This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer File: xhMz0OgQeIbQMFx72BvdNUiVJ64.cer (raw, json) Hash identifier: uByFiH6RnJRzQxk2VJGLBEbOzJq8xcc96sqdv9HYW74= Subject key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A24707082583C555F2C3B6F9CCB856 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43045 IP: 5.182.52.0/22 IP: 46.17.48.0/21 IP: 89.221.48.0/20 IP: 2a02:22c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:47:07:08:25:83:c5:55:f2:c3:b6:f9:cc:b8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c61333d0e8107886d0305c7bd81bdd35489527ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:00:d9:d3:e5:1f:2a:90:e8:61:ae:3e:00: 4f:08:4d:56:46:ae:b7:c9:a2:90:60:e1:05:5f:45: c8:98:04:d7:27:77:87:e9:65:16:a8:d9:56:14:09: 29:49:fe:02:2b:76:9a:55:23:3d:fa:43:07:68:8d: f5:56:b6:15:20:fe:19:e5:cd:b2:64:2d:49:24:43: 3d:ea:d6:71:59:93:b1:9c:cc:2f:1e:05:49:4e:23: cb:d8:94:34:5b:ed:83:48:33:ed:be:8e:71:66:e5: 05:15:22:bf:53:37:59:21:b5:53:6a:45:4b:f4:29: 56:fc:66:9c:b2:fb:5a:ad:78:7d:27:7e:ef:55:1c: 4d:f5:cc:80:ec:81:0f:16:3f:3b:5c:3c:b5:8d:d0: e4:33:eb:71:24:d1:79:cd:cf:1d:e6:a9:03:0c:59: e1:79:c9:41:43:fe:72:7e:68:32:ae:49:22:e5:05: 3c:82:15:2a:5c:d0:d7:90:d8:b6:df:eb:12:f8:f8: db:0b:0a:ae:d4:d8:68:78:21:80:f4:cb:8d:30:53: a3:0b:66:2b:44:ee:d9:66:ff:42:3d:5d:02:85:25: 22:25:2a:56:9e:44:f7:2b:c8:2b:2b:74:18:63:eb: 23:8f:f2:68:d0:1e:28:8b:f0:29:9b:1f:21:76:3b: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.52.0/22 46.17.48.0/21 89.221.48.0/20 IPv6: 2a02:22c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43045 Signature Algorithm: sha256WithRSAEncryption 0a:f6:8d:07:6a:49:c4:41:9f:2f:bd:2c:8d:03:ff:35:f7:85: 1d:ca:3f:d7:6e:05:e6:23:45:39:f6:65:1d:f5:84:2b:09:2f: b1:a1:16:ab:e8:d6:9f:c9:d8:32:c7:57:de:aa:5f:ca:0f:f7: b1:08:3a:d2:9b:33:5c:22:49:54:06:58:20:69:a1:92:bc:f0: 06:6c:f9:4a:fc:72:ab:56:cf:8c:b9:78:85:ef:95:e7:ac:95: 19:12:a9:e6:df:1d:47:6a:23:cb:31:ef:b6:69:e9:95:34:f6: 9b:8d:27:d8:d8:46:d8:66:5d:4c:03:c7:1f:b3:05:4d:29:d8: 6b:2d:2b:1f:aa:d2:f0:02:e0:5b:6b:93:b5:1d:86:c3:21:62: 8f:43:f5:25:3f:83:96:04:af:5a:20:7c:bd:a1:44:51:b9:8b: 7a:71:6b:67:02:4e:74:af:8d:40:15:bd:cd:d3:8a:f3:7b:5e: 04:41:04:a0:e3:60:8c:37:dc:b5:66:bc:1a:ba:b2:af:53:df: 93:7d:b9:f3:9c:41:67:de:d7:62:37:80:7d:c9:cb:37:ec:89: 6e:c5:c9:20:ef:da:dc:5b:6f:09:b4:54:4d:dd:8f:40:3c:30: f9:f5:ec:a8:5c:cd:02:d4:11:fd:ec:09:e0:a0:e7:b0:00:8b: b8:15:0c:80 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4okcHCCWDxVXyw7b5zLhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjEzMzNkMGU4MTA3ODg2ZDAzMDVjN2JkODFiZGQzNTQ4OTUyN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrkA2dPlHyqQ6GGuPgBPCE1WRq63 yaKQYOEFX0XImATXJ3eH6WUWqNlWFAkpSf4CK3aaVSM9+kMHaI31VrYVIP4Z5c2y ZC1JJEM96tZxWZOxnMwvHgVJTiPL2JQ0W+2DSDPtvo5xZuUFFSK/UzdZIbVTakVL 9ClW/GacsvtarXh9J37vVRxN9cyA7IEPFj87XDy1jdDkM+txJNF5zc8d5qkDDFnh eclBQ/5yfmgyrkki5QU8ghUqXNDXkNi23+sS+PjbCwqu1NhoeCGA9MuNMFOjC2Yr RO7ZZv9CPV0ChSUiJSpWnkT3K8grK3QYY+sjj/Jo0B4oi/Apmx8hdjtZ0QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMYTM9DoEHiG0DBce9gb3TVIlSeuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2RkMzJj My1mZThmLTQwNDctYjY4YS04ZWM1ZjBlZWEwNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZGQzMmMz LWZlOGYtNDA0Ny1iNjhhLThlYzVmMGVlYTA0NS8xL3hoTXowT2dRZUliUU1GeDcy QnZkTlVpVko2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCBbY0AwQDLhEwAwQEWd0wMA0EAgACMAcDBQAq AiLAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoJTANBgkqhkiG9w0BAQsFAAOC AQEACvaNB2pJxEGfL70sjQP/NfeFHco/124F5iNFOfZlHfWEKwkvsaEWq+jWn8nY MsdX3qpfyg/3sQg60pszXCJJVAZYIGmhkrzwBmz5Svxyq1bPjLl4he+V56yVGRKp 5t8dR2ojyzHvtmnplTT2m40n2NhG2GZdTAPHH7MFTSnYay0rH6rS8ALgW2uTtR2G wyFij0P1JT+DlgSvWiB8vaFEUbmLenFrZwJOdK+NQBW9zdOK83teBEEEoONgjDfc tWa8Grqyr1Pfk32585xBZ97XYjeAfcnLN+yJbsXJIO/a3FtvCbRUTd2PQDww+fXs qFzNAtQR/ewJ4KDnsACLuBUMgA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:38 2026 by rpki-client