This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer File: xg8yRv3WG6G1eS_hrsStypjXWlw.cer (raw, json) Hash identifier: kjuy+CdE/XaCygkdbZxmLspna2bMbGB9/cRT4u6xDHQ= Subject key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758F06E0A4C126F61D8B03E8B5CFE61 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214913 IP: 2001:67c:c0c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f0:6e:0a:4c:12:6f:61:d8:b0:3e:8b:5c:fe:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:5c:c5:ec:e5:9a:d3:12:e1:0a:00:b2:d2: 1a:98:78:67:d4:36:fa:a7:38:d3:f7:fe:e8:9d:e7: b9:06:ca:50:2c:e1:46:46:22:0c:75:ee:f4:42:07: 83:6a:c3:1d:9e:66:99:03:a9:76:4a:1a:f3:1d:e4: a2:6f:c6:d3:6b:30:10:89:fb:c2:13:ff:ce:84:03: 0e:02:a5:3a:46:60:49:f2:89:18:96:ad:bb:d1:28: 66:d8:9a:c4:1f:35:9c:1c:da:9b:a6:7a:5d:12:dd: c0:b0:ed:83:2d:60:ee:f1:07:f1:6b:76:ef:6b:34: cf:86:24:e6:04:9e:00:2a:a8:6f:f4:d3:82:0a:c9: d6:30:dd:4c:8d:89:9b:0b:19:9f:6f:ed:ed:7e:dd: b2:dd:92:1b:f0:c6:2a:a1:41:21:e2:43:07:d7:74: dc:f3:a5:ae:10:08:5c:69:94:1d:78:38:06:95:e6: 0e:80:fa:b2:0d:9e:c2:d2:47:09:bd:65:09:ea:19: 57:8f:08:18:cf:ae:44:ac:e8:6b:f0:46:f4:18:f3: 30:e6:00:ad:86:55:2a:cc:a5:7d:6c:30:0b:9f:52: b7:29:96:27:11:f2:ad:85:34:2b:60:5d:34:2b:f8: 2b:f9:bc:24:a5:4a:3b:77:22:9c:f6:7b:b9:ec:5f: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c0c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214913 Signature Algorithm: sha256WithRSAEncryption 48:e2:8b:b1:3d:40:e8:f6:b5:16:6d:8e:25:b0:2d:39:e3:c2: 9b:b4:47:4d:25:18:fe:2c:3e:27:6a:23:68:d4:06:86:2e:7d: 0a:44:78:a2:f2:c4:84:0b:ea:7c:ba:66:20:08:f8:f5:30:96: d0:94:7d:fb:d4:96:2e:ea:a2:d8:60:95:d4:cf:f6:86:3e:dd: a8:8b:65:62:7d:c4:a1:b9:78:66:3d:c0:ca:e4:21:f6:7d:a5: dd:26:a8:5b:de:ba:3b:39:86:97:23:2a:74:2e:11:48:8d:dd: 3c:ee:d8:a9:df:8b:fe:61:fd:18:a2:9d:08:66:fc:ed:cc:d5: 62:a1:a3:2c:1a:21:ed:66:55:90:9e:a1:80:36:94:a4:73:7d: 99:f5:e9:5c:f4:30:f5:36:2b:d5:e8:94:5b:c6:80:0f:7c:bd: e1:1d:38:28:56:60:1f:07:9a:15:33:a1:36:e0:1d:bd:66:6d: c6:8b:fa:6f:7b:15:84:d2:fb:c7:ca:2e:39:73:84:7b:58:7e: 50:8d:7e:45:ab:f8:fb:1a:a6:13:be:f0:b3:bf:5e:40:28:e7: 67:2b:93:d9:80:b7:79:21:93:b9:3f:6d:ce:61:79:48:25:28: 2b:12:49:a4:02:3c:1e:6d:d4:88:26:4d:4a:a7:67:be:61:bd: 00:dd:07:37 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3WPBuCkwSb2HYsD6LXP5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjBmMzI0NmZkZDYxYmExYjU3OTJmZTFhZWM0YWRjYTk4ZDc1YTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9cxezlmtMS4QoAstIamHhn1Db6 pzjT9/7onee5BspQLOFGRiIMde70QgeDasMdnmaZA6l2ShrzHeSib8bTazAQifvC E//OhAMOAqU6RmBJ8okYlq270Shm2JrEHzWcHNqbpnpdEt3AsO2DLWDu8Qfxa3bv azTPhiTmBJ4AKqhv9NOCCsnWMN1MjYmbCxmfb+3tft2y3ZIb8MYqoUEh4kMH13Tc 86WuEAhcaZQdeDgGleYOgPqyDZ7C0kcJvWUJ6hlXjwgYz65ErOhr8Eb0GPMw5gCt hlUqzKV9bDALn1K3KZYnEfKthTQrYF00K/gr+bwkpUo7dyKc9nu57F/inQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMYPMkb91huhtXkv4a7ErcqY11pcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzJhNjU2 YS05MzIzLTQ0MjQtOGZiNS0xNzk3OTI3NjhkYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMmE2NTZh LTkzMjMtNDQyNC04ZmI1LTE3OTc5Mjc2OGRhZS8xL3hnOHlSdjNXRzZHMWVTX2hy c1N0eXBqWFdsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAwMMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNHgTANBgkqhkiG9w0BAQsFAAOCAQEASOKLsT1A6Pa1Fm2OJbAtOePCm7RH TSUY/iw+J2ojaNQGhi59CkR4ovLEhAvqfLpmIAj49TCW0JR9+9SWLuqi2GCV1M/2 hj7dqItlYn3Eobl4Zj3AyuQh9n2l3SaoW966OzmGlyMqdC4RSI3dPO7Yqd+L/mH9 GKKdCGb87czVYqGjLBoh7WZVkJ6hgDaUpHN9mfXpXPQw9TYr1eiUW8aAD3y94R04 KFZgHweaFTOhNuAdvWZtxov6b3sVhNL7x8ouOXOEe1h+UI1+Rav4+xqmE77ws79e QCjnZyuT2YC3eSGTuT9tzmF5SCUoKxJJpAI8Hm3UiCZNSqdnvmG9AN0HNw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:00 2026 by rpki-client