSlFZwhWU5tEm9gbW2e9R2YzdxWxSTSihp dpfcNIR7mWADMGHzrA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:41 2026 by rpki-client