This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer (raw, json) Hash identifier: 0LdcUoCJQW0uinpFbtTnx//DzrNDQjvbIgdAfWz6g2I= Subject key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA70D63027FC4F73A216E7C8A1C5BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208766 IP: 45.85.228.0/22 IP: 2a0e:cc80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0d:63:02:7f:c4:f7:3a:21:6e:7c:8a:1c:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5721737651598f56cf7195120777d7b5316f552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:9f:e2:d8:45:cc:85:40:57:bd:33:dc:cb: 34:3c:01:34:d4:fc:14:98:0c:2e:7b:8d:2b:71:4f: 96:6c:40:22:3a:56:64:fa:bc:27:ec:bf:52:0f:81: 46:ad:b4:0e:ed:88:84:27:d3:30:cd:93:15:61:f7: 83:85:b1:cb:59:74:3d:cf:60:ef:7a:bd:54:8e:63: 37:4d:d5:eb:fb:37:90:13:1f:40:c8:e6:95:26:bf: 53:54:42:f5:8a:de:a8:02:24:ce:74:2b:65:ce:62: 00:8c:dc:5c:5a:a9:01:a0:3b:49:98:7a:f7:62:9c: fe:f2:13:03:15:89:45:04:81:55:c2:1a:95:49:64: 21:a7:97:ed:de:94:e9:1d:d3:1d:ae:bb:b6:a9:47: af:8d:07:d5:22:20:8d:5f:3a:cc:79:92:8c:0d:3c: dd:ef:71:9c:8f:b7:e1:0f:7e:a9:f3:35:5b:81:23: d9:92:58:d0:d3:d5:1d:9b:03:47:88:7e:58:97:d1: ca:4f:25:0b:19:c1:bc:50:dc:a8:33:8e:dc:e3:6c: 59:3f:31:c3:17:e9:20:92:18:2c:f8:4e:79:a0:1d: 84:6a:ef:d9:a8:c5:74:27:1f:1f:ee:0c:35:6e:0a: 4a:38:30:76:92:32:3e:21:c6:da:cb:bc:66:82:f4: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.228.0/22 IPv6: 2a0e:cc80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208766 Signature Algorithm: sha256WithRSAEncryption 04:fc:29:8b:66:4f:73:9d:6b:12:4f:1d:28:86:74:10:7e:b5: 94:80:32:44:1d:76:da:1f:28:94:f5:9e:ae:2c:99:23:13:85: 84:7e:d4:3c:c7:25:7a:d2:f2:e3:02:e8:45:71:53:1a:b1:3a: af:97:da:6c:44:6e:ed:d1:6d:2b:d4:94:a3:17:e0:b7:5c:9d: 1a:82:24:aa:3b:10:3d:f7:20:d3:93:42:66:b2:aa:bc:9e:8b: 38:a4:39:35:fe:bc:4c:a9:84:74:b6:b6:cd:5b:f1:a5:87:47: 43:65:f1:b7:8f:8a:49:04:23:66:d4:55:9b:58:9b:14:2d:de: 2a:fd:63:d2:19:01:52:e0:58:d6:b9:ad:a6:9f:b7:bb:15:a2: 9d:22:70:d9:7a:4d:c1:7a:a1:a5:e3:11:8c:88:4d:c8:be:68: 17:d9:60:a7:8a:24:ce:22:29:37:b9:da:32:4e:2b:04:b2:6f: 1d:f2:f6:03:a8:a0:a4:f6:61:98:96:4f:6f:f7:c9:34:5a:a7: 14:d7:60:5b:8d:36:22:17:91:09:b8:d7:70:65:06:81:24:66: 51:43:40:dd:56:b4:41:b4:68:d1:82:8e:0c:8c:d1:4a:ec:fd: 2b:6c:da:80:27:72:0c:97:64:4c:21:f6:8f:d4:46:86:3b:c5: 8e:bb:39:52 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pw1jAn/E9zohbnyKHFvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTcyMTczNzY1MTU5OGY1NmNmNzE5NTEyMDc3N2Q3YjUzMTZmNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqquf4thFzIVAV70z3Ms0PAE01PwU mAwue40rcU+WbEAiOlZk+rwn7L9SD4FGrbQO7YiEJ9MwzZMVYfeDhbHLWXQ9z2Dv er1UjmM3TdXr+zeQEx9AyOaVJr9TVEL1it6oAiTOdCtlzmIAjNxcWqkBoDtJmHr3 Ypz+8hMDFYlFBIFVwhqVSWQhp5ft3pTpHdMdrru2qUevjQfVIiCNXzrMeZKMDTzd 73Gcj7fhD36p8zVbgSPZkljQ09UdmwNHiH5Yl9HKTyULGcG8UNyoM47c42xZPzHD F+kgkhgs+E55oB2Eau/ZqMV0Jx8f7gw1bgpKODB2kjI+Icbay7xmgvTPhQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMVyFzdlFZj1bPcZUSB3fXtTFvVSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzViNDNi YS04ZWI1LTQ0ZDMtOWI4Ny1lMDAwZTNmZmY5M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvNWI0M2Jh LThlYjUtNDRkMy05Yjg3LWUwMDBlM2ZmZjkzZS8xL3hYSVhOMlVWbVBWczl4bFJJ SGQ5ZTFNVzlWSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVXkMA0EAgACMAcDBQMqDsyAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvfjANBgkqhkiG9w0BAQsFAAOCAQEABPwpi2ZPc51r Ek8dKIZ0EH61lIAyRB122h8olPWeriyZIxOFhH7UPMcletLy4wLoRXFTGrE6r5fa bERu7dFtK9SUoxfgt1ydGoIkqjsQPfcg05NCZrKqvJ6LOKQ5Nf68TKmEdLa2zVvx pYdHQ2Xxt4+KSQQjZtRVm1ibFC3eKv1j0hkBUuBY1rmtpp+3uxWinSJw2XpNwXqh peMRjIhNyL5oF9lgp4okziIpN7naMk4rBLJvHfL2A6igpPZhmJZPb/fJNFqnFNdg W402IheRCbjXcGUGgSRmUUNA3Va0QbRo0YKODIzRSuz9K2zagCdyDJdkTCH2j9RG hjvFjrs5Ug== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:41 2026 by rpki-client