This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer File: tXikYahZ3cmGwIqI6VEtXD0iEOY.cer (raw, json) Hash identifier: 4+ykQictNfEmfGf1JwBeQ0desaw0g27t4xMfKXVwMIQ= Subject key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1F4C486C451182235FD050DDEC373 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206862 AS: 207920 IP: 185.173.168.0/22 IP: 194.53.118.0/23 IP: 194.53.122.0/23 IP: 2a0b:6b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f4:c4:86:c4:51:18:22:35:fd:05:0d:de:c3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:bf:f0:e6:1d:82:57:33:0d:d7:45:f5:44: b8:49:3e:c0:ec:a5:88:c8:d2:0a:8f:ef:65:59:00: 61:47:5b:17:7e:0c:c2:d2:d7:e2:f4:86:2a:ef:92: ab:03:bf:14:dd:e6:7e:0d:e6:f0:c6:c6:da:c0:e9: 04:75:56:9b:33:c0:9c:4f:dd:95:94:20:ea:35:96: d1:a8:66:d6:f7:18:6e:bc:94:5f:fd:b6:87:9a:07: e8:e1:39:bc:ec:7b:9c:18:9e:cc:1c:59:e1:d1:78: 59:24:2a:50:1f:f8:de:56:d7:4b:dd:ad:f5:75:a3: dd:92:04:d4:6f:aa:16:ee:74:d4:db:0f:50:48:ca: 4b:91:6a:d7:9c:2c:d8:0e:7c:35:67:2d:46:e5:57: fb:32:11:a1:b8:ef:2d:36:23:a1:10:84:e8:68:45: f9:cf:1e:77:fb:01:f1:0d:59:b7:cd:bf:ad:58:b8: 7a:8e:42:6d:5a:66:2c:24:db:1f:af:02:21:f8:ab: 82:98:81:f6:86:c2:9a:62:6f:47:5f:a1:e6:c5:58: 3a:fa:0a:e3:fd:3f:6f:5b:1e:5d:e0:03:5a:8d:ea: c9:29:43:0b:2b:12:c0:43:ef:9e:17:0a:ce:76:3a: 9d:71:dd:16:43:f4:61:7b:0c:24:99:46:15:47:bf: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.168.0/22 194.53.118.0/23 194.53.122.0/23 IPv6: 2a0b:6b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206862 207920 Signature Algorithm: sha256WithRSAEncryption a4:36:b7:9e:ee:ff:cd:04:85:59:02:46:4c:76:b8:b8:9a:04: 54:32:1f:e4:64:52:2e:81:6f:c2:fa:1f:f0:34:83:f7:85:79: 53:63:7c:d1:c1:d0:b7:55:15:d0:44:8c:3c:ad:0d:2c:0f:cc: df:3c:d0:c6:f1:af:ce:50:89:48:59:dc:35:98:7f:19:20:47: 03:e2:ed:bd:da:b6:a1:a0:e2:59:64:6c:c2:40:05:c7:96:a8: c4:09:ec:21:20:44:6a:65:51:95:85:21:6a:4e:52:ac:da:d9: a2:53:7b:6a:69:3d:89:7d:51:e8:8d:17:57:e9:7e:67:f9:4e: 45:a5:05:1d:fb:b3:6c:2c:a0:61:49:a8:d8:c7:0e:6e:43:50: 73:25:70:7b:c0:28:ed:89:1b:1c:9c:c1:d8:76:0e:9d:04:15: f2:41:1d:83:bf:4a:40:ce:14:ae:ed:f6:c8:2a:77:c4:2d:0f: 56:31:af:8b:5e:ff:44:b6:33:f5:3b:c2:d6:3a:84:dc:81:c8: 9b:9d:64:23:67:00:b7:85:ac:c9:c0:2d:76:92:82:8a:08:9d: a5:7e:fb:2b:4b:01:be:95:db:39:ff:80:82:15:12:f5:9d:e1: c4:66:4d:41:c4:19:89:e0:cd:ad:cb:60:13:fb:75:c3:36:d4: bd:d2:cc:da -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt/8fTEhsRRGCI1/QUN3sNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc4YTQ2MWE4NTlkZGM5ODZjMDhhODhlOTUxMmQ1YzNkMjIxMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdq/8OYdglczDddF9US4ST7A7KWI yNIKj+9lWQBhR1sXfgzC0tfi9IYq75KrA78U3eZ+DebwxsbawOkEdVabM8CcT92V lCDqNZbRqGbW9xhuvJRf/baHmgfo4Tm87HucGJ7MHFnh0XhZJCpQH/jeVtdL3a31 daPdkgTUb6oW7nTU2w9QSMpLkWrXnCzYDnw1Zy1G5Vf7MhGhuO8tNiOhEIToaEX5 zx53+wHxDVm3zb+tWLh6jkJtWmYsJNsfrwIh+KuCmIH2hsKaYm9HX6HmxVg6+grj /T9vWx5d4ANajerJKUMLKxLAQ++eFwrOdjqdcd0WQ/RhewwkmUYVR79tQwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLV4pGGoWd3JhsCKiOlRLVw9IhDmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzBjZWUz NC01YWNjLTQyZDUtYTViZi1mYzFjMGNjYmMwYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMGNlZTM0 LTVhY2MtNDJkNS1hNWJmLWZjMWMwY2NiYzBiNy8xL3RYaWtZYWhaM2NtR3dJcUk2 VkV0WEQwaUVPWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCua2oAwQBwjV2AwQBwjV6MA0EAgACMAcDBQMq C2sAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMoDgIDAywwMA0GCSqGSIb3DQEB CwUAA4IBAQCkNree7v/NBIVZAkZMdri4mgRUMh/kZFIugW/C+h/wNIP3hXlTY3zR wdC3VRXQRIw8rQ0sD8zfPNDG8a/OUIlIWdw1mH8ZIEcD4u292rahoOJZZGzCQAXH lqjECewhIERqZVGVhSFqTlKs2tmiU3tqaT2JfVHojRdX6X5n+U5FpQUd+7NsLKBh SajYxw5uQ1BzJXB7wCjtiRscnMHYdg6dBBXyQR2Dv0pAzhSu7fbIKnfELQ9WMa+L Xv9EtjP1O8LWOoTcgcibnWQjZwC3hazJwC12koKKCJ2lfvsrSwG+lds5/4CCFRL1 neHEZk1BxBmJ4M2ty2AT+3XDNtS90sza -----END CERTIFICATE-----Generated at Mon Jan 26 11:41:52 2026 by rpki-client