This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer File: xykw_A7V-O90yB7YYTnHPl1a2FU.cer (raw, json) Hash identifier: yXwDMhrbfVw0PD8KlavC2AlJlv29Vb35mpsIlPJ+0NM= Subject key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B617A85208718D26F194C55B255F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207513 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b6:17:a8:52:08:71:8d:26:f1:94:c5:5b:25:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:85:9f:7b:9f:bf:4b:2f:ad:9e:bf:fc:21: 40:b4:b4:b5:06:f3:e2:01:8d:8c:97:93:5c:8d:af: 64:07:82:6d:6a:6a:76:8e:d2:63:ea:49:5b:c8:3f: a6:a5:1f:7b:56:7f:be:8a:7a:8d:ee:e7:2d:13:5d: 02:73:93:9b:38:f4:48:65:c3:40:f5:dd:f2:11:82: 3c:fc:ef:7d:b0:29:13:da:08:2e:0a:f9:8b:b6:c6: 36:2b:c3:a9:cb:22:b9:30:6b:26:87:21:fd:42:71: dc:09:2f:55:12:8f:74:07:39:de:98:26:9c:2a:3d: a3:d9:f1:d8:9c:ed:73:2c:5f:e9:2c:f6:b5:ab:f7: 94:b3:15:24:0c:d2:85:23:d1:9a:4b:d9:de:8e:d5: 6a:0a:38:ca:3d:6e:7b:67:99:2c:77:a3:be:96:1f: 07:5b:45:44:10:bc:df:8f:17:bf:59:37:8e:48:be: 17:89:af:8e:00:f6:8e:75:04:6f:b3:51:a2:ef:65: 14:68:fa:84:09:a7:dd:f8:8f:f2:29:e0:ab:a4:3c: a4:9d:1b:15:f1:d9:07:c3:98:b1:39:bc:25:38:df: 4b:08:fb:81:1c:57:af:d8:3a:26:27:02:1e:90:6a: e4:70:e2:71:59:05:b9:43:92:b7:86:5f:f1:7e:26: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207513 Signature Algorithm: sha256WithRSAEncryption 66:3c:e7:6c:72:4b:d9:50:e4:51:c9:a9:2b:a5:4e:9a:6c:8c: ff:b1:09:14:47:1a:65:99:e7:c6:30:c7:c9:a8:c2:76:ec:4c: 9b:c5:97:0c:a8:6e:50:79:a6:1e:ff:d3:16:6c:b5:38:9e:85: e8:aa:49:f1:da:67:d0:57:fb:0f:0f:19:c5:07:de:fc:ea:d5: 09:d9:80:ae:f6:d1:b2:f2:b6:be:f8:ee:fe:6f:5b:7d:88:bf: 8b:14:19:a9:11:6e:40:4a:14:98:3c:33:86:74:69:74:72:e6: a9:64:fb:2f:85:12:21:ba:f7:e0:44:c7:5c:77:5f:74:cf:c3: 5a:39:38:be:37:a8:6a:ac:1b:ba:c4:40:31:a1:c9:67:f6:64: b1:ac:6b:5f:b0:50:03:bf:db:8d:fb:0f:cc:e2:47:9f:ff:3f: 64:3d:b6:21:27:3f:67:42:2e:f0:68:ea:70:18:f7:92:be:15: 81:55:cf:b3:e1:fb:12:5b:e8:2c:86:39:27:e3:b6:9c:fb:09: ab:b3:bd:b8:9e:7f:16:0d:48:79:96:8c:73:f2:d3:43:4c:3e: f9:ab:c3:78:ee:d1:c1:19:21:a3:bc:07:0f:c8:44:6c:10:0f: 5f:34:67:40:7c:a8:67:43:62:8e:c5:2a:a1:5f:81:65:26:c8: cb:df:2c:cc -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WLYXqFIIcY0m8ZTFWyVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzI5MzBmYzBlZDVmOGVmNzRjODFlZDg2MTM5YzczZTVkNWFkODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SqFn3ufv0svrZ6//CFAtLS1BvPi AY2Ml5Ncja9kB4Jtamp2jtJj6klbyD+mpR97Vn++inqN7uctE10Cc5ObOPRIZcNA 9d3yEYI8/O99sCkT2gguCvmLtsY2K8OpyyK5MGsmhyH9QnHcCS9VEo90BznemCac Kj2j2fHYnO1zLF/pLPa1q/eUsxUkDNKFI9GaS9nejtVqCjjKPW57Z5ksd6O+lh8H W0VEELzfjxe/WTeOSL4Xia+OAPaOdQRvs1Gi72UUaPqECafd+I/yKeCrpDyknRsV 8dkHw5ixObwlON9LCPuBHFev2DomJwIekGrkcOJxWQW5Q5K3hl/xfia8JwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMcpMPwO1fjvdMge2GE5xz5dWthVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2RiMjgw OS0xMTliLTQxMWItYmYwNy0xOGFiY2ZmZjFmMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZGIyODA5 LTExOWItNDExYi1iZjA3LTE4YWJjZmZmMWYwMy8xL3h5a3dfQTdWLU85MHlCN1lZ VG5IUGwxYTJGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqmTANBgkqhkiG9w0BAQsFAAOCAQEAZjznbHJL2VDk UcmpK6VOmmyM/7EJFEcaZZnnxjDHyajCduxMm8WXDKhuUHmmHv/TFmy1OJ6F6KpJ 8dpn0Ff7Dw8ZxQfe/OrVCdmArvbRsvK2vvju/m9bfYi/ixQZqRFuQEoUmDwzhnRp dHLmqWT7L4USIbr34ETHXHdfdM/DWjk4vjeoaqwbusRAMaHJZ/ZksaxrX7BQA7/b jfsPzOJHn/8/ZD22ISc/Z0Iu8GjqcBj3kr4VgVXPs+H7ElvoLIY5J+O2nPsJq7O9 uJ5/Fg1IeZaMc/LTQ0w++avDeO7RwRkho7wHD8hEbBAPXzRnQHyoZ0NijsUqoV+B ZSbIy98szA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:11 2026 by rpki-client