This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer File: xhs9YopilpHrqSpzhD7UU_coejc.cer (raw, json) Hash identifier: OQxcAlM3vlXwEefPEk+8+PwV07vMkG1WtcsqvK2WWCs= Subject key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1E46E1123FD6CCAF0D2DE91C9D3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13284 IP: 62.48.32.0/19 IP: 178.237.0.0/20 IP: 2a01:6a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1e:46:e1:12:3f:d6:cc:af:0d:2d:e9:1c:9d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c61b3d628a629691eba92a73843ed453f7287a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:07:28:c8:9d:a3:5b:07:7f:17:20:46:8f: ea:6b:e8:de:c6:86:8d:82:cc:8d:5f:dc:b7:21:58: c9:b8:a5:f5:20:81:f7:39:b4:f3:15:98:ab:4d:dd: ba:4d:0c:a3:d3:7b:b1:49:77:f2:ee:8f:1d:50:c7: 56:28:e7:b9:0d:43:e9:58:0f:6a:6c:0c:e3:99:01: 03:48:ed:ce:8a:6c:72:d4:7a:33:38:20:00:0c:0b: 0a:40:a5:56:0a:30:a7:6c:16:00:3f:d8:45:c9:48: e5:7e:67:b9:82:2b:53:61:fe:88:51:19:ed:cf:11: 5b:6c:a5:8b:10:f0:8a:db:27:9a:8b:3e:6d:8c:9f: eb:d5:0d:32:90:89:a6:05:49:1a:99:6b:5d:b8:55: c0:87:87:a0:80:28:d0:99:ac:06:75:c1:b8:56:93: 01:3c:bd:fe:1e:fb:41:4c:30:07:34:86:bd:93:a2: 1b:05:ee:1c:cb:71:78:5a:f2:bb:39:36:41:04:5c: 1d:1b:f1:a5:ac:f5:11:a9:52:8b:96:22:54:8d:71: 42:ef:13:5b:d5:01:93:a5:22:d5:8d:a6:b1:e5:3b: 06:89:f4:97:19:ee:a8:c0:e1:97:96:d0:eb:d7:97: c4:9b:e2:a0:68:a7:f7:90:10:bf:7b:e6:46:0c:42: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.48.32.0/19 178.237.0.0/20 IPv6: 2a01:6a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13284 Signature Algorithm: sha256WithRSAEncryption a0:1c:ba:ca:23:ca:0e:ce:e6:6e:29:b7:38:58:55:35:96:8c: c5:16:52:df:3c:01:6f:d2:81:e1:27:53:b6:55:d8:3a:10:1c: 83:a0:a5:91:19:a1:49:d5:22:e2:ab:7d:f0:a3:e0:68:99:33: bb:94:68:9a:f9:8b:40:50:42:a1:f6:61:7c:7f:08:27:dc:bf: fd:b4:cd:e8:e2:6e:33:b1:92:6d:b4:a5:5f:0e:3e:17:c5:dd: aa:60:07:74:71:fe:c1:4b:f1:5c:45:bb:8d:7c:56:31:58:69: ae:c8:e8:cb:0b:9b:56:b3:c2:c6:df:0d:00:6a:82:65:1f:b5: 60:e4:ba:62:0d:60:2a:dd:69:30:8d:ed:07:6b:58:65:1e:ed: b7:f3:bc:32:c3:21:bc:4d:7e:2b:17:a1:50:1e:93:4b:ab:7b: ef:0e:e5:b2:1f:ab:5f:b1:1b:4a:77:bc:eb:0b:07:26:a7:ef: 3b:7c:51:1c:2e:43:8e:33:92:0b:69:d1:00:30:34:ed:63:96: 41:38:7d:a6:e4:7a:10:15:b0:2a:c9:90:da:c8:64:a7:ea:23: 73:c0:83:47:46:a1:72:51:30:44:7d:65:9f:47:e0:b0:af:8e: c1:5e:5c:44:16:ec:db:c2:e6:34:35:8d:4d:dc:06:a6:52:f0: a6:f8:d3:c2 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5fx5G4RI/1syvDS3pHJ09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjFiM2Q2MjhhNjI5NjkxZWJhOTJhNzM4NDNlZDQ1M2Y3Mjg3YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1MHKMido1sHfxcgRo/qa+jexoaN gsyNX9y3IVjJuKX1IIH3ObTzFZirTd26TQyj03uxSXfy7o8dUMdWKOe5DUPpWA9q bAzjmQEDSO3Oimxy1HozOCAADAsKQKVWCjCnbBYAP9hFyUjlfme5gitTYf6IURnt zxFbbKWLEPCK2yeaiz5tjJ/r1Q0ykImmBUkamWtduFXAh4eggCjQmawGdcG4VpMB PL3+HvtBTDAHNIa9k6IbBe4cy3F4WvK7OTZBBFwdG/GlrPURqVKLliJUjXFC7xNb 1QGTpSLVjaax5TsGifSXGe6owOGXltDr15fEm+KgaKf3kBC/e+ZGDEIInwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFMYbPWKKYpaR66kqc4Q+1FP3KHo3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwL2E1MTdl Yi01ZDI2LTQ0NjgtOTFmMi03ZGNjNGVkMWNkYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvYTUxN2Vi LTVkMjYtNDQ2OC05MWYyLTdkY2M0ZWQxY2RiYy8xL3hoczlZb3BpbHBIcnFTcHpo RDdVVV9jb2VqYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFPjAgAwQEsu0AMA0EAgACMAcDBQAqAQagMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjPkMA0GCSqGSIb3DQEBCwUAA4IBAQCgHLrK I8oOzuZuKbc4WFU1lozFFlLfPAFv0oHhJ1O2Vdg6EByDoKWRGaFJ1SLiq33wo+Bo mTO7lGia+YtAUEKh9mF8fwgn3L/9tM3o4m4zsZJttKVfDj4Xxd2qYAd0cf7BS/Fc RbuNfFYxWGmuyOjLC5tWs8LG3w0AaoJlH7Vg5LpiDWAq3Wkwje0Ha1hlHu2387wy wyG8TX4rF6FQHpNLq3vvDuWyH6tfsRtKd7zrCwcmp+87fFEcLkOOM5ILadEAMDTt Y5ZBOH2m5HoQFbAqyZDayGSn6iNzwINHRqFyUTBEfWWfR+Cwr47BXlxEFuzbwuY0 NY1N3AamUvCm+NPC -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:57 2026 by rpki-client