This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer File: XtjeCCBk6z_rQCqHPli7aM9dSR4.cer (raw, json) Hash identifier: IE82ouNvGI2OzYxmQvJXpTD42Wj6B5cfe48QAe+9Wqw= Subject key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB6D67488C45DAA8B51F69B3543CF6C0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 17:08:19 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59684 IP: 176.126.164.0/22 IP: 178.219.159.0/24 IP: 2001:67c:87c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:d6:74:88:c4:5d:aa:8b:51:f6:9b:35:43:cf:6c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 17:08:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:0f:ce:22:02:c1:55:d1:ee:c4:70:9e:b0: fc:f5:bb:b5:d4:2c:9d:d0:3f:d1:33:23:1a:2b:7a: 3f:a7:07:ef:5b:d4:82:56:6c:ea:df:12:6d:3a:69: 17:7b:0d:3e:05:61:41:60:c4:0c:da:35:57:95:bc: 36:d9:cd:d6:b2:e8:13:99:a8:70:46:61:35:b8:fe: a2:5b:1c:c0:df:e6:86:25:6a:1b:7e:ca:10:cb:69: e9:b9:b0:99:11:b1:07:9b:26:b3:a6:74:6d:3d:70: bc:18:28:5f:c4:10:f5:80:3c:4b:6e:1a:77:e2:ec: 0a:6d:06:8c:61:3a:dc:aa:63:7f:8b:9c:6a:9c:7a: 8a:41:12:d4:de:b9:02:ad:76:90:95:e6:a3:0f:c7: 07:49:48:22:3e:66:08:e2:c2:f7:c2:9d:4b:1f:db: 55:84:a8:a2:3d:5d:da:1b:01:8c:05:c4:65:00:4a: 8b:4c:08:d8:c5:65:81:11:22:9c:03:ed:02:98:72: 9c:a7:9a:64:f1:bb:00:a8:54:09:e0:54:43:3c:92: 80:62:57:c4:fe:18:d3:c9:ae:43:91:78:b4:ae:08: 7a:83:0d:99:4a:e3:db:10:a5:21:99:c8:6d:c7:a1: b8:4d:b7:17:7b:c1:f6:59:80:c5:8d:c7:0a:85:19: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.164.0/22 178.219.159.0/24 IPv6: 2001:67c:87c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59684 Signature Algorithm: sha256WithRSAEncryption 48:60:20:7e:b3:74:22:25:31:e1:a3:9a:7f:84:4c:96:98:06: 0f:a1:dd:75:6a:5a:1d:ec:44:c0:89:01:e5:39:f9:ee:5b:f8: ea:1d:fd:64:27:f2:a4:67:dc:a7:05:ba:17:b5:68:67:df:26: 71:97:db:f8:e0:c7:a9:a0:1d:9f:93:88:c4:f1:8f:7d:c7:1f: bb:73:b3:e4:28:31:b3:d9:9a:6d:76:0b:54:dd:7a:12:7a:71: 69:37:24:a3:76:57:a7:70:1a:65:0f:53:56:7f:00:67:7b:4f: a8:94:7d:0f:de:5b:08:0d:7d:71:e6:da:57:19:66:8b:c7:fb: ee:24:4f:1f:12:44:b1:fe:3d:63:9d:e4:43:d1:57:b3:bc:4a: e3:5b:e5:9c:31:05:25:c0:08:ac:34:8a:10:1f:4b:cf:5a:a3: 14:49:19:4b:22:e4:42:38:12:59:9a:ab:0e:79:f1:b0:95:ac: ac:da:dc:08:ca:05:d3:45:08:69:9e:a4:66:dc:da:74:a9:3d: aa:da:5c:8a:5b:5d:d6:d6:5d:83:e3:55:71:30:07:99:16:eb: a8:2b:e6:ae:6c:ba:56:00:72:6e:9b:ab:be:ce:40:f2:39:33: 66:42:4a:61:ef:bd:39:8c:c7:16:7a:e5:f7:60:15:3e:44:6c: 71:b6:68:95 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZq21nSIxF2qi1H2mzVDz2wOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTcwODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWQ4ZGUwODIwNjRlYjNmZWI0MDJhODczZTU4YmI2OGNmNWQ0OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIMPziICwVXR7sRwnrD89bu11Cyd 0D/RMyMaK3o/pwfvW9SCVmzq3xJtOmkXew0+BWFBYMQM2jVXlbw22c3WsugTmahw RmE1uP6iWxzA3+aGJWobfsoQy2npubCZEbEHmyazpnRtPXC8GChfxBD1gDxLbhp3 4uwKbQaMYTrcqmN/i5xqnHqKQRLU3rkCrXaQleajD8cHSUgiPmYI4sL3wp1LH9tV hKiiPV3aGwGMBcRlAEqLTAjYxWWBESKcA+0CmHKcp5pk8bsAqFQJ4FRDPJKAYlfE /hjTya5DkXi0rgh6gw2ZSuPbEKUhmchtx6G4TbcXe8H2WYDFjccKhRkaIQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2FkMWI0 MC0wNzg1LTRhNzYtODFhZi1hZWEyYzRlMjY3NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYWQxYjQw LTA3ODUtNGE3Ni04MWFmLWFlYTJjNGUyNjc3MC8xL1h0amVDQ0JrNnpfclFDcUhQ bGk3YU05ZFNSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCsH6kAwQAstufMA8EAgACMAkDBwAgAQZ8CHww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOkkMA0GCSqGSIb3DQEBCwUAA4IBAQBI YCB+s3QiJTHho5p/hEyWmAYPod11alod7ETAiQHlOfnuW/jqHf1kJ/KkZ9ynBboX tWhn3yZxl9v44MepoB2fk4jE8Y99xx+7c7PkKDGz2ZptdgtU3XoSenFpNySjdlen cBplD1NWfwBne0+olH0P3lsIDX1x5tpXGWaLx/vuJE8fEkSx/j1jneRD0VezvErj W+WcMQUlwAisNIoQH0vPWqMUSRlLIuRCOBJZmqsOefGwlays2twIygXTRQhpnqRm 3Np0qT2q2lyKW13W1l2D41VxMAeZFuuoK+aubLpWAHJum6u+zkDyOTNmQkph7705 jMcWeuX3YBU+RGxxtmiV -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:43 2025 by rpki-client