This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer File: xtGGU_v7b9VzLclAwdZdd6sLv6M.cer (raw, json) Hash identifier: 7WXByqjOiBMSxE3bhlt8TUBNJvTIFQoOeYmpv2Mfqr8= Subject key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84A29D596B5CF73F57DAA8D190F4D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15926 AS: 21215 AS: 39796 AS: 51629 IP: 5.22.160.0/19 IP: 89.207.192.0/21 IP: 94.127.0.0/21 IP: 176.109.136.0/21 IP: 185.13.8.0/22 IP: 185.18.12.0/22 IP: 185.20.36.0/22 IP: 185.81.60.0/22 IP: 213.244.208.0/20 IP: 217.26.208.0/21 IP: 2a03:dd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a2:9d:59:6b:5c:f7:3f:57:da:a8:d1:90:f4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:56:eb:82:62:74:42:42:d1:66:39:39:63: 4a:6f:21:c0:77:15:50:3a:f2:58:62:3f:a0:e6:93: b0:57:d8:bd:da:cb:02:e7:62:e6:de:d3:e0:37:cf: 0d:97:7c:34:ab:72:30:93:ba:62:23:c8:fc:07:65: c7:90:d3:05:90:26:7b:6b:13:c3:60:54:8f:6c:de: 1e:23:cb:03:5e:71:e1:df:32:60:c5:29:01:84:aa: d8:16:26:b2:60:0b:55:09:de:d0:1b:bc:26:5f:68: 54:ec:60:ed:c0:9c:52:e5:24:6a:f7:96:f5:d8:2e: b1:f6:e2:8d:d2:d5:ee:a6:ed:67:84:b9:f7:7f:32: 9a:dd:8f:b9:ea:91:ad:9c:7c:80:5b:e7:6b:1e:12: cc:bb:9c:b9:73:d7:f5:8a:dd:8e:83:c5:62:7f:9e: ad:f2:99:de:a2:73:3b:48:06:be:ab:d1:39:b4:20: 57:8d:5f:bd:9a:02:d8:c2:8c:ad:fc:48:f3:88:f6: 67:ac:e8:dc:03:4c:82:df:ba:92:8d:1b:0e:4d:ef: cc:87:d3:7d:d2:1f:5a:69:f8:6e:a5:e9:0b:df:21: 46:1b:d3:f4:c9:11:b7:fd:a4:6b:aa:75:d4:f5:ee: 0d:1f:0a:ff:6a:26:b7:ac:71:76:9f:b8:cb:35:82: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.160.0/19 89.207.192.0/21 94.127.0.0/21 176.109.136.0/21 185.13.8.0/22 185.18.12.0/22 185.20.36.0/22 185.81.60.0/22 213.244.208.0/20 217.26.208.0/21 IPv6: 2a03:dd80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15926 21215 39796 51629 Signature Algorithm: sha256WithRSAEncryption 54:6d:69:0b:bd:ed:53:fb:8c:7e:43:36:63:91:5b:80:03:27: 57:44:a5:c8:b7:75:a7:f6:54:fd:a3:26:63:db:94:bd:c6:82: b7:25:d8:d2:ee:fb:e1:86:e3:34:de:b7:e1:80:1f:87:a5:d6: c9:ba:be:25:56:ae:06:ec:a3:24:28:f7:e0:fe:2a:1c:57:d3: 86:ac:f2:79:57:44:7c:0e:8f:69:ca:9a:91:10:23:2e:14:55: 63:e8:01:72:3f:e8:c5:06:33:cd:2d:c7:2b:0f:0b:b6:f0:83: fd:dc:d8:a8:c1:5d:c9:07:98:c2:a3:d8:13:04:01:50:16:17: 19:b1:34:0d:35:6b:18:2d:08:49:e0:62:dd:7a:58:f3:4e:f6: 50:2e:3d:b8:8d:19:69:44:05:e4:22:44:42:15:8e:8a:ee:8c: bd:a5:23:e5:c7:01:69:08:c4:52:d0:8c:2c:f9:9c:10:0d:bb: 9f:7d:47:08:da:09:70:f8:c0:7c:17:1c:2d:a5:76:58:9a:a6: b2:07:b7:56:19:05:fb:ad:c1:7a:e6:4d:0c:99:6f:1d:14:92: af:a8:17:04:8e:fc:dc:a3:b9:ea:20:78:0a:63:d7:53:3d:b1: ff:75:94:c8:36:9a:5f:92:e8:b5:ac:84:0c:75:04:63:d7:1c: 43:7d:4a:06 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgISAZt/hKKdWWtc9z9X2qjRkPTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQxODY1M2ZiZmI2ZmQ1NzMyZGM5NDBjMWQ2NWQ3N2FiMGJiZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJlW64JidEJC0WY5OWNKbyHAdxVQ OvJYYj+g5pOwV9i92ssC52Lm3tPgN88Nl3w0q3Iwk7piI8j8B2XHkNMFkCZ7axPD YFSPbN4eI8sDXnHh3zJgxSkBhKrYFiayYAtVCd7QG7wmX2hU7GDtwJxS5SRq95b1 2C6x9uKN0tXupu1nhLn3fzKa3Y+56pGtnHyAW+drHhLMu5y5c9f1it2Og8Vif56t 8pneonM7SAa+q9E5tCBXjV+9mgLYwoyt/EjziPZnrOjcA0yC37qSjRsOTe/Mh9N9 0h9aafhupekL3yFGG9P0yRG3/aRrqnXU9e4NHwr/aia3rHF2n7jLNYJovwIDAQAB o4IC8jCCAu4wHQYDVR0OBBYEFMbRhlP7+2/Vcy3JQMHWXXerC7+jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzhkNjk0 My1jYTc1LTQzNzItYjc3Zi01YzY1MDJiZmZhMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvOGQ2OTQz LWNhNzUtNDM3Mi1iNzdmLTVjNjUwMmJmZmExZi8xL3h0R0dVX3Y3YjlWekxjbEF3 ZFpkZDZzTHY2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQFBRagAwQDWc/AAwQDXn8AAwQDsG2IAwQCuQ0I AwQCuRIMAwQCuRQkAwQCuVE8AwQE1fTQAwQD2RrQMA0EAgACMAcDBQMqA92AMCcG CCsGAQUFBwEIAQH/BBgwFqAUMBICAj42AgJS3wIDAJt0AgMAya0wDQYJKoZIhvcN AQELBQADggEBAFRtaQu97VP7jH5DNmORW4ADJ1dEpci3daf2VP2jJmPblL3Ggrcl 2NLu++GG4zTet+GAH4el1sm6viVWrgbsoyQo9+D+KhxX04as8nlXRHwOj2nKmpEQ Iy4UVWPoAXI/6MUGM80txysPC7bwg/3c2KjBXckHmMKj2BMEAVAWFxmxNA01axgt CEngYt16WPNO9lAuPbiNGWlEBeQiREIVjorujL2lI+XHAWkIxFLQjCz5nBANu599 RwjaCXD4wHwXHC2ldliaprIHt1YZBfutwXrmTQyZbx0Ukq+oFwSO/NyjueogeApj 11M9sf91lMg2ml+S6LWshAx1BGPXHEN9SgY= -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:01 2026 by rpki-client