This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer File: xwy87PJahmXDWnjIIdEes6ZCNiE.cer (raw, json) Hash identifier: SP86jVEZzMJ/QhDmHzOO79hvgbYPOQKXutXtzSPYteA= Subject key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791115A4017D44D354CD5C2B625B51B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34772 IP: 80.77.144.0/20 IP: 88.85.96.0/19 IP: 92.55.64.0/18 IP: 95.180.128.0/17 IP: 164.40.248.0/21 IP: 2a00:1218::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:15:a4:01:7d:44:d3:54:cd:5c:2b:62:5b:51:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:2c:1d:48:75:f7:48:3c:86:56:fa:69:b9: bf:a3:af:f4:e4:97:9f:92:47:3e:16:6a:d3:28:3f: 54:55:db:ab:66:2e:76:f3:22:9b:67:27:5e:ba:28: 1b:ba:b4:66:97:06:7e:89:de:84:5b:be:d4:6a:2f: f4:14:ab:7c:fa:fe:01:ab:57:a4:d0:ef:8a:ec:80: a0:be:01:e2:f7:b5:cb:15:c5:41:2c:c5:82:d2:1d: 08:a4:03:97:59:6d:ad:3c:4f:04:9f:65:c5:21:ef: c1:b6:a4:7c:4c:51:da:be:66:89:d6:ae:a1:82:c4: bd:18:cd:2f:d4:24:7e:a3:c4:3c:51:65:3c:f6:50: c3:4c:52:ca:08:b1:31:bc:06:cd:9f:4a:82:4c:2f: 1f:e1:a1:36:aa:48:95:05:59:91:12:bd:11:6e:05: 7e:c1:5c:7f:65:8f:d0:bb:4e:aa:6f:bb:79:00:dd: b7:24:d9:46:42:87:0f:d0:15:a0:26:c7:58:38:8f: 7a:2a:6c:c7:26:60:4a:df:57:87:35:e0:7b:2b:fa: 4a:62:b2:fa:0d:70:6c:5a:6f:47:eb:dd:1d:e4:81: 71:ee:4b:30:eb:9d:d3:d5:42:b3:b9:b2:c0:b8:8f: e0:87:a8:2e:13:6d:62:ac:31:d9:19:db:91:8b:1a: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.144.0/20 88.85.96.0/19 92.55.64.0/18 95.180.128.0/17 164.40.248.0/21 IPv6: 2a00:1218::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34772 Signature Algorithm: sha256WithRSAEncryption 01:fc:60:5a:0d:f5:1f:03:be:ba:4b:e7:29:89:04:4a:24:ac: f4:2c:1f:f2:2a:53:73:1f:9d:2c:ea:7a:0f:85:c9:0d:55:36: cd:81:c7:4b:02:cf:66:39:72:f8:72:74:0a:4b:32:0c:2e:7d: fb:0b:41:01:b3:fd:9b:c1:0a:60:49:22:be:ef:77:37:af:cd: 4a:6a:5a:3a:8c:f0:31:a2:ed:b6:65:42:64:2e:65:4b:9a:70: 68:7d:39:13:a6:3c:08:e8:11:8c:9c:a0:22:04:f6:6f:2e:68: 8e:80:e2:27:38:26:5b:fa:08:e2:7b:8e:1e:53:db:62:8a:81: fe:f9:36:f3:87:64:9e:02:f3:7a:9f:a9:76:c8:b0:0b:ba:dd: bc:43:0c:a1:29:a7:61:65:ad:57:36:04:dc:c6:2e:a6:06:24: 02:94:7c:5e:38:c3:0a:8f:f6:4b:ff:d2:7e:7a:ca:3f:47:02: fb:b1:19:ec:cb:18:19:f6:ab:c0:0e:a2:c9:80:a9:d1:a8:18: 55:dc:93:79:d5:8b:c1:ca:e5:ab:f2:43:a3:31:58:11:bd:23: ce:e8:80:70:37:3b:6b:d8:b7:fc:f6:fa:69:17:15:60:a1:81: 27:ab:1d:36:cf:1c:c5:8f:a9:bf:8b:23:e4:72:20:6f:70:15: 9e:ed:21:d0 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5ERWkAX1E01TNXCtiW1GyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzBjYmNlY2YyNWE4NjY1YzM1YTc4YzgyMWQxMWViM2E2NDIzNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcIsHUh190g8hlb6abm/o6/05Jef kkc+FmrTKD9UVdurZi528yKbZydeuigburRmlwZ+id6EW77Uai/0FKt8+v4Bq1ek 0O+K7ICgvgHi97XLFcVBLMWC0h0IpAOXWW2tPE8En2XFIe/BtqR8TFHavmaJ1q6h gsS9GM0v1CR+o8Q8UWU89lDDTFLKCLExvAbNn0qCTC8f4aE2qkiVBVmREr0RbgV+ wVx/ZY/Qu06qb7t5AN23JNlGQocP0BWgJsdYOI96KmzHJmBK31eHNeB7K/pKYrL6 DXBsWm9H690d5IFx7ksw653T1UKzubLAuI/gh6guE21irDHZGduRixr6qQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFMcMvOzyWoZlw1p4yCHRHrOmQjYhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzY4ZTY1 My0xOGM1LTQ0OWUtOTVkOC1lNjk3YmI1NzY0YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvNjhlNjUz LTE4YzUtNDQ5ZS05NWQ4LWU2OTdiYjU3NjRjMy8xL3h3eTg3UEphaG1YRFduaklJ ZEVlczZaQ05pRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEUE2QAwQFWFVgAwQGXDdAAwQHX7SAAwQDpCj4 MA0EAgACMAcDBQAqABIYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCH1DANBgkq hkiG9w0BAQsFAAOCAQEAAfxgWg31HwO+ukvnKYkESiSs9Cwf8ipTcx+dLOp6D4XJ DVU2zYHHSwLPZjly+HJ0CksyDC59+wtBAbP9m8EKYEkivu93N6/NSmpaOozwMaLt tmVCZC5lS5pwaH05E6Y8COgRjJygIgT2by5ojoDiJzgmW/oI4nuOHlPbYoqB/vk2 84dkngLzep+pdsiwC7rdvEMMoSmnYWWtVzYE3MYupgYkApR8XjjDCo/2S//SfnrK P0cC+7EZ7MsYGfarwA6iyYCp0agYVdyTedWLwcrlq/JDozFYEb0jzuiAcDc7a9i3 /Pb6aRcVYKGBJ6sdNs8cxY+pv4sj5HIgb3AVnu0h0A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:15 2026 by rpki-client