This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer File: xcidUmDLNP27s7wlv0rbr0zcaKA.cer (raw, json) Hash identifier: 6xD80dfvzj9ljj1tuAYsful7agQQChqW/U8mNQsIkqk= Subject key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E5390697A16D7A06712448419282 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197455 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e5:39:06:97:a1:6d:7a:06:71:24:48:41:92:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:c1:e1:d8:9d:ad:31:3c:31:0a:a7:a4:cc: 07:34:3e:55:93:63:e6:db:af:04:d9:c6:7a:bd:59: 99:ed:21:6a:b7:5f:28:ea:67:c3:5b:a3:03:4e:63: c0:2a:35:39:9f:bf:2e:51:23:3d:51:41:da:53:03: c6:92:57:62:c4:c1:d1:28:a2:a1:62:67:01:26:73: 43:e1:6f:c0:73:50:8b:a3:38:e2:42:05:90:7c:77: 5d:00:08:ee:4a:cb:3a:5e:62:ad:64:b2:1f:95:71: 16:9e:c1:a5:81:be:67:05:f7:78:e1:6b:87:0a:6c: a7:42:c5:6b:b0:aa:d1:23:88:4d:da:74:d5:b3:a6: 6d:32:2a:c5:7c:71:d7:3a:08:6e:90:af:a6:db:16: 5d:07:75:e7:35:f7:9d:87:45:6e:d3:e7:e5:01:f7: e2:97:4e:11:20:2d:e7:34:14:c7:fb:2e:9f:48:40: dc:41:3d:6c:3c:75:ea:78:d4:c7:24:9b:b9:73:d5: df:22:e8:41:d3:e4:68:d8:9e:a0:2e:65:49:0e:da: b1:ec:22:b3:5a:82:c1:7b:e7:55:9b:7a:67:ed:0e: 62:13:42:09:55:a5:b0:99:1b:15:04:a4:91:24:c0: 1d:a9:3c:68:a2:e3:d2:fb:1b:1d:e9:09:c1:9d:e8: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197455 Signature Algorithm: sha256WithRSAEncryption 0a:1f:5e:b3:7d:ff:13:7b:b7:8e:7d:4f:15:58:2d:5e:08:14: 3d:41:50:02:ab:c7:b0:4f:ea:e3:6c:6e:d0:cc:cc:3d:57:17: aa:5a:b8:b0:df:3b:9c:34:de:79:e5:94:ef:28:32:f9:72:58: 96:17:42:90:1d:7c:65:00:3c:74:8f:73:e2:36:69:cf:d0:d2: 84:7b:74:9d:57:76:fd:a7:5d:6e:9b:b1:35:12:e6:24:a4:2d: fe:e3:f4:be:df:62:a1:27:f6:ba:28:4f:fa:bc:d3:45:0f:64: e5:1a:7d:a5:2a:81:a5:a2:e5:95:b4:3d:ef:5a:36:3f:0d:e9: 61:93:e8:ed:9f:be:42:14:ac:80:ad:a2:52:39:89:f6:a7:49: 4e:33:c5:8b:e5:ed:5a:c8:cb:53:e4:53:33:35:18:4a:76:aa: 13:4e:69:20:e2:a3:23:e3:a4:e4:59:9e:bc:41:bf:95:31:db: 1c:5d:4f:f4:80:ea:f7:fa:8d:35:10:15:52:3d:fd:89:44:c0: d7:b7:dd:78:c5:0f:1f:c4:ae:ed:49:fa:3d:ed:3f:42:91:b6: 87:be:75:4b:c3:76:e5:b8:96:0d:90:7d:80:41:45:55:7e:7b: 3f:2a:cb:18:fa:c2:70:ac:a3:49:42:82:27:88:19:2c:36:a4: 2b:99:26:63 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NeU5BpehbXoGcSRIQZKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWM4OWQ1MjYwY2IzNGZkYmJiM2JjMjViZjRhZGJhZjRjZGM2OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ3B4didrTE8MQqnpMwHND5Vk2Pm 268E2cZ6vVmZ7SFqt18o6mfDW6MDTmPAKjU5n78uUSM9UUHaUwPGkldixMHRKKKh YmcBJnND4W/Ac1CLozjiQgWQfHddAAjuSss6XmKtZLIflXEWnsGlgb5nBfd44WuH CmynQsVrsKrRI4hN2nTVs6ZtMirFfHHXOghukK+m2xZdB3XnNfedh0Vu0+flAffi l04RIC3nNBTH+y6fSEDcQT1sPHXqeNTHJJu5c9XfIuhB0+Ro2J6gLmVJDtqx7CKz WoLBe+dVm3pn7Q5iE0IJVaWwmRsVBKSRJMAdqTxoouPS+xsd6QnBnejVOQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMXInVJgyzT9u7O8Jb9K269M3GigMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzYyM2Ix NC00ZTZlLTRjMzEtOTZiZS04ZWJjZDA5YjJiY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvNjIzYjE0 LTRlNmUtNGMzMS05NmJlLThlYmNkMDliMmJjYS8xL3hjaWRVbURMTlAyN3M3d2x2 MHJicjB6Y2FLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMDTzANBgkqhkiG9w0BAQsFAAOCAQEACh9es33/E3u3 jn1PFVgtXggUPUFQAqvHsE/q42xu0MzMPVcXqlq4sN87nDTeeeWU7ygy+XJYlhdC kB18ZQA8dI9z4jZpz9DShHt0nVd2/addbpuxNRLmJKQt/uP0vt9ioSf2uihP+rzT RQ9k5Rp9pSqBpaLllbQ971o2Pw3pYZPo7Z++QhSsgK2iUjmJ9qdJTjPFi+XtWsjL U+RTMzUYSnaqE05pIOKjI+Ok5FmevEG/lTHbHF1P9IDq9/qNNRAVUj39iUTA17fd eMUPH8Su7Un6Pe0/QpG2h751S8N25biWDZB9gEFFVX57PyrLGPrCcKyjSUKCJ4gZ LDakK5kmYw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:16 2026 by rpki-client