This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer (raw, json) Hash identifier: ouIcI659QWjsK7W3lXt0afXYvip0Z1E4mkmR87xPQjU= Subject key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C217B3E8AECA10A5657C904762D62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.24.216.0/21 IP: 91.209.144.0/24 IP: 185.4.240.0/22 IP: 2a02:7140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:21:7b:3e:8a:ec:a1:0a:56:57:c9:04:76:2d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:f6:7f:ec:68:85:c1:5f:e1:d6:8d:58:4a: 42:0c:32:b2:62:50:79:7e:74:18:b7:8f:76:f2:0d: dd:ca:4e:18:23:fb:42:a5:21:76:ba:1b:00:cf:a4: 6f:60:10:1d:96:d1:6c:35:a5:58:7a:58:1f:dd:a7: 37:65:62:cc:f5:31:4d:16:3a:bb:7e:bd:c0:cb:33: 85:f6:49:bf:a0:b1:a0:82:82:06:ea:27:f1:c3:99: ff:4e:7d:e6:64:03:65:2f:cd:7a:db:2c:e4:d6:68: 18:27:86:a2:8e:e0:b8:95:e6:f6:4d:c0:32:15:54: 5b:ec:c2:86:f2:98:bd:33:c0:95:9b:43:ec:5b:da: c0:a5:2b:a0:8a:90:a3:99:5d:5a:82:00:c3:89:89: 06:7f:ec:13:4b:cb:59:60:3c:86:80:79:5c:5d:9e: 89:a2:7e:fa:3f:34:c7:68:9d:9f:bf:9a:82:38:65: 07:ee:ca:10:be:61:f2:fa:e2:aa:a3:93:b0:80:f2: 53:57:92:35:01:7b:af:64:79:b3:ca:88:5c:e2:2d: 5e:7e:c9:d0:0d:a3:12:a4:65:ff:74:f4:00:6d:48: 18:1e:fa:a9:ef:55:53:25:3f:e8:e4:76:50:ba:f9: ce:46:c1:9d:03:83:02:6e:dd:4d:a3:68:b2:6c:74: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.216.0/21 91.209.144.0/24 185.4.240.0/22 IPv6: 2a02:7140::/32 Signature Algorithm: sha256WithRSAEncryption 69:d1:fd:ae:b7:9e:be:6a:b7:01:f6:79:bc:52:9b:f2:ff:8b: c0:4f:16:6f:db:5c:0d:2f:5d:c7:3c:ca:3c:32:b8:d3:70:de: dc:73:b9:70:01:e4:ed:d0:e2:b0:39:ac:0f:68:22:f5:7b:a1: da:69:82:5e:5e:04:3b:a5:73:7f:2f:a7:72:69:f5:7b:ed:a7: 18:17:5e:56:82:31:62:7c:9c:22:64:d9:b3:30:8e:e3:cb:26: ff:5c:01:5c:a6:56:38:d7:12:a7:3b:35:a5:17:2e:86:1a:49: 0a:6f:56:9d:07:ff:e3:13:de:23:b9:f3:8b:86:f4:ef:7c:fa: b6:c3:cb:82:0c:df:01:30:d9:e4:b8:02:98:47:17:ce:1e:76: 85:8b:51:dc:16:ba:e9:43:ce:30:fb:36:05:c3:0c:ad:1b:d5: b4:60:c7:a2:16:cb:79:1e:fa:e7:0f:43:58:78:3c:bd:34:93: 3b:07:1f:8f:5a:20:22:83:d8:d3:42:e7:f0:7c:08:72:df:62: a0:b1:dd:4b:2e:56:dd:8a:8c:0d:15:e1:b6:d1:65:50:37:98: 42:d6:ed:24:41:bb:d1:66:f0:1c:15:35:44:22:2f:dc:ad:5b: 23:af:34:f8:41:ec:15:25:4c:dc:00:19:dd:74:c4:52:65:12: b7:e0:8d:a7 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9XCF7PorsoQpWV8kEdi1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjEzNWU0YWNmOTYxMzljZTVmZjJjZmRkOTVmNTVhODE3NmQ3MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV32f+xohcFf4daNWEpCDDKyYlB5 fnQYt4928g3dyk4YI/tCpSF2uhsAz6RvYBAdltFsNaVYelgf3ac3ZWLM9TFNFjq7 fr3AyzOF9km/oLGggoIG6ifxw5n/Tn3mZANlL8162yzk1mgYJ4aijuC4leb2TcAy FVRb7MKG8pi9M8CVm0PsW9rApSugipCjmV1aggDDiYkGf+wTS8tZYDyGgHlcXZ6J on76PzTHaJ2fv5qCOGUH7soQvmHy+uKqo5OwgPJTV5I1AXuvZHmzyohc4i1efsnQ DaMSpGX/dPQAbUgYHvqp71VTJT/o5HZQuvnORsGdA4MCbt1No2iybHQmiwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMYTXkrPlhOc5f8s/dlfVagXbXMkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzZmNmYw ZC1lNmRmLTRmMmItODBkZi00NjZiMGNkOGI3NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNmY2ZjBk LWU2ZGYtNGYyYi04MGRmLTQ2NmIwY2Q4Yjc1YS8xL3hoTmVTcy1XRTV6bF95ejky VjlWcUJkdGN5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDHxjYAwQAW9GQAwQCuQTwMA0EAgACMAcDBQAq AnFAMA0GCSqGSIb3DQEBCwUAA4IBAQBp0f2ut56+arcB9nm8Upvy/4vATxZv21wN L13HPMo8MrjTcN7cc7lwAeTt0OKwOawPaCL1e6HaaYJeXgQ7pXN/L6dyafV77acY F15WgjFifJwiZNmzMI7jyyb/XAFcplY41xKnOzWlFy6GGkkKb1adB//jE94jufOL hvTvfPq2w8uCDN8BMNnkuAKYRxfOHnaFi1HcFrrpQ84w+zYFwwytG9W0YMeiFst5 HvrnD0NYeDy9NJM7Bx+PWiAig9jTQufwfAhy32Kgsd1LLlbdiowNFeG20WVQN5hC 1u0kQbvRZvAcFTVEIi/crVsjrzT4QewVJUzcABnddMRSZRK34I2n -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:18 2026 by rpki-client