This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer File: xrbwexczYPIV8VGMhxKksFTYXAc.cer (raw, json) Hash identifier: Y8eJcTz808wQ0eILf5470sYN9ftKr7MGa9svruL2zMA= Subject key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2C99BE6A212FC06092E1C9F8F00F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21473 IP: 93.190.248.0/21 IP: 109.233.144.0/21 IP: 185.28.4.0/22 IP: 212.65.0.0/19 IP: 2a00:1e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2c:99:be:6a:21:2f:c0:60:92:e1:c9:f8:f0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:ce:2c:93:09:fd:90:f9:01:ea:fa:51:f6: d4:72:f9:44:0e:c4:30:d3:a9:3d:5a:10:24:19:db: 12:c3:f9:26:68:3c:c3:72:48:68:7b:12:1c:42:98: 8f:c6:1b:78:94:8f:a7:9f:5f:10:54:f5:40:5a:ba: 11:7d:eb:ab:f7:28:f8:ce:54:48:35:75:88:61:09: 20:20:1a:c1:cf:ad:8b:8b:d1:6b:14:92:ee:f6:8a: 3d:05:73:3f:e2:25:b2:ce:f9:3e:50:0d:1e:d4:2c: 36:6c:4c:f8:71:35:88:07:f0:35:06:b5:0a:7a:3e: f4:3f:e5:4c:0f:ca:f9:3c:c5:df:8f:4d:fb:01:e7: eb:f9:8b:e0:bf:20:7e:4c:c9:de:6f:92:e8:14:f6: df:46:df:67:2d:03:af:6f:f3:1d:a1:e6:62:e1:74: 05:2d:4e:8b:8e:da:d9:55:44:a1:9f:fa:dd:d4:ba: 96:c8:67:1d:03:3d:0c:52:db:ea:88:87:27:18:fc: a6:4c:11:9a:8b:df:1a:65:42:d0:8b:ec:ba:47:83: 55:ce:06:aa:58:b4:56:9e:e8:bb:b3:32:ce:1a:6f: 36:cd:59:9e:c0:4d:c6:ed:1a:ee:87:06:d9:ea:4b: 5c:4d:ef:e5:69:cf:20:0c:3d:b8:cc:2b:74:9b:d1: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.248.0/21 109.233.144.0/21 185.28.4.0/22 212.65.0.0/19 IPv6: 2a00:1e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21473 Signature Algorithm: sha256WithRSAEncryption 36:08:01:8c:61:b8:d2:7f:ee:08:e8:c1:9d:0a:75:63:02:c9: 92:fd:9f:24:32:b5:3a:1d:3e:a8:98:5f:8b:6c:1d:ea:2c:87: 75:1e:d3:84:ea:56:59:c3:4c:6c:34:d7:10:06:8a:00:bf:39: 07:b9:c9:d3:fd:aa:89:31:81:1f:4c:c2:9f:5d:1c:26:6a:f5: 5c:32:7b:d2:2f:16:b2:dd:bb:e1:30:89:d0:58:3b:3e:a7:40: e3:eb:33:14:16:90:a1:b1:38:f7:70:72:3f:8e:df:22:bf:5b: cf:2f:9a:fb:ce:3f:0e:41:c8:0f:f0:4e:c5:70:06:c2:92:ee: 97:a5:f6:5a:e2:69:fa:52:04:fb:6d:a4:13:b1:52:57:85:54: 7e:36:c5:b2:10:18:8f:d7:5e:bc:a9:f5:0d:05:8c:95:11:ce: 8e:a8:e2:ec:1f:36:66:1c:bf:e0:fb:2b:64:80:2a:87:c3:da: 61:e7:53:87:ed:9d:49:14:f9:62:13:c6:9a:7e:c1:15:b1:6b: 81:4e:76:33:b4:4f:74:32:af:86:17:ec:2a:73:d6:7d:99:80: 92:45:16:21:78:a8:9e:1b:a6:ee:4e:89:4b:e4:a1:ba:0c:5f: 10:29:5e:43:d2:2c:2f:c7:ea:29:5b:0e:88:97:05:b2:2d:53: a7:36:61:05 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt5fyyZvmohL8BgkuHJ+PAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmI2ZjA3YjE3MzM2MGYyMTVmMTUxOGM4NzEyYTRiMDU0ZDg1YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39nOLJMJ/ZD5Aer6UfbUcvlEDsQw 06k9WhAkGdsSw/kmaDzDckhoexIcQpiPxht4lI+nn18QVPVAWroRfeur9yj4zlRI NXWIYQkgIBrBz62Li9FrFJLu9oo9BXM/4iWyzvk+UA0e1Cw2bEz4cTWIB/A1BrUK ej70P+VMD8r5PMXfj037Aefr+YvgvyB+TMneb5LoFPbfRt9nLQOvb/MdoeZi4XQF LU6LjtrZVUShn/rd1LqWyGcdAz0MUtvqiIcnGPymTBGai98aZULQi+y6R4NVzgaq WLRWnui7szLOGm82zVmewE3G7RruhwbZ6ktcTe/lac8gDD24zCt0m9E8zQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFMa28HsXM2DyFfFRjIcSpLBU2FwHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2I4NzJi Ni1jMzBhLTQ2MTYtYjVhNy0yOGQ5NGZjYjEwODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYjg3MmI2 LWMzMGEtNDYxNi1iNWE3LTI4ZDk0ZmNiMTA4OC8xL3hyYndleGN6WVBJVjhWR01o eEtrc0ZUWVhBYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDXb74AwQDbemQAwQCuRwEAwQF1EEAMA0EAgAC MAcDBQAqAB6AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlPhMA0GCSqGSIb3DQEB CwUAA4IBAQA2CAGMYbjSf+4I6MGdCnVjAsmS/Z8kMrU6HT6omF+LbB3qLId1HtOE 6lZZw0xsNNcQBooAvzkHucnT/aqJMYEfTMKfXRwmavVcMnvSLxay3bvhMInQWDs+ p0Dj6zMUFpChsTj3cHI/jt8iv1vPL5r7zj8OQcgP8E7FcAbCku6XpfZa4mn6UgT7 baQTsVJXhVR+NsWyEBiP1168qfUNBYyVEc6OqOLsHzZmHL/g+ytkgCqHw9ph51OH 7Z1JFPliE8aafsEVsWuBTnYztE90Mq+GF+wqc9Z9mYCSRRYheKieG6buTolL5KG6 DF8QKV5D0iwvx+opWw6IlwWyLVOnNmEF -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:00 2026 by rpki-client