This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer File: xZR6QUqIMFFWVtc4p4OCiQFgN30.cer (raw, json) Hash identifier: e4Iv9D2QxSv0sF+wUzlxHY93BHHYLFKZDBLTaA0ho5Y= Subject key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758CC1C50C16659C2D88B76EC1A31AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213595 IP: 92.39.0.0/20 IP: 95.140.64.0/20 IP: 193.254.4.0/22 IP: 194.69.6.0 -- 194.69.15.255 IP: 194.153.32.0 -- 194.153.71.255 IP: 2a00:1718::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:1c:50:c1:66:59:c2:d8:8b:76:ec:1a:31:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5947a414a8830515656d738a78382890160377d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:4a:c1:e0:57:8b:dc:93:18:b1:6a:94:b2: 46:b1:78:ad:95:df:cb:83:a5:a8:26:1d:e7:d3:9f: 67:cd:6a:36:fe:fe:6a:e4:eb:52:63:e7:90:6b:c2: 0f:b8:4a:8d:ab:38:42:95:1d:cc:23:b9:a6:52:58: 26:ae:1d:3f:d9:d1:7a:f3:18:9d:17:ea:e8:a2:a0: 91:2f:be:bf:0f:bc:c2:ba:f9:aa:21:c9:4a:09:8a: 04:ce:d9:eb:eb:c0:0c:f8:b0:55:04:1b:0e:00:b8: 6c:60:35:a9:fa:6a:10:48:f9:10:f7:8f:e1:d5:0b: de:8e:2d:7b:4b:19:0f:c5:27:d3:f2:51:5c:aa:bd: e8:fb:d1:94:26:a3:a7:42:e6:1e:00:0d:57:71:07: c1:65:b5:7a:ef:e0:20:84:ac:87:de:10:7e:85:e9: 13:48:27:77:00:c5:fe:4b:64:c6:fe:7a:83:8f:be: 40:0a:e6:01:e7:85:c6:ff:b5:4b:db:6e:e9:1b:ec: fe:24:58:bb:57:bd:ae:ac:9a:d1:33:9b:32:db:a6: 37:ab:8b:9a:0b:47:f7:59:0e:cd:0b:49:0e:45:82: 1a:63:e1:9b:2d:fb:e1:49:8d:3c:07:bb:50:a4:a4: 59:1f:75:f3:60:d6:2b:19:ad:02:cb:9f:4e:15:df: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.39.0.0/20 95.140.64.0/20 193.254.4.0/22 194.69.6.0-194.69.15.255 194.153.32.0-194.153.71.255 IPv6: 2a00:1718::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213595 Signature Algorithm: sha256WithRSAEncryption 4b:71:6d:d3:c1:38:af:dd:6b:7a:6b:25:04:14:ce:24:46:a9: b9:77:c9:aa:88:46:d7:5a:6c:58:21:e3:5c:37:16:ee:99:2c: 14:db:b5:be:70:fb:06:6e:6f:48:93:0a:2b:65:7c:f7:c6:8b: b4:18:e1:c0:0a:79:c7:10:42:da:2a:b3:91:72:a0:51:f1:f4: b9:41:65:3b:4e:ff:98:14:d4:05:9f:45:5e:07:34:24:82:6f: 03:9e:3a:b8:cc:9c:d3:47:8e:b5:e3:d5:19:a4:54:23:fc:64: c4:04:93:26:6f:8e:b9:60:dc:1f:a1:32:d7:d7:8c:1a:de:07: 9c:ab:f6:a9:6e:86:37:ba:d9:0b:be:cb:e7:5f:b7:9c:24:47: 74:d0:ea:c1:1a:8b:ef:8b:98:13:84:6e:e9:a0:85:38:91:4a: e4:87:6d:c1:ef:cb:be:f6:46:ac:b0:ae:87:ff:4d:75:69:12: 59:62:8c:1c:8f:52:3f:04:09:0b:ce:95:e9:63:75:2e:cb:3f: c1:eb:93:cc:2f:6f:86:7c:c9:67:4b:f0:37:20:ff:79:78:2c: 06:89:d3:d2:8c:01:7c:28:f8:bc:27:23:2e:8f:b9:7f:eb:6c: 3f:54:e2:3f:02:d6:60:45:68:5e:72:75:d2:b2:b3:a2:40:36: 7d:1f:9c:ab -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt3WMwcUMFmWcLYi3bsGjGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTk0N2E0MTRhODgzMDUxNTY1NmQ3MzhhNzgzODI4OTAxNjAzNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RKweBXi9yTGLFqlLJGsXitld/L g6WoJh3n059nzWo2/v5q5OtSY+eQa8IPuEqNqzhClR3MI7mmUlgmrh0/2dF68xid F+rooqCRL76/D7zCuvmqIclKCYoEztnr68AM+LBVBBsOALhsYDWp+moQSPkQ94/h 1Qveji17SxkPxSfT8lFcqr3o+9GUJqOnQuYeAA1XcQfBZbV67+AghKyH3hB+hekT SCd3AMX+S2TG/nqDj75ACuYB54XG/7VL227pG+z+JFi7V72urJrRM5sy26Y3q4ua C0f3WQ7NC0kORYIaY+GbLfvhSY08B7tQpKRZH3XzYNYrGa0Cy59OFd9CcQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFMWUekFKiDBRVlbXOKeDgokBYDd9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzkyZTBh Ni1iM2UzLTQ1NWQtOTJjZi0wZTU0OTRhZjU4NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvOTJlMGE2 LWIzZTMtNDU1ZC05MmNmLTBlNTQ5NGFmNTg0MC8xL3haUjZRVXFJTUZGV1Z0YzRw NE9DaVFGZ04zMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUF BwEHAQH/BEcwRTA0BAIAATAuAwQEXCcAAwQEX4xAAwQCwf4EMAwDBAHCRQYDBATC RQAwDAMEBcKZIAMEA8KZQDANBAIAAjAHAwUAKgAXGDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMDQlswDQYJKoZIhvcNAQELBQADggEBAEtxbdPBOK/da3prJQQUziRG qbl3yaqIRtdabFgh41w3Fu6ZLBTbtb5w+wZub0iTCitlfPfGi7QY4cAKeccQQtoq s5FyoFHx9LlBZTtO/5gU1AWfRV4HNCSCbwOeOrjMnNNHjrXj1RmkVCP8ZMQEkyZv jrlg3B+hMtfXjBreB5yr9qluhje62Qu+y+dft5wkR3TQ6sEai++LmBOEbumghTiR SuSHbcHvy772Rqywrof/TXVpEllijByPUj8ECQvOleljdS7LP8Hrk8wvb4Z8yWdL 8Dcg/3l4LAaJ09KMAXwo+LwnIy6PuX/rbD9U4j8C1mBFaF5yddKys6JANn0fnKs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:36 2026 by rpki-client