This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer File: xpWUB18xxROhM36RdZKQA35me_k.cer (raw, json) Hash identifier: 5iW8mwWFuaiFHfCnXjhKDwSmUph0E6QWMYZK3wzSGWE= Subject key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11779E4B8AD52BA9F106BCD4EE5210 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.164.240.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:77:9e:4b:8a:d5:2b:a9:f1:06:bc:d4:ee:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c69594075f31c513a1337e91759290037e667bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:8b:f3:48:de:7f:ec:9b:4d:85:c0:fc:c6: de:29:fd:bd:76:30:14:5b:9a:8a:d5:63:b5:30:e8: b1:f2:58:db:c6:d0:e8:be:da:9e:b0:ac:0f:74:91: f5:d6:39:b8:a8:3e:ee:97:5b:e3:09:23:bc:2d:dc: d8:9d:ad:4c:c5:b8:13:1d:fa:5e:47:8a:e8:96:f2: da:86:63:10:95:6a:5e:78:12:b0:2e:d4:60:22:b0: d3:b0:e5:96:9b:73:af:4e:37:29:f1:5e:d4:39:91: e8:3b:0f:2f:e3:cd:05:df:03:b5:9b:36:e0:9a:8d: e6:94:37:65:eb:92:e0:f5:eb:9e:0d:1e:2c:4a:f7: 8b:8b:59:ac:68:5e:1a:80:cd:16:e7:56:f6:ae:00: bb:22:14:af:e6:ea:3f:16:f5:41:8a:8c:e4:4e:c7: c8:3e:c7:8b:b0:c7:4f:91:ba:e0:03:69:d7:7a:75: 76:d2:d8:46:1b:0d:b0:0f:f5:96:fc:2d:42:5c:40: ec:25:68:e9:17:1d:12:07:1a:36:12:41:f1:0a:39: 4c:5d:0f:84:37:e6:97:01:5f:d4:0a:6b:2a:3f:dd: ac:d7:6f:e4:90:83:11:5e:6d:6a:ca:8c:51:92:d9: f1:ec:59:e6:bb:2a:95:02:76:e9:eb:cc:12:30:c4: ef:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.240.0/24 Signature Algorithm: sha256WithRSAEncryption a2:f7:52:f2:48:69:b0:02:74:84:1c:c6:42:eb:88:5d:69:76: a1:b5:62:e0:d9:2d:e2:f9:6f:76:5d:2b:5f:b7:61:ff:ea:42: c1:ab:55:da:be:87:ef:b7:f9:a5:5b:67:85:94:1d:17:5a:96: a8:97:6b:0a:19:e2:eb:f6:e6:38:c2:18:ea:47:e4:f8:ba:34: 60:d9:24:91:bf:6b:9c:49:fe:5c:1d:79:38:6c:54:9e:02:61: da:39:ef:d6:f3:ac:60:30:b4:fb:a4:0e:67:3c:87:26:99:ee: 56:20:f4:6e:ca:48:5e:f1:e8:e9:2a:a9:7d:7b:81:03:30:14: ac:05:89:09:fd:70:bf:28:36:d9:f4:bc:1f:6c:29:09:ab:8b: 8b:57:83:c2:a0:95:d9:76:a7:a1:13:c2:97:bf:53:51:8c:27: 63:ac:05:7e:80:b8:e5:c3:4c:a7:e6:da:bb:fd:86:13:a3:92: 72:2b:c8:6f:a6:15:f9:c0:52:55:d3:d5:c8:b6:bb:35:05:3b: d9:c6:cb:99:54:d1:43:06:1e:19:89:63:cf:9b:7e:21:2d:f9: cb:97:36:60:54:2f:42:7f:a2:37:84:b6:02:60:cf:9f:4a:36: 5f:18:ef:34:f9:4e:fc:23:97:e6:6e:14:67:3f:6c:55:d2:a3: ba:ce:ef:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EXeeS4rVK6nxBrzU7lIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjk1OTQwNzVmMzFjNTEzYTEzMzdlOTE3NTkyOTAwMzdlNjY3YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoSL80jef+ybTYXA/MbeKf29djAU W5qK1WO1MOix8ljbxtDovtqesKwPdJH11jm4qD7ul1vjCSO8LdzYna1MxbgTHfpe R4rolvLahmMQlWpeeBKwLtRgIrDTsOWWm3OvTjcp8V7UOZHoOw8v480F3wO1mzbg mo3mlDdl65Lg9eueDR4sSveLi1msaF4agM0W51b2rgC7IhSv5uo/FvVBiozkTsfI PseLsMdPkbrgA2nXenV20thGGw2wD/WW/C1CXEDsJWjpFx0SBxo2EkHxCjlMXQ+E N+aXAV/UCmsqP92s12/kkIMRXm1qyoxRktnx7FnmuyqVAnbp68wSMMTvbQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMaVlAdfMcUToTN+kXWSkAN+Znv5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzgwYmVi ZS1iNjQ3LTRiOWQtYWI3Ni0yMjg5Yzc3YTJkMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvODBiZWJl LWI2NDctNGI5ZC1hYjc2LTIyODljNzdhMmQzOS8xL3hwV1VCMTh4eFJPaE0zNlJk WktRQTM1bWVfay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwqTwMA0GCSqGSIb3DQEBCwUAA4IBAQCi91Ly SGmwAnSEHMZC64hdaXahtWLg2S3i+W92XStft2H/6kLBq1Xavofvt/mlW2eFlB0X Wpaol2sKGeLr9uY4whjqR+T4ujRg2SSRv2ucSf5cHXk4bFSeAmHaOe/W86xgMLT7 pA5nPIcmme5WIPRuykhe8ejpKql9e4EDMBSsBYkJ/XC/KDbZ9LwfbCkJq4uLV4PC oJXZdqehE8KXv1NRjCdjrAV+gLjlw0yn5tq7/YYTo5JyK8hvphX5wFJV09XItrs1 BTvZxsuZVNFDBh4ZiWPPm34hLfnLlzZgVC9Cf6I3hLYCYM+fSjZfGO80+U78I5fm bhRnP2xV0qO6zu8/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:37 2026 by rpki-client