This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer File: xseGdZEgDB9fn9DMPemVTcE5hi4.cer (raw, json) Hash identifier: iVlDPyqkaaxfFlBmcGJsoO+zvbus5H++CZbS1/ESzHE= Subject key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FE78C47B58BD40BC20F362E0822E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42798 IP: 91.193.124.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e7:8c:47:b5:8b:d4:0b:c2:0f:36:2e:08:22:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:1a:06:35:61:e0:ca:16:eb:59:b4:23:bd: 89:de:d7:41:1d:15:e1:96:6c:95:f3:2e:8d:78:d6: 1a:b3:07:96:78:51:0d:52:76:90:ce:39:e6:80:57: 13:67:18:53:74:38:71:1a:b2:6c:64:16:35:e2:b1: 39:0d:a2:8c:54:3f:38:e6:05:b3:ef:16:1f:4f:33: d9:c3:4d:30:d8:ff:69:9d:89:da:cc:2e:7c:bb:e5: d2:fa:4f:7c:9f:45:b2:16:dc:2e:c2:31:97:45:0d: 45:76:65:46:1f:cb:34:b4:bc:5a:9b:7a:55:6b:dc: 9f:92:eb:6a:24:35:ea:e6:1b:b0:37:cd:5b:a0:2c: 87:a8:5a:d3:8b:f2:f9:a3:a0:03:4d:70:d3:74:52: c8:dd:db:11:0b:8a:18:56:b2:74:12:da:7c:94:6b: 41:83:ab:f7:da:af:32:9d:98:14:26:46:7b:0d:d6: df:57:f9:35:a3:9a:48:8f:0b:47:c5:25:9f:ef:23: 94:cd:b3:ad:7c:58:61:bc:30:67:eb:f6:1f:5e:8b: f7:c9:cd:ea:87:3f:aa:36:78:b4:c1:3a:ba:c7:97: 9e:46:a4:e1:ce:5a:74:9e:32:a2:ef:fc:89:bc:d9: af:a7:01:6e:33:21:81:dd:ab:11:d7:8d:c2:3d:a6: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42798 Signature Algorithm: sha256WithRSAEncryption 58:cc:89:05:d2:a9:a5:2a:cc:b6:89:ac:20:4f:ba:ca:d0:4f: cd:71:24:17:42:45:23:9b:5d:1e:b3:ab:94:a9:f5:dd:2c:9d: 47:e2:bd:40:51:31:62:e2:41:9c:31:ad:86:f4:41:1f:e8:e3: ae:e7:fe:fa:af:9e:a0:07:0c:35:00:6f:af:d5:8a:00:3a:48: c7:46:2e:b9:a7:6c:be:18:5b:74:44:1d:48:50:67:89:cd:8c: 94:cb:f6:b8:8c:56:42:7f:fc:fb:d1:12:14:9f:47:a5:2a:5c: d1:70:42:1a:14:b0:4c:09:fc:71:e1:61:4e:0c:24:00:de:4d: 9c:ad:8c:0a:de:44:38:66:82:ef:cc:dc:c6:41:a3:68:10:64: 1f:54:16:7c:16:55:44:f3:3c:7d:ba:6f:0e:e8:aa:60:0a:3e: 77:c4:82:f1:9c:98:3b:47:38:fb:55:d4:9d:5e:5a:3a:51:41: 92:7f:f1:51:b5:12:85:24:e3:95:83:da:18:a4:d3:bc:22:97: 7c:e3:45:93:21:65:fb:81:75:f6:51:0a:08:16:dc:1d:03:5c: 96:7c:94:96:c2:5e:62:59:ba:9e:20:40:28:14:68:bf:3b:a0: 7a:75:43:7d:34:99:2d:79:c4:33:8e:b1:e6:ea:1e:11:eb:ac: 03:d9:21:52 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8f+eMR7WL1AvCDzYuCCLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM3ODY3NTkxMjAwYzFmNWY5ZmQwY2MzZGU5OTU0ZGMxMzk4NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCgaBjVh4MoW61m0I72J3tdBHRXh lmyV8y6NeNYasweWeFENUnaQzjnmgFcTZxhTdDhxGrJsZBY14rE5DaKMVD845gWz 7xYfTzPZw00w2P9pnYnazC58u+XS+k98n0WyFtwuwjGXRQ1FdmVGH8s0tLxam3pV a9yfkutqJDXq5huwN81boCyHqFrTi/L5o6ADTXDTdFLI3dsRC4oYVrJ0Etp8lGtB g6v32q8ynZgUJkZ7DdbfV/k1o5pIjwtHxSWf7yOUzbOtfFhhvDBn6/YfXov3yc3q hz+qNni0wTq6x5eeRqThzlp0njKi7/yJvNmvpwFuMyGB3asR143CPaaCbQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMbHhnWRIAwfX5/QzD3plU3BOYYuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2E1YWQ1 MC03MWZkLTQxOGYtYTQzNS04MDNjOWI0MWI4ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvYTVhZDUw LTcxZmQtNDE4Zi1hNDM1LTgwM2M5YjQxYjhlOS8xL3hzZUdkWkVnREI5Zm45RE1Q ZW1WVGNFNWhpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW8F8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnLjANBgkqhkiG9w0BAQsFAAOCAQEAWMyJBdKppSrMtomsIE+6ytBPzXEkF0JF I5tdHrOrlKn13SydR+K9QFExYuJBnDGthvRBH+jjruf++q+eoAcMNQBvr9WKADpI x0YuuadsvhhbdEQdSFBnic2MlMv2uIxWQn/8+9ESFJ9HpSpc0XBCGhSwTAn8ceFh TgwkAN5NnK2MCt5EOGaC78zcxkGjaBBkH1QWfBZVRPM8fbpvDuiqYAo+d8SC8ZyY O0c4+1XUnV5aOlFBkn/xUbUShSTjlYPaGKTTvCKXfONFkyFl+4F19lEKCBbcHQNc lnyUlsJeYlm6niBAKBRovzugenVDfTSZLXnEM46x5uoeEeusA9khUg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:37 2026 by rpki-client