This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer File: xlodocsckgri-bdIJw_e2HN6kYQ.cer (raw, json) Hash identifier: GOS/KzTegRSZXYU1PN+uhR6/e6Nowmn5gvN97XWmrXg= Subject key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C287D61B91B9D600C50700B1D7EEA97D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 04 Feb 2026 11:50:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48780 AS: 56434 AS: 64494 IP: 37.44.199.0/24 IP: 45.67.215.0/24 IP: 45.129.79.0/24 IP: 45.136.144.0/23 IP: 46.150.240.0/20 IP: 77.83.84.0/24 IP: 85.235.80.0/23 IP: 91.188.244.0/24 IP: 91.214.117.0 -- 91.214.119.255 IP: 91.227.155.0/24 IP: 91.235.158.0/24 IP: 91.241.180.0/23 IP: 91.243.188.0/23 IP: 94.158.20.0/23 IP: 135.106.0.0/17 IP: 135.106.134.0/23 IP: 136.234.127.0 -- 136.234.255.255 IP: 153.80.0.0 -- 153.80.252.255 IP: 176.103.80.0/20 IP: 176.119.140.0/24 IP: 176.119.142.0/24 IP: 192.109.97.0/24 IP: 194.69.253.0/24 IP: 194.113.150.0 -- 194.113.152.255 IP: 194.187.100.0/22 IP: 195.3.181.0/24 IP: 195.95.216.0/23 IP: 195.245.238.0/24 IP: 2a0f:4040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:7d:61:b9:1b:9d:60:0c:50:70:0b:1d:7e:ea:97:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 4 11:50:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:81:ba:89:8a:07:f4:34:f4:ba:14:fb:b6: 92:f8:52:d1:18:a0:53:35:1c:b6:d5:9c:22:90:45: bb:03:5c:b9:10:77:d6:20:64:22:ba:4b:b2:b1:b4: 6b:8b:61:65:67:15:c8:85:34:25:20:10:37:0a:d3: d3:66:44:54:c9:6b:0c:e7:04:c8:a0:2d:12:12:43: a9:d8:d3:bf:49:61:f4:b6:ea:85:5b:cb:0d:9c:a6: 16:4a:af:4d:3b:85:f8:e3:83:9d:2c:64:4e:0a:b5: f3:2f:60:92:89:cc:4f:ab:a8:4a:ca:4a:13:c3:63: ed:3f:bc:92:de:9f:9a:fc:7e:84:5a:46:e5:71:07: 0f:c9:72:22:3e:bc:05:95:b7:f6:18:f0:71:ee:48: 47:8f:01:3c:6e:a5:b4:40:3d:10:18:c6:77:fe:14: 0e:a8:b9:34:b5:9a:de:c8:64:ec:3a:5a:a1:fa:e1: bf:54:49:62:c7:b3:3e:1d:5b:ca:75:e4:02:e0:35: 8d:f2:96:9a:44:ca:f9:6e:6d:d8:bd:d4:2f:ca:6f: ae:87:37:97:6f:ee:3b:28:ab:9c:5a:c9:d4:6b:d4: 8e:cb:dc:8e:28:cd:80:b4:60:b2:37:a5:f3:4d:82: 37:41:ad:08:67:98:54:46:6f:08:1a:6e:a8:be:f9: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.199.0/24 45.67.215.0/24 45.129.79.0/24 45.136.144.0/23 46.150.240.0/20 77.83.84.0/24 85.235.80.0/23 91.188.244.0/24 91.214.117.0-91.214.119.255 91.227.155.0/24 91.235.158.0/24 91.241.180.0/23 91.243.188.0/23 94.158.20.0/23 135.106.0.0/17 135.106.134.0/23 136.234.127.0-136.234.255.255 153.80.0.0-153.80.252.255 176.103.80.0/20 176.119.140.0/24 176.119.142.0/24 192.109.97.0/24 194.69.253.0/24 194.113.150.0-194.113.152.255 194.187.100.0/22 195.3.181.0/24 195.95.216.0/23 195.245.238.0/24 IPv6: 2a0f:4040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48780 56434 64494 Signature Algorithm: sha256WithRSAEncryption 7b:d5:8b:3b:c7:d9:78:e5:6d:89:28:c4:53:f1:9e:2a:9c:00: 37:9b:b3:a4:fc:91:1f:91:be:aa:9d:88:c7:cf:3b:df:19:39: c5:0e:22:c0:74:86:02:cc:68:b3:ba:ed:08:22:a1:23:19:ef: 19:f5:54:b5:0a:64:cb:61:e8:96:9f:67:00:f7:a5:02:60:73: b6:82:3a:74:50:84:29:36:7a:e2:12:85:c1:0f:5b:0d:cc:da: c8:79:33:00:0e:d9:f7:74:e8:e0:6b:dd:65:18:2e:30:cb:c9: a2:b9:9c:7f:a2:0e:ff:fa:89:2b:00:ef:f2:96:53:de:64:e4: 1c:25:7f:98:8b:7f:3f:00:24:b6:f6:24:e9:46:f9:88:cf:01: 1c:32:fc:2b:6b:a0:fb:9d:bd:c9:76:cb:3a:ea:7e:91:2f:87: e1:cb:75:1f:22:38:11:83:5c:72:4a:d2:be:57:bc:c5:dd:8d: 90:7e:2f:08:e5:5d:84:b8:e0:6d:e7:cd:0a:d8:e7:02:cd:1c: b4:bf:5e:a9:81:a0:25:4a:ff:01:b5:cc:3d:d9:03:ad:2a:13: e5:8f:8f:59:02:1f:e5:4e:2e:9c:3a:cc:a1:d4:6c:88:60:8e: 2b:47:5c:bc:68:b4:53:bf:14:4f:4e:1e:58:f9:39:4f:b1:56: e1:cb:da:58 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgISAZwofWG5G51gDFBwCx1+6pfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA0MTE1MDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjVhMWRhMWNiMWM5MjBhZTJmOWI3NDgyNzBmZGVkODczN2E5MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiBuomKB/Q09LoU+7aS+FLRGKBT NRy21ZwikEW7A1y5EHfWIGQiukuysbRri2FlZxXIhTQlIBA3CtPTZkRUyWsM5wTI oC0SEkOp2NO/SWH0tuqFW8sNnKYWSq9NO4X444OdLGROCrXzL2CSicxPq6hKykoT w2PtP7yS3p+a/H6EWkblcQcPyXIiPrwFlbf2GPBx7khHjwE8bqW0QD0QGMZ3/hQO qLk0tZreyGTsOlqh+uG/VElix7M+HVvKdeQC4DWN8paaRMr5bm3YvdQvym+uhzeX b+47KKucWsnUa9SOy9yOKM2AtGCyN6XzTYI3Qa0IZ5hURm8IGm6ovvmprQIDAQAB o4IDfjCCA3owHQYDVR0OBBYEFMZaHaHLHJIK4vm3SCcP3thzepGEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzRmNTRi NC0wMDlmLTQ2Y2UtOWFjMC0zNmJhYzhkOTFlMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNGY1NGI0 LTAwOWYtNDZjZS05YWMwLTM2YmFjOGQ5MWUyZS8xL3hsb2RvY3Nja2dyaS1iZElK d19lMkhONmtZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHyBggrBgEF BQcBBwEB/wSB4jCB3zCBzQQCAAEwgcYDBAAlLMcDBAAtQ9cDBAAtgU8DBAEtiJAD BAQulvADBABNU1QDBAFV61ADBABbvPQwDAMEAFvWdQMEA1vWcAMEAFvjmwMEAFvr ngMEAVvxtAMEAVvzvAMEAV6eFAMEB4dqAAMEAYdqhjALAwQAiOp/AwMAiOowCwMD BJlQAwQAmVD8AwQEsGdQAwQAsHeMAwQAsHeOAwQAwG1hAwQAwkX9MAwDBAHCcZYD BADCcZgDBALCu2QDBADDA7UDBAHDX9gDBADD9e4wDQQCAAIwBwMFAyoPQEAwJAYI KwYBBQUHAQgBAf8EFTAToBEwDwIDAL6MAgMA3HICAwD77jANBgkqhkiG9w0BAQsF AAOCAQEAe9WLO8fZeOVtiSjEU/GeKpwAN5uzpPyRH5G+qp2Ix8873xk5xQ4iwHSG Asxos7rtCCKhIxnvGfVUtQpky2Holp9nAPelAmBztoI6dFCEKTZ64hKFwQ9bDcza yHkzAA7Z93To4GvdZRguMMvJormcf6IO//qJKwDv8pZT3mTkHCV/mIt/PwAktvYk 6Ub5iM8BHDL8K2ug+529yXbLOup+kS+H4ct1HyI4EYNcckrSvle8xd2NkH4vCOVd hLjgbefNCtjnAs0ctL9eqYGgJUr/AbXMPdkDrSoT5Y+PWQIf5U4unDrModRsiGCO K0dcvGi0U78UT04eWPk5T7FW4cvaWA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:49:48 2026 by rpki-client