This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer File: xk-grYmHFJ8FU0cktFovTV6_R10.cer (raw, json) Hash identifier: 1+gCb1cI7GLFnJEY5jGQiY6uBKFzalkGEHnnEShdM9U= Subject key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83414FE94BAFFE79CF37E4A4848FA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59645 AS: 62078 AS: 211286 AS: 215250 IP: 45.91.12.0/22 IP: 193.104.168.0/24 IP: 195.191.196.0/23 IP: 2a06:d1c0::/29 IP: 2a0d:8d04::/32 IP: 2a0e:a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:41:4f:e9:4b:af:fe:79:cf:37:e4:a4:84:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:95:5a:76:c2:13:d8:2b:36:71:ee:07:89: e5:cc:00:09:01:ae:03:ca:f0:5f:55:be:b3:f9:d9: 21:9b:5b:1c:6f:3f:44:d2:e9:77:aa:9f:7c:60:07: 56:ef:ac:14:f3:92:5b:d4:86:c6:ed:3e:0b:9e:7d: c2:6a:80:da:89:71:03:ab:dc:34:13:29:8a:7f:bd: aa:fb:3f:6d:f0:de:f5:e9:22:ee:ac:3d:12:94:94: 1e:70:81:34:92:af:7e:56:fb:98:39:19:96:99:fe: 75:36:1d:c0:13:5c:19:df:08:56:f6:56:72:5d:54: 08:13:3d:1d:da:2c:7a:93:54:ef:c0:5f:8c:c5:0d: 54:67:4a:6f:ad:f5:e3:ab:6b:e5:9e:19:82:a4:77: 08:b7:b0:28:78:48:73:35:51:1e:ba:e7:10:2e:1f: 79:a4:fc:a3:23:dd:07:34:98:34:8d:dd:65:e8:f8: b5:41:74:70:5b:0e:c8:26:91:76:53:02:d9:62:7c: 1b:c8:d9:bc:e8:98:92:1b:8a:54:19:3a:c7:c2:1a: fb:f2:8f:7c:ec:df:b2:e3:1f:1c:36:81:0f:e9:3a: 34:d7:2b:a8:69:b9:4f:89:a1:ee:e6:18:55:11:0c: 30:29:98:58:be:97:8f:d5:0e:b1:83:65:6e:37:3a: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.12.0/22 193.104.168.0/24 195.191.196.0/23 IPv6: 2a06:d1c0::/29 2a0d:8d04::/32 2a0e:a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59645 62078 211286 215250 Signature Algorithm: sha256WithRSAEncryption 2c:bd:2b:ab:43:d8:20:c3:85:a9:a5:6b:df:8f:20:07:e0:2b: 25:b5:04:b8:18:f2:af:bf:86:8f:b0:df:44:5f:bd:87:c1:ba: 9d:c5:8e:25:af:49:f4:60:29:90:5e:52:b7:6e:9d:06:e8:33: 3a:a6:0f:67:08:09:64:ed:25:63:8d:41:c2:d9:42:42:3b:49: 15:78:c6:51:ee:8b:5c:b5:95:bb:ef:6f:36:1f:a2:d7:d7:33: 56:00:d0:15:57:fa:ef:62:96:be:00:88:67:e0:08:da:10:3c: 69:a7:57:f5:cf:3b:c8:06:a8:74:b8:5d:e0:07:e3:63:92:fb: 9d:29:f1:cc:23:1a:f1:9e:79:e4:d4:04:58:b4:c8:2a:c8:3f: eb:fd:1d:a5:28:b1:b5:c5:ca:dc:ba:9e:0f:a4:3d:2e:9f:dc: f3:24:64:3a:5e:19:0d:89:5d:2f:20:90:10:b1:17:23:b7:58: 1e:16:17:b5:bc:6d:b2:63:9f:0e:1c:ff:e8:1e:68:c6:5f:27: 55:7f:06:d1:e0:d9:b8:df:2a:6a:f6:37:35:fc:cb:10:59:32: e3:ff:1b:ef:b1:49:ea:2d:dd:16:d6:e2:41:05:83:d3:40:70: f7:61:2a:2f:25:39:1b:96:6a:79:6c:8c:ed:27:17:81:5c:a8: 42:ab:a6:20 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt/g0FP6Uuv/nnPN+SkhI+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRmYTBhZDg5ODcxNDlmMDU1MzQ3MjRiNDVhMmY0ZDVlYmY0NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUeVWnbCE9grNnHuB4nlzAAJAa4D yvBfVb6z+dkhm1scbz9E0ul3qp98YAdW76wU85Jb1IbG7T4Lnn3CaoDaiXEDq9w0 EymKf72q+z9t8N716SLurD0SlJQecIE0kq9+VvuYORmWmf51Nh3AE1wZ3whW9lZy XVQIEz0d2ix6k1TvwF+MxQ1UZ0pvrfXjq2vlnhmCpHcIt7AoeEhzNVEeuucQLh95 pPyjI90HNJg0jd1l6Pi1QXRwWw7IJpF2UwLZYnwbyNm86JiSG4pUGTrHwhr78o98 7N+y4x8cNoEP6To01yuoablPiaHu5hhVEQwwKZhYvpeP1Q6xg2VuNzq5hQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFMZPoK2JhxSfBVNHJLRaL01ev0ddMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzI0MDE1 Zi0wOTFjLTRjNWQtYjVjMS1iY2Y3NzAyNjkzOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMjQwMTVm LTA5MWMtNGM1ZC1iNWMxLWJjZjc3MDI2OTM5ZC8xL3hrLWdyWW1IRko4RlUwY2t0 Rm92VFY2X1IxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCLVsMAwQAwWioAwQBw7/EMBsEAgACMBUDBQMq BtHAAwUAKg2NBAMFAyoOCkAwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAOj9AgMA 8n4CAwM5VgIDA0jSMA0GCSqGSIb3DQEBCwUAA4IBAQAsvSurQ9ggw4WppWvfjyAH 4CsltQS4GPKvv4aPsN9EX72HwbqdxY4lr0n0YCmQXlK3bp0G6DM6pg9nCAlk7SVj jUHC2UJCO0kVeMZR7otctZW77282H6LX1zNWANAVV/rvYpa+AIhn4AjaEDxpp1f1 zzvIBqh0uF3gB+NjkvudKfHMIxrxnnnk1ARYtMgqyD/r/R2lKLG1xcrcup4PpD0u n9zzJGQ6XhkNiV0vIJAQsRcjt1geFhe1vG2yY58OHP/oHmjGXydVfwbR4Nm43ypq 9jc1/MsQWTLj/xvvsUnqLd0W1uJBBYPTQHD3YSovJTkblmp5bIztJxeBXKhCq6Yg -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:26 2026 by rpki-client