This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer File: XmFA8XMSeE72KuO-AwwMLMZhpwI.cer (raw, json) Hash identifier: qWpis2t7S2o2HKSbz796jWisde6gzXq7fiXu/LMgjVc= Subject key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4CC3DA5D5E764D19BB2EB4936342C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206638 AS: 206963 IP: 91.211.88.0/22 IP: 2a0c:71c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cc:3d:a5:d5:e7:64:d1:9b:b2:eb:49:36:34:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:c2:18:69:85:c4:5e:96:8a:68:a8:cc:3a: 57:c0:81:ae:7d:55:fa:c7:f2:6b:34:9b:7f:46:c1: 9f:58:ed:8c:14:b1:25:b1:52:d0:3a:95:bd:9b:f8: bc:74:9e:5e:ab:5a:47:7a:9f:0d:69:8b:6b:14:d3: fa:6c:f2:26:5c:75:36:a4:61:4e:fe:74:c0:02:d6: 6f:0f:64:79:10:9a:e8:d7:97:bb:07:a0:d2:d7:eb: fb:49:24:9f:dc:70:e9:74:f3:80:96:31:16:c7:08: 82:c0:69:49:91:58:b7:b0:56:13:7a:b5:d7:67:2d: 5c:ca:90:05:98:3c:8e:d5:11:01:bc:6f:55:58:d5: f7:95:ae:f5:9b:2b:bc:75:65:56:24:ef:1b:47:5a: e6:60:3d:f6:62:0c:5a:67:99:85:28:85:53:e6:d0: 90:0e:68:53:4a:32:fb:f4:cf:52:05:a6:86:cf:24: a9:05:41:95:cd:b5:c5:29:93:97:7c:75:32:08:dc: 06:0f:78:b8:72:c4:76:df:a5:27:fe:7c:e7:7e:df: 23:84:71:80:60:a5:ec:25:88:fe:99:0b:9e:27:9d: 39:b6:81:e6:d6:97:f5:f1:e4:39:9c:77:86:2d:05: 4c:5a:d3:89:d9:0f:da:89:75:83:5f:4d:07:6f:2b: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.88.0/22 IPv6: 2a0c:71c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206638 206963 Signature Algorithm: sha256WithRSAEncryption 0c:2e:7a:c2:e5:09:10:94:50:20:3c:bd:23:54:7f:0f:2e:d6: 77:68:4f:bd:b5:f5:ea:16:c2:af:80:0b:7b:92:d4:fd:e5:77: c0:06:68:13:ff:d1:cd:c9:4f:c3:f2:b6:9f:8c:ad:47:fe:24: f5:1e:28:b0:6d:1b:b5:df:90:0b:50:e1:a1:ff:10:60:a9:1c: 45:12:f7:69:48:9c:cc:2f:41:81:76:d2:59:4f:c1:89:c8:bf: 4e:c9:54:71:e9:fb:6d:61:68:bd:b9:68:a4:85:6d:42:54:24: d7:74:19:f3:8f:97:7b:0f:26:ac:1b:12:02:ee:6e:0c:c6:a6: ec:ed:d9:83:5c:6a:3e:26:66:ef:c0:33:d1:7d:6b:64:2b:a8: 3d:26:23:84:35:c4:16:5c:4e:dc:51:f0:52:45:67:45:35:a2: c0:60:38:20:30:38:58:7c:aa:da:a5:84:71:48:b0:08:b4:ef: 39:72:7a:03:72:3c:14:65:15:ed:3e:35:89:cf:5f:81:17:d9: 95:35:24:9a:20:70:d5:f3:8a:ff:74:86:fc:ae:e8:76:ca:02: 95:cd:19:d2:18:ed:54:f0:7b:6f:40:00:02:62:c8:83:d4:92: 24:fe:31:8b:6a:4f:cc:b0:44:a2:dc:ba:17:c2:18:56:99:15: a6:52:2a:29 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7pMw9pdXnZNGbsutJNjQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTYxNDBmMTczMTI3ODRlZjYyYWUzYmUwMzBjMGMyY2M2NjFhNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7CGGmFxF6WimiozDpXwIGufVX6 x/JrNJt/RsGfWO2MFLElsVLQOpW9m/i8dJ5eq1pHep8NaYtrFNP6bPImXHU2pGFO /nTAAtZvD2R5EJro15e7B6DS1+v7SSSf3HDpdPOAljEWxwiCwGlJkVi3sFYTerXX Zy1cypAFmDyO1REBvG9VWNX3la71myu8dWVWJO8bR1rmYD32YgxaZ5mFKIVT5tCQ DmhTSjL79M9SBaaGzySpBUGVzbXFKZOXfHUyCNwGD3i4csR236Un/nznft8jhHGA YKXsJYj+mQueJ505toHm1pf18eQ5nHeGLQVMWtOJ2Q/aiXWDX00Hbyv5dwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFF5hQPFzEnhO9irjvgMMDCzGYacCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2M0Y2Uz Mi1jMjIwLTQwYzktOGJlOC0wZGJjYmEyNzU0MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvYzRjZTMy LWMyMjAtNDBjOS04YmU4LTBkYmNiYTI3NTQxNy8xL1htRkE4WE1TZUU3Mkt1Ty1B d3dNTE1aaHB3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW9NYMA0EAgACMAcDBQMqDHHAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMnLgIDAyhzMA0GCSqGSIb3DQEBCwUAA4IBAQAMLnrC 5QkQlFAgPL0jVH8PLtZ3aE+9tfXqFsKvgAt7ktT95XfABmgT/9HNyU/D8rafjK1H /iT1HiiwbRu135ALUOGh/xBgqRxFEvdpSJzML0GBdtJZT8GJyL9OyVRx6fttYWi9 uWikhW1CVCTXdBnzj5d7DyasGxIC7m4Mxqbs7dmDXGo+JmbvwDPRfWtkK6g9JiOE NcQWXE7cUfBSRWdFNaLAYDggMDhYfKrapYRxSLAItO85cnoDcjwUZRXtPjWJz1+B F9mVNSSaIHDV84r/dIb8ruh2ygKVzRnSGO1U8HtvQAACYsiD1JIk/jGLak/MsESi 3LoXwhhWmRWmUiop -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:59 2026 by rpki-client