This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer (raw, json) Hash identifier: S+InVE9t6k3fUZ65MaCc1TG2s27HCnJzGdv2c24PDtM= Subject key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC80ACBD89675B067A178A6078A3C92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215170 IP: 91.236.171.0/24 IP: 212.74.232.0/24 IP: 212.74.234.0 -- 212.74.236.255 IP: 2a0c:d740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0a:cb:d8:96:75:b0:67:a1:78:a6:07:8a:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c576ba0c098dc472186223c91e7def5216e239f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:a4:8a:61:f0:1d:b5:56:9d:38:08:8e:ab: e2:5b:82:c3:53:b7:2f:83:96:fd:cd:17:e7:28:59: 1b:93:e5:53:83:58:88:51:3a:e7:a8:b9:91:67:a4: c1:0a:80:1b:fc:56:be:b4:df:5a:49:94:4f:65:db: 38:36:66:ae:f2:e3:bc:9e:92:75:fc:27:84:d5:c3: 36:ba:54:46:97:2c:29:36:53:0d:8c:35:13:88:c0: 3b:10:8a:53:7f:29:19:cf:fa:c0:a4:5e:78:22:0d: f1:7c:45:68:be:9d:be:26:d6:da:d8:1d:22:6b:b6: 40:d0:a1:5a:df:47:ef:b3:b5:8a:e0:56:8c:1f:b3: f5:9b:96:92:e6:58:8a:5b:8a:a4:e0:5d:9a:dc:b5: 73:9c:20:45:c5:b1:bb:aa:a6:3e:b2:3d:9c:94:be: 9f:ae:60:84:9c:19:67:94:8c:7d:03:63:ce:61:47: a3:d3:da:b3:7c:ec:76:22:bb:17:f7:95:2b:d9:90: e1:35:bd:91:0b:58:79:5e:bd:32:b8:b1:89:72:ca: d9:d5:44:6a:03:dc:4b:cf:43:ba:e3:78:36:9e:55: 2d:a1:6b:ab:db:00:03:3c:56:18:e1:74:c4:98:49: cb:2b:d8:2e:1a:94:7c:e0:39:b7:0a:65:5f:5d:22: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.171.0/24 212.74.232.0/24 212.74.234.0-212.74.236.255 IPv6: 2a0c:d740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215170 Signature Algorithm: sha256WithRSAEncryption 7f:80:37:f0:82:89:31:ce:10:b6:9d:ca:02:d8:35:70:28:cc: 09:52:a1:af:91:60:1e:b9:01:8a:ef:39:e5:49:96:44:b3:b0: 8f:63:1d:8a:b9:eb:e0:38:bb:2a:12:39:a1:7d:67:a8:39:8e: 84:42:25:ed:38:a1:e1:fc:84:c6:56:98:e6:10:3c:8c:ca:bf: 47:50:76:12:b1:ce:be:7f:49:8f:57:7e:da:2a:e7:20:07:f8: df:7a:19:50:0f:45:1c:1e:85:8a:7f:f8:3b:79:57:70:b3:4a: 55:f6:de:78:1f:c8:d7:cf:52:11:eb:47:6b:46:76:c5:10:07: 36:15:27:7a:73:b1:cd:c3:44:85:05:57:df:36:0f:02:cb:96: bf:cb:3c:25:3c:8a:a5:2b:93:04:48:57:e6:b9:a4:80:92:6f: 91:0b:6b:5c:f0:6b:4b:c2:55:dc:5f:0f:8c:1c:19:66:f6:28: 4a:e2:7e:c7:49:45:3c:18:aa:48:2a:e2:b7:68:e7:54:76:ec: 17:f7:e3:53:29:4f:5f:5b:4c:11:f3:c5:7f:0f:2a:9a:e8:2e: df:c7:0d:30:ae:43:0e:4d:09:03:b1:4e:14:06:6e:68:1f:2d: 44:05:53:de:9b:6b:f3:d2:b2:09:a1:91:4a:a3:41:68:58:bd: eb:6d:a4:3b -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt6yArL2JZ1sGeheKYHijySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTc2YmEwYzA5OGRjNDcyMTg2MjIzYzkxZTdkZWY1MjE2ZTIzOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5akimHwHbVWnTgIjqviW4LDU7cv g5b9zRfnKFkbk+VTg1iIUTrnqLmRZ6TBCoAb/Fa+tN9aSZRPZds4Nmau8uO8npJ1 /CeE1cM2ulRGlywpNlMNjDUTiMA7EIpTfykZz/rApF54Ig3xfEVovp2+Jtba2B0i a7ZA0KFa30fvs7WK4FaMH7P1m5aS5liKW4qk4F2a3LVznCBFxbG7qqY+sj2clL6f rmCEnBlnlIx9A2POYUej09qzfOx2IrsX95Ur2ZDhNb2RC1h5Xr0yuLGJcsrZ1URq A9xLz0O643g2nlUtoWur2wADPFYY4XTEmEnLK9guGpR84Dm3CmVfXSKT7wIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFMV2ugwJjcRyGGIjyR5971IW4jnxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzlkNjJk NC1kMDMzLTQ2ZTktYmZkMy0zMmVlNDU4YTYzNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvOWQ2MmQ0 LWQwMzMtNDZlOS1iZmQzLTMyZWU0NThhNjM0OC8xL3hYYTZEQW1OeEhJWVlpUEpI bjN2VWhiaU9mRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAW+yrAwQA1EroMAwDBAHUSuoDBADUSuwwDQQC AAIwBwMFACoM10AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0iCMA0GCSqGSIb3 DQEBCwUAA4IBAQB/gDfwgokxzhC2ncoC2DVwKMwJUqGvkWAeuQGK7znlSZZEs7CP Yx2KuevgOLsqEjmhfWeoOY6EQiXtOKHh/ITGVpjmEDyMyr9HUHYSsc6+f0mPV37a KucgB/jfehlQD0UcHoWKf/g7eVdws0pV9t54H8jXz1IR60drRnbFEAc2FSd6c7HN w0SFBVffNg8Cy5a/yzwlPIqlK5MESFfmuaSAkm+RC2tc8GtLwlXcXw+MHBlm9ihK 4n7HSUU8GKpIKuK3aOdUduwX9+NTKU9fW0wR88V/Dyqa6C7fxw0wrkMOTQkDsU4U Bm5oHy1EBVPem2vz0rIJoZFKo0FoWL3rbaQ7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:23 2026 by rpki-client