This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer File: XYLKb462haVz5dHZH48GEhqwKjc.cer (raw, json) Hash identifier: ZLGWvp9a6NjAecVrRksI92JlPiac+xEckzcOrQODXTI= Subject key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4F4B2E88EC086AFE9130D63293224 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198114 IP: 91.231.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f4:b2:e8:8e:c0:86:af:e9:13:0d:63:29:32:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:f9:14:22:1f:60:27:9d:ca:8f:76:a6:e7: 07:00:39:06:20:e0:35:a1:28:a1:2c:3f:d1:42:d5: 13:ae:c7:80:aa:85:9f:d1:ce:00:d1:7e:33:d2:24: bd:4d:65:6b:e5:50:dd:68:ec:97:94:23:6a:5b:0d: 1f:39:3b:7f:0d:d9:03:3c:fc:85:f5:e8:ac:b7:5b: 9a:dc:87:02:c3:00:40:42:e8:eb:a1:b0:96:55:fa: 90:7f:a0:38:64:ef:18:7c:0b:65:e3:c3:c1:af:ce: fe:a0:37:43:d1:5d:67:39:a1:ba:8b:27:02:73:ba: 4d:05:3e:28:56:c4:22:de:d4:60:6f:ab:91:3e:da: d1:27:65:b5:70:0d:37:55:3f:f5:fe:11:b0:32:b3: e5:83:4f:c9:55:fd:2e:bd:df:f5:92:1c:34:06:f7: 16:a4:d9:76:e5:e0:04:e1:94:40:b3:f0:73:c5:96: 90:eb:41:fc:bc:56:24:2e:8d:2f:7a:a8:26:23:10: 2d:e8:c1:09:50:8b:02:17:e3:49:7b:b1:4d:54:15: 45:09:22:3f:e2:d5:fa:6b:a0:4a:3a:d9:dc:56:0d: 83:4a:6a:08:67:fb:81:62:b3:6e:24:1d:79:06:3a: 22:29:59:17:6c:88:6b:71:a9:84:f5:be:c6:b4:d4: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.192.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198114 Signature Algorithm: sha256WithRSAEncryption 2d:32:8c:6e:42:25:1a:3d:17:76:54:26:06:45:32:c7:de:af: 3c:91:ac:e6:95:cf:5c:3e:38:33:c0:94:82:bf:d8:e5:76:de: 31:7d:d8:e0:90:a8:f7:d7:4b:a6:5d:b0:20:cc:60:1c:4f:30: 27:74:42:09:c5:6c:d4:13:23:1a:4f:7f:75:91:ed:68:7f:27: 3c:14:59:9b:85:c0:04:88:d3:8a:71:7d:4e:c0:11:78:32:de: a2:67:11:7b:35:28:bf:a1:d7:4d:99:3a:c3:66:15:e5:ad:88: f0:a1:df:e9:dd:c2:6d:90:4a:32:15:85:e9:8c:df:2c:e9:d8: 3d:d7:20:54:af:14:22:7b:b9:b1:d4:c5:1b:1d:e4:a6:20:d1: 74:f6:7e:d3:1e:ff:16:b7:c7:da:b4:90:f7:db:f1:ec:49:8c: 6e:10:60:cc:e1:01:dd:09:9c:ab:1d:6b:b0:ee:37:43:84:72: 59:55:77:5a:0c:0a:96:cc:9c:b4:c9:a4:12:91:98:dd:cd:42: 93:7f:ca:8c:e9:5e:00:63:61:e6:ce:f3:13:f9:91:a7:77:d8: 81:07:8e:19:d4:0a:66:e7:e1:bb:7e:89:7d:57:b5:fa:46:0c: 05:13:db:0b:b2:7c:9c:60:91:3a:85:2b:06:f4:54:dc:e3:64: 92:65:8e:65 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pPSy6I7Ahq/pEw1jKTIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDgyY2E2ZjhlYjY4NWE1NzNlNWQxZDkxZjhmMDYxMjFhYjAyYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJX5FCIfYCedyo92pucHADkGIOA1 oSihLD/RQtUTrseAqoWf0c4A0X4z0iS9TWVr5VDdaOyXlCNqWw0fOTt/DdkDPPyF 9eist1ua3IcCwwBAQujrobCWVfqQf6A4ZO8YfAtl48PBr87+oDdD0V1nOaG6iycC c7pNBT4oVsQi3tRgb6uRPtrRJ2W1cA03VT/1/hGwMrPlg0/JVf0uvd/1khw0BvcW pNl25eAE4ZRAs/BzxZaQ60H8vFYkLo0veqgmIxAt6MEJUIsCF+NJe7FNVBVFCSI/ 4tX6a6BKOtncVg2DSmoIZ/uBYrNuJB15BjoiKVkXbIhrcamE9b7GtNS7VwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF2Cym+OtoWlc+XR2R+PBhIasCo3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2Q1NGJj MC1mNzgxLTQ4YjAtOWY2ZC1iNWYwZDIxMDUzZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvZDU0YmMw LWY3ODEtNDhiMC05ZjZkLWI1ZjBkMjEwNTNmOC8xL1hZTEtiNDYyaGFWejVkSFpI NDhHRWhxd0tqYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW+fAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMF4jANBgkqhkiG9w0BAQsFAAOCAQEALTKMbkIlGj0XdlQmBkUyx96vPJGs5pXP XD44M8CUgr/Y5XbeMX3Y4JCo99dLpl2wIMxgHE8wJ3RCCcVs1BMjGk9/dZHtaH8n PBRZm4XABIjTinF9TsAReDLeomcRezUov6HXTZk6w2YV5a2I8KHf6d3CbZBKMhWF 6YzfLOnYPdcgVK8UInu5sdTFGx3kpiDRdPZ+0x7/FrfH2rSQ99vx7EmMbhBgzOEB 3Qmcqx1rsO43Q4RyWVV3WgwKlsyctMmkEpGY3c1Ck3/KjOleAGNh5s7zE/mRp3fY gQeOGdQKZufhu36JfVe1+kYMBRPbC7J8nGCROoUrBvRU3ONkkmWOZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:14 2026 by rpki-client