This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer File: xaL0JAfyHJ12kPsw_YzbK_320DA.cer (raw, json) Hash identifier: wrwjbvoJAE/f8Kmo3yx/9osjfP34OTusxJZG5qeYqS8= Subject key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC91E0E12625916890025E9B0DBF112 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15967 IP: 31.172.168.0/22 IP: 77.55.0.0/16 IP: 85.128.128.0/17 IP: 2a01:6100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1e:0e:12:62:59:16:89:00:25:e9:b0:db:f1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:83:8f:52:39:9e:bf:32:c9:7a:2a:f5:2e: f6:35:d5:f8:3c:4d:91:ad:66:17:e5:18:2e:bd:4c: 93:d0:12:46:8c:31:b2:62:67:00:7c:17:e9:2a:bf: f4:d2:9d:0c:46:36:6b:45:a0:eb:bd:3f:a6:d5:5e: c5:4e:ff:0d:35:e5:a7:5b:c6:a5:51:79:83:11:23: c1:78:51:2f:d1:d9:36:07:0a:77:6b:6f:e7:b4:5e: c5:87:26:a2:fe:d1:3f:e5:a1:96:55:be:4f:36:b9: f2:0c:c9:c4:d2:a5:05:03:83:2d:86:02:eb:81:1b: 1b:52:80:db:ac:7b:b7:3f:c7:96:fe:fd:e7:11:3f: 96:41:e0:b6:27:cf:85:d1:0e:f7:71:cd:8a:3b:a2: ad:ca:33:3e:b2:fc:aa:db:72:56:5d:90:c3:19:fa: 8b:45:27:6b:b0:bb:95:e3:64:d0:c4:6c:a6:9a:e8: 70:81:e2:6d:b4:2a:29:54:10:2a:86:be:1a:63:d9: d9:a1:75:f6:38:29:42:f9:ed:cf:e3:dc:08:b8:c0: f4:d2:91:f1:21:dd:34:83:3e:2a:76:51:50:00:0c: 15:f5:7b:64:be:67:83:92:b7:73:ac:c1:0c:90:f2: 5b:6b:fb:db:01:99:ea:1e:36:c9:ea:d4:17:a6:e4: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.168.0/22 77.55.0.0/16 85.128.128.0/17 IPv6: 2a01:6100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15967 Signature Algorithm: sha256WithRSAEncryption 3f:f7:65:d3:24:fc:00:12:cb:3f:93:d3:3b:9b:4c:22:2c:39: 31:02:d9:32:b0:05:83:11:a3:12:0e:74:6f:dd:f6:03:f3:72: 7d:d4:0b:47:74:ea:09:cf:6e:fd:cb:33:6b:54:fb:c2:8c:b3: b4:42:c8:fe:21:f1:b5:d1:59:0b:10:f9:59:98:31:8a:7d:4f: 35:df:e0:e6:f2:76:bb:0c:2f:de:63:1a:d7:88:c7:3c:0d:f6: 6a:21:9e:b8:9a:81:16:a5:1b:22:f5:c8:06:e3:12:31:c4:22: 37:67:c7:1f:11:b2:00:8e:82:d4:18:35:15:1e:ab:62:0a:3a: 92:69:d3:75:3a:31:b2:0a:f2:f6:22:62:fb:ff:de:77:c4:55: 88:d0:d8:aa:62:a3:ca:04:ce:f5:7e:25:4f:9b:ff:6b:49:2e: 91:ff:7a:d3:fb:4a:d5:a3:27:f3:0d:b0:39:78:7c:41:26:56: cb:2a:fe:c0:93:37:50:73:44:bf:39:34:a1:36:79:d2:23:22: 45:28:2d:83:ab:1c:8e:bd:6f:a5:0a:1f:f0:dd:90:c2:08:f0: d1:81:e6:4a:bc:aa:24:f1:b8:5f:4e:15:19:b1:d4:31:27:c5: da:1f:fe:b8:a6:06:e3:ba:56:7c:cd:28:e2:34:42:db:bd:6b: d9:82:29:8b -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt6yR4OEmJZFokAJemw2/ESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWEyZjQyNDA3ZjIxYzlkNzY5MGZiMzBmZDhjZGIyYmZkZjZkMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVmDj1I5nr8yyXoq9S72NdX4PE2R rWYX5RguvUyT0BJGjDGyYmcAfBfpKr/00p0MRjZrRaDrvT+m1V7FTv8NNeWnW8al UXmDESPBeFEv0dk2Bwp3a2/ntF7Fhyai/tE/5aGWVb5PNrnyDMnE0qUFA4MthgLr gRsbUoDbrHu3P8eW/v3nET+WQeC2J8+F0Q73cc2KO6KtyjM+svyq23JWXZDDGfqL RSdrsLuV42TQxGymmuhwgeJttCopVBAqhr4aY9nZoXX2OClC+e3P49wIuMD00pHx Id00gz4qdlFQAAwV9XtkvmeDkrdzrMEMkPJba/vbAZnqHjbJ6tQXpuSOYwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFMWi9CQH8hyddpD7MP2M2yv99tAwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzFhMThl MS02N2M4LTQ5MmUtOGZiYS1mYjVjNjJlNDJmNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMWExOGUx LTY3YzgtNDkyZS04ZmJhLWZiNWM2MmU0MmY2Yi8xL3hhTDBKQWZ5SEoxMmtQc3df WXpiS18zMjBEQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwQCH6yoAwMATTcDBAdVgIAwDQQCAAIwBwMFACoB YQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPl8wDQYJKoZIhvcNAQELBQADggEB AD/3ZdMk/AASyz+T0zubTCIsOTEC2TKwBYMRoxIOdG/d9gPzcn3UC0d06gnPbv3L M2tU+8KMs7RCyP4h8bXRWQsQ+VmYMYp9TzXf4ObydrsML95jGteIxzwN9mohnria gRalGyL1yAbjEjHEIjdnxx8RsgCOgtQYNRUeq2IKOpJp03U6MbIK8vYiYvv/3nfE VYjQ2Kpio8oEzvV+JU+b/2tJLpH/etP7StWjJ/MNsDl4fEEmVssq/sCTN1BzRL85 NKE2edIjIkUoLYOrHI69b6UKH/DdkMII8NGB5kq8qiTxuF9OFRmx1DEnxdof/rim BuO6VnzNKOI0Qtu9a9mCKYs= -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:41 2026 by rpki-client