This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer (raw, json) Hash identifier: FlDYXaT33CgVz6QzlthRBiTfxdX5LPHYv1n5vNd5He4= Subject key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78345F1E51E479B09B4E3F74634A3D09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44085 IP: 91.199.23.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5f:1e:51:e4:79:b0:9b:4e:3f:74:63:4a:3d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:96:23:39:02:7c:95:84:f0:2a:52:8a:8a: 4c:73:2c:a7:b4:2f:4a:a9:5c:58:29:10:94:99:25: 21:40:21:3d:40:bd:b7:76:53:70:63:aa:13:cd:30: 12:d4:1b:72:10:e6:df:9a:55:5f:92:30:39:d9:ab: d6:d0:ee:00:c9:10:26:cc:6e:77:6a:10:d5:b5:66: d7:47:77:73:8f:ce:98:c9:11:c7:52:a7:0f:e9:9d: 39:a0:70:e8:e5:92:a7:56:02:2c:a1:cc:52:fc:84: 6d:2a:85:80:14:72:6d:ba:24:f1:e1:bc:e6:22:80: 67:19:21:ee:6a:32:f5:06:b0:b6:01:d4:6e:99:77: d5:fd:0d:6b:6d:0a:46:75:3e:2e:65:68:ab:3e:f5: 9a:e9:55:5f:4b:a8:61:74:85:a1:95:e2:f0:1e:24: bf:93:22:33:b0:0d:f0:c2:7e:75:3b:2b:a4:b6:e9: c8:f9:d3:f3:d3:96:16:ab:7a:cf:1c:a7:16:b9:7f: 5f:84:2b:5d:9a:03:9c:e7:44:80:62:12:a2:97:e2: 14:79:f5:ef:93:4a:f5:7f:e8:1f:cf:57:60:02:eb: 31:74:14:89:1f:46:d5:58:dc:49:69:18:f7:95:ec: 75:9d:bc:76:86:aa:07:c7:19:96:86:df:81:e9:c9: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.23.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44085 Signature Algorithm: sha256WithRSAEncryption 1b:c6:ec:05:e8:a9:a5:ce:c3:aa:7c:a4:a2:e0:cb:aa:7a:bd: 69:90:75:d3:17:d5:74:ee:94:2a:03:3f:91:7f:fb:9d:b0:14: d9:88:c5:28:05:1c:67:94:b8:5e:fd:91:c1:5e:6d:29:e0:95: 15:39:9b:63:b3:a7:41:49:cb:f1:49:5e:61:76:f2:6d:f5:bf: d6:ba:4d:91:aa:77:75:ae:c5:58:8e:d8:b5:4a:53:42:95:c3: dd:41:05:e7:c1:19:67:23:b0:cc:c2:f1:39:42:c4:81:ae:b6: 3c:74:fa:9f:b6:60:b1:bc:fc:39:fb:40:7e:e7:4d:64:87:b4: 29:9a:6a:33:2d:34:5b:86:f6:68:23:ec:7a:1d:2b:f4:12:64: 00:b6:bc:0f:14:f3:4a:57:0b:f3:ec:99:ad:a8:e1:9a:a8:85: 55:77:aa:f5:33:66:05:10:ea:c9:04:ef:b3:e0:ce:8d:40:a5: 3f:86:ca:d8:18:be:f2:e6:86:d6:5a:ec:8f:fe:1c:84:de:f9: d5:5e:fb:89:d4:86:6a:c1:4e:e5:cc:d9:44:f2:89:41:3c:86: 88:29:48:b7:80:4e:5f:d5:7e:04:62:5f:08:66:0f:50:f6:cf: 86:58:e1:38:02:78:56:eb:70:0f:5c:50:93:78:4a:ce:af:28: 1d:df:f5:33 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NF8eUeR5sJtOP3RjSj0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWIxMTgyZDMxNzk2ZmE2M2VjM2MxZDliOTdjYjZhYWFjMzRmZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYCWIzkCfJWE8CpSiopMcyyntC9K qVxYKRCUmSUhQCE9QL23dlNwY6oTzTAS1BtyEObfmlVfkjA52avW0O4AyRAmzG53 ahDVtWbXR3dzj86YyRHHUqcP6Z05oHDo5ZKnVgIsocxS/IRtKoWAFHJtuiTx4bzm IoBnGSHuajL1BrC2AdRumXfV/Q1rbQpGdT4uZWirPvWa6VVfS6hhdIWhleLwHiS/ kyIzsA3wwn51OyuktunI+dPz05YWq3rPHKcWuX9fhCtdmgOc50SAYhKil+IUefXv k0r1f+gfz1dgAusxdBSJH0bVWNxJaRj3lex1nbx2hqoHxxmWht+B6ckB2QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzBkMzAz Mi1iZGE0LTRjNmItODFjOS05MjQxNjAwNzE1OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMGQzMDMy LWJkYTQtNGM2Yi04MWM5LTkyNDE2MDA3MTU4ZS8xL3hiRVlMVEY1YjZZLXc4SFp1 WHkycXF3MF9kay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8cXMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCsNTANBgkqhkiG9w0BAQsFAAOCAQEAG8bsBeippc7DqnykouDLqnq9aZB10xfV dO6UKgM/kX/7nbAU2YjFKAUcZ5S4Xv2RwV5tKeCVFTmbY7OnQUnL8UleYXbybfW/ 1rpNkap3da7FWI7YtUpTQpXD3UEF58EZZyOwzMLxOULEga62PHT6n7Zgsbz8OftA fudNZIe0KZpqMy00W4b2aCPseh0r9BJkALa8DxTzSlcL8+yZrajhmqiFVXeq9TNm BRDqyQTvs+DOjUClP4bK2Bi+8uaG1lrsj/4chN751V77idSGasFO5czZRPKJQTyG iClIt4BOX9V+BGJfCGYPUPbPhljhOAJ4VutwD1xQk3hKzq8oHd/1Mw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:47 2026 by rpki-client