This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer (raw, json) Hash identifier: 5WEeBl39pHxd/8crPLIKZYMD7ZfDsU6qamr0+V9V2/I= Subject key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3732D75292F7DBB72DDABDD4A20689 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201324 IP: 185.78.140.0/22 IP: 209.222.77.0/24 IP: 2a03:5960::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:32:d7:52:92:f7:db:b7:2d:da:bd:d4:a2:06:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:6e:ce:96:39:14:cd:a2:58:6f:99:49:4e: 64:dd:50:a9:a6:65:8c:38:50:dd:6a:d7:82:6f:58: b4:69:97:f7:74:b1:63:95:ae:59:42:ee:d2:b7:0f: b5:9c:06:7a:84:69:fb:5c:cc:d9:cc:26:9e:d5:cc: 91:53:87:90:a5:29:e2:bd:de:51:e0:01:da:84:07: 7e:85:be:83:da:11:42:49:a1:52:ea:e2:de:cf:5e: 54:9d:a9:aa:94:18:9c:db:04:e0:12:0f:e4:33:cb: 0e:70:84:c9:ac:18:9a:ff:4d:81:2c:74:fc:fc:df: 60:b2:ab:a8:60:0f:71:ff:21:08:ed:48:4c:97:01: eb:ce:54:e9:7d:10:51:bf:11:87:af:b4:ef:7b:90: ba:71:ab:37:52:5b:d9:ea:7e:0c:52:e7:37:f8:6e: 04:c9:d5:69:a9:c7:27:54:1b:b1:4d:38:51:d5:64: 06:4c:57:54:15:7f:07:bd:f1:e8:17:82:59:53:31: af:60:86:e4:6c:9e:39:c0:3b:5d:ab:06:71:bd:0d: 4d:f9:b0:71:bf:72:fb:3d:91:b9:5d:c1:ed:e9:9e: 3e:c1:85:fb:32:ad:b0:53:46:c6:5e:20:db:5f:64: 5f:25:52:cc:06:4c:55:00:63:0c:59:3d:a1:e7:0b: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.140.0/22 209.222.77.0/24 IPv6: 2a03:5960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201324 Signature Algorithm: sha256WithRSAEncryption 24:57:fe:92:38:14:48:fc:67:d7:4f:fd:c4:77:76:1f:bd:16: 34:3d:79:6b:80:88:94:0e:82:9a:a7:26:8d:97:c8:6d:80:c6: 08:98:d6:23:d7:24:7b:fb:20:cc:75:51:72:4b:79:17:fc:18: c0:5f:fa:8f:50:a1:f9:50:d5:70:24:98:a4:80:7b:84:53:6c: 95:28:c0:0f:0c:7b:9a:d5:81:5a:66:be:84:d2:96:49:7f:de: 8e:7d:9d:b4:79:28:7d:0d:1d:69:1b:76:1f:ba:e4:e9:a1:ee: f5:a2:08:4c:4b:e5:39:b3:42:fe:0d:5e:7c:28:d8:54:94:78: c8:14:a4:14:74:e3:d1:e3:e7:92:f7:52:4a:bc:86:43:46:ef: 67:27:93:cb:bb:30:7e:d0:6d:2d:76:5a:0a:57:9d:cf:06:43: ee:11:44:5e:74:56:6d:cf:71:3e:39:cd:f8:37:cd:31:80:33: 62:f6:41:f9:f9:82:14:74:64:85:59:b3:6f:92:9e:fd:77:fa: 6c:fa:58:d4:f2:18:9b:75:a5:c1:23:6c:e1:6f:0a:4d:84:c4: 86:4d:ab:7b:c0:c9:bd:af:8f:86:f9:b0:e8:c5:fb:8c:2e:87: b9:52:1e:94:40:90:e4:76:d2:1f:44:e9:fb:c7:05:56:37:cb: b4:be:47:3c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+NzLXUpL327ct2r3UogaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDkxNDU2ZWRhNTlmYjBmZDJkMTczZjk1NDEyYmUzNWY2Y2ZiZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjxuzpY5FM2iWG+ZSU5k3VCppmWM OFDdateCb1i0aZf3dLFjla5ZQu7Stw+1nAZ6hGn7XMzZzCae1cyRU4eQpSnivd5R 4AHahAd+hb6D2hFCSaFS6uLez15UnamqlBic2wTgEg/kM8sOcITJrBia/02BLHT8 /N9gsquoYA9x/yEI7UhMlwHrzlTpfRBRvxGHr7Tve5C6cas3UlvZ6n4MUuc3+G4E ydVpqccnVBuxTThR1WQGTFdUFX8HvfHoF4JZUzGvYIbkbJ45wDtdqwZxvQ1N+bBx v3L7PZG5XcHt6Z4+wYX7Mq2wU0bGXiDbX2RfJVLMBkxVAGMMWT2h5wtudwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMSRRW7aWfsP0tFz+VQSvjX2z7+vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzRmNDA4 ZC1iZGE1LTRhOTQtYjgzYS1hNzMwY2NmZGFkYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvNGY0MDhk LWJkYTUtNGE5NC1iODNhLWE3MzBjY2ZkYWRjNS8xL3hKRkZidHBaLXdfUzBYUDVW QkstTmZiUHY2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuU6MAwQA0d5NMA0EAgACMAcDBQAqA1lgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSbDANBgkqhkiG9w0BAQsFAAOCAQEAJFf+ kjgUSPxn10/9xHd2H70WND15a4CIlA6CmqcmjZfIbYDGCJjWI9cke/sgzHVRckt5 F/wYwF/6j1Ch+VDVcCSYpIB7hFNslSjADwx7mtWBWma+hNKWSX/ejn2dtHkofQ0d aRt2H7rk6aHu9aIITEvlObNC/g1efCjYVJR4yBSkFHTj0ePnkvdSSryGQ0bvZyeT y7swftBtLXZaCledzwZD7hFEXnRWbc9xPjnN+DfNMYAzYvZB+fmCFHRkhVmzb5Ke /Xf6bPpY1PIYm3WlwSNs4W8KTYTEhk2re8DJva+Phvmw6MX7jC6HuVIelECQ5HbS H0Tp+8cFVjfLtL5HPA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:00 2026 by rpki-client