This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer (raw, json) Hash identifier: QH6Ggl5OxIIKlFNPE+bgvZpefzUZKKMEszJ41PSAg60= Subject key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F831D5DA2D3C38CF82F356BFD03028F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199468 IP: 5.133.40.0/21 IP: 144.124.128.0/18 IP: 185.173.8.0/22 IP: 194.163.224.0/20 IP: 2a04:ed00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1d:5d:a2:d3:c3:8c:f8:2f:35:6b:fd:03:02:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:a6:94:61:1a:70:51:07:28:db:b4:0a:c3: 62:de:3c:ce:26:47:e7:8b:ee:b0:9d:f9:1e:7e:66: 09:c1:c9:3b:9e:34:bb:df:e1:b1:b8:41:6a:2b:8d: b0:5b:6f:3b:53:da:ce:fb:95:7f:6c:76:d5:7d:87: 48:29:07:be:68:71:2c:cc:a2:fd:d8:ad:fc:cd:14: 99:2a:f0:d9:7a:b9:04:a8:bb:0d:0d:5c:dd:7c:fd: 96:f2:03:7b:d4:69:81:94:d3:89:c7:66:68:0e:e6: c7:fe:7c:32:0e:a6:a4:67:58:4f:a9:f0:ad:24:58: c0:3f:f4:20:74:89:51:91:6c:84:d0:9b:86:be:fb: b0:d5:c0:05:26:39:2e:7f:b3:f6:19:9c:e1:9b:d8: 58:54:5a:a0:20:8f:62:ed:7a:54:4e:c6:b4:e5:4b: d9:d9:fb:21:32:41:17:38:a1:03:bc:65:b3:aa:a5: eb:20:4f:d4:b1:86:54:c2:f0:41:93:76:9a:4a:45: 6c:c4:04:43:c1:6f:ef:9b:34:44:ba:d9:cd:ad:8d: ac:e9:1a:86:f3:d9:56:16:71:22:ed:f9:0a:ab:0d: cb:8f:1e:24:46:9f:b7:9e:a4:ee:cc:ac:dc:de:91: 57:8b:9d:2e:69:b6:11:e7:d9:a3:8c:20:37:f3:40: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.40.0/21 144.124.128.0/18 185.173.8.0/22 194.163.224.0/20 IPv6: 2a04:ed00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199468 Signature Algorithm: sha256WithRSAEncryption 5d:6c:8d:06:e2:5f:44:67:41:49:79:d3:ab:29:f5:54:4c:e7: 0f:56:2b:7e:7b:fc:bf:d8:85:70:89:fd:82:b1:3b:5f:85:a9: 2e:e9:ea:32:1e:47:a9:75:95:e0:d6:6e:ea:9d:de:43:97:1a: ee:88:c7:0a:08:66:da:9e:fc:f7:23:6d:9b:43:65:fa:0b:86: be:30:51:92:7e:1d:f5:5b:ad:51:d2:47:71:86:7d:88:21:ea: 38:46:6e:5a:a5:48:ab:08:34:03:b9:08:91:1c:1e:d0:fa:f4: fb:74:1f:e3:c2:3d:f3:10:3c:d7:33:fa:25:f4:59:5e:48:36: a5:2e:1c:46:6e:c4:7b:ee:0b:42:6f:28:44:95:6c:a0:43:83: 98:ca:7b:05:46:61:17:61:5f:2b:b8:ce:2f:6b:99:a9:7c:2d: 4b:ac:36:63:91:6d:a6:53:32:cd:1c:7d:d6:a6:ad:12:a0:c7: 85:a4:54:6d:80:69:49:43:a1:f8:e2:31:d6:16:c0:38:7b:92: 0d:b2:25:69:37:4b:59:7e:16:b7:f5:04:70:79:9e:42:b0:cb: 0c:f4:eb:e8:cd:29:ee:a0:9a:f8:c9:b1:5b:c5:ff:68:08:32: f4:18:17:3c:68:bb:4f:bf:89:54:e0:2b:a2:f0:e0:d8:8e:04: dc:4c:55:b5 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/gx1dotPDjPgvNWv9AwKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzU3YzhmOGQ5ZWU1ZTJjZTcwNDNlMWVjMjZiYjE2OTNmN2YxMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0imlGEacFEHKNu0CsNi3jzOJkfn i+6wnfkefmYJwck7njS73+GxuEFqK42wW287U9rO+5V/bHbVfYdIKQe+aHEszKL9 2K38zRSZKvDZerkEqLsNDVzdfP2W8gN71GmBlNOJx2ZoDubH/nwyDqakZ1hPqfCt JFjAP/QgdIlRkWyE0JuGvvuw1cAFJjkuf7P2GZzhm9hYVFqgII9i7XpUTsa05UvZ 2fshMkEXOKEDvGWzqqXrIE/UsYZUwvBBk3aaSkVsxARDwW/vmzREutnNrY2s6RqG 89lWFnEi7fkKqw3Ljx4kRp+3nqTuzKzc3pFXi50uabYR59mjjCA380A6NwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzI5ZmNi OS0zMDVjLTQwNmItYTdhNC0xZjZiMmQxNGY0ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMjlmY2I5 LTMwNWMtNDA2Yi1hN2E0LTFmNmIyZDE0ZjRmOS8xL1hGZkktTm51WGl6bkJENGV3 bXV4YVQ5X0VoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBYUoAwQGkHyAAwQCua0IAwQEwqPgMA0EAgAC MAcDBQMqBO0AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLLDANBgkqhkiG9w0B AQsFAAOCAQEAXWyNBuJfRGdBSXnTqyn1VEznD1Yrfnv8v9iFcIn9grE7X4WpLunq Mh5HqXWV4NZu6p3eQ5ca7ojHCghm2p789yNtm0Nl+guGvjBRkn4d9VutUdJHcYZ9 iCHqOEZuWqVIqwg0A7kIkRwe0Pr0+3Qf48I98xA81zP6JfRZXkg2pS4cRm7Ee+4L Qm8oRJVsoEODmMp7BUZhF2FfK7jOL2uZqXwtS6w2Y5FtplMyzRx91qatEqDHhaRU bYBpSUOh+OIx1hbAOHuSDbIlaTdLWX4Wt/UEcHmeQrDLDPTr6M0p7qCa+MmxW8X/ aAgy9BgXPGi7T7+JVOArovDg2I4E3ExVtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:58 2026 by rpki-client