This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer File: xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer (raw, json) Hash identifier: D1g8TFCvsZrLDtdkPfAd1ITwu7rBPyalKkovy6niWzc= Subject key identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECCF580B685FC03A39DB96D7901919 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202809 IP: 185.145.132.0/22 IP: 2a07:47c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cf:58:0b:68:5f:c0:3a:39:db:96:d7:90:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:aa:61:20:ee:40:33:29:22:a9:69:ef:ef: e1:c6:fa:4f:57:84:06:38:c3:3d:f7:71:41:af:f3: 2c:57:41:e2:20:70:6f:a1:46:76:35:aa:81:81:04: b5:50:d2:5d:21:18:bb:02:22:11:2f:46:31:8f:77: 08:a7:83:73:39:1c:78:14:8c:43:1f:1a:00:a1:b0: 99:ba:28:f1:f0:fe:c3:49:e1:40:86:96:8c:7a:8f: 8b:dc:54:e7:8c:d7:b6:8f:1f:bd:5f:5f:cb:ba:a3: 9e:de:22:1e:82:6a:07:60:9b:12:02:27:6c:13:2f: b0:ee:8d:25:ae:e1:d6:17:c9:e9:4f:a3:8d:8e:7c: e9:6e:5b:e9:45:de:2e:0d:8a:2b:bf:a5:6a:83:67: d9:bc:9c:07:40:25:7b:25:fe:ba:d6:99:ae:57:a3: 02:04:37:6e:13:ae:5e:75:77:5a:11:a1:1c:16:a6: 79:2e:41:fb:9c:d9:36:28:04:ea:4f:ed:15:6d:2a: 9d:a8:14:5c:7f:69:64:c2:a4:3d:44:e5:07:48:fb: 3b:51:f3:58:18:45:6d:53:b9:6c:1e:1f:64:f5:90: bf:c9:50:ae:fd:f9:09:0f:b7:8e:98:a6:fa:bf:72: cd:93:ab:8e:7e:a0:b7:6e:2e:0a:36:a6:96:4a:ca: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.132.0/22 IPv6: 2a07:47c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202809 Signature Algorithm: sha256WithRSAEncryption 73:87:69:52:69:3e:f2:30:6b:e8:ca:79:9c:6a:bb:f0:6d:f0: df:c7:59:e6:f3:44:99:20:f4:b0:2b:6c:28:53:49:40:6a:8b: cd:fe:6b:ce:2b:dd:5e:fc:c7:13:d6:b3:7c:b9:ed:4d:88:12: 8f:f1:13:9b:01:1a:ab:6d:cc:13:f7:64:95:74:0e:41:9b:ae: 3b:9e:02:f1:fc:0f:23:60:75:98:23:a9:e1:fa:b4:43:ca:27: c4:07:0c:37:24:a2:a2:b9:65:7b:0f:cb:9e:a3:d3:8d:f3:cc: 79:63:da:6f:f6:43:7e:20:60:67:fa:91:e7:c2:29:6d:b4:54: c4:d4:2e:94:0c:7b:94:dd:0e:dc:cf:2f:d9:1b:c4:ad:85:b0: 24:18:31:31:2e:53:f2:98:c9:37:8c:f2:a3:be:2d:c5:58:ef: a3:11:91:87:38:03:c3:d1:5b:2a:a3:fa:0e:d7:f2:d5:77:3b: e8:1e:35:ca:c6:31:f8:ac:ed:59:01:a8:5f:dd:79:e6:9f:63: bc:cf:cb:eb:08:9f:50:0e:75:76:98:4c:3b:db:1d:18:b7:51: 42:ad:3c:dd:7d:9f:f3:11:20:0d:a3:31:3a:cd:5f:85:4a:6f: 69:5f:38:21:2c:8f:06:d8:24:e8:3d:c2:96:4c:49:cf:d8:3d: e7:a8:44:5b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87M9YC2hfwDo525bXkBkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQxOGUxYTFkYzY1NThjNGRiYTczMWVmYTMyNzY5YzQ1ZjU0YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLeqYSDuQDMpIqlp7+/hxvpPV4QG OMM993FBr/MsV0HiIHBvoUZ2NaqBgQS1UNJdIRi7AiIRL0Yxj3cIp4NzORx4FIxD HxoAobCZuijx8P7DSeFAhpaMeo+L3FTnjNe2jx+9X1/LuqOe3iIegmoHYJsSAids Ey+w7o0lruHWF8npT6ONjnzpblvpRd4uDYorv6Vqg2fZvJwHQCV7Jf661pmuV6MC BDduE65edXdaEaEcFqZ5LkH7nNk2KATqT+0VbSqdqBRcf2lkwqQ9ROUHSPs7UfNY GEVtU7lsHh9k9ZC/yVCu/fkJD7eOmKb6v3LNk6uOfqC3bi4KNqaWSso9YQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMXRjhodxlWMTbpzHvoydpxF9UugMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzZmNmIw Ny0yZTQ1LTQxMGYtOTMxOC0xY2JlNjYxYTYzZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNmY2YjA3 LTJlNDUtNDEwZi05MzE4LTFjYmU2NjFhNjNmZi8xL3hkR09HaDNHVll4TnVuTWUt akoybkVYMVM2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZGEMA0EAgACMAcDBQMqB0fAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYOTANBgkqhkiG9w0BAQsFAAOCAQEAc4dpUmk+8jBr 6Mp5nGq78G3w38dZ5vNEmSD0sCtsKFNJQGqLzf5rzivdXvzHE9azfLntTYgSj/ET mwEaq23ME/dklXQOQZuuO54C8fwPI2B1mCOp4fq0Q8onxAcMNySiorllew/LnqPT jfPMeWPab/ZDfiBgZ/qR58IpbbRUxNQulAx7lN0O3M8v2RvErYWwJBgxMS5T8pjJ N4zyo74txVjvoxGRhzgDw9FbKqP6Dtfy1Xc76B41ysYx+KztWQGoX9155p9jvM/L 6wifUA51dphMO9sdGLdRQq083X2f8xEgDaMxOs1fhUpvaV84ISyPBtgk6D3ClkxJ z9g956hEWw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:12 2026 by rpki-client