This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer (raw, json) Hash identifier: gaG097G9Ibs+fofMXrwfUTE1zn+TDgCJ6lQzbCsL33E= Subject key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6AAC8396597DCA7FECF71FBFF30FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205672 IP: 195.137.162.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:c8:39:65:97:dc:a7:fe:cf:71:fb:ff:30:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:90:49:ed:02:cb:e2:6f:d2:64:a3:4c:f2: 7c:78:dc:d5:63:84:ee:79:6f:7e:eb:e6:01:fb:51: b9:7f:6d:f9:ba:1a:64:75:0e:aa:c4:04:1d:da:24: 39:25:31:73:2b:da:90:c2:0a:5e:47:59:ad:4e:82: 33:4a:bb:40:a2:04:4a:5c:31:c5:a7:8b:dc:8c:e5: 39:a1:c0:2d:e0:15:64:a2:b7:e1:78:a3:29:f9:64: 7e:24:83:bf:38:ef:2d:ca:81:13:10:49:62:65:8b: a0:ff:81:c9:62:d7:7b:4b:47:f4:8f:fc:e1:4f:8c: d5:3a:f0:41:86:c2:d9:e4:10:e1:b1:ac:c0:74:a5: b8:6e:ac:6d:37:73:8f:3e:42:8c:0c:ae:20:ee:3f: bb:8a:84:9d:db:a2:70:d8:a8:41:41:0e:56:60:2e: b2:e8:05:2e:14:2a:00:b2:ec:4a:15:42:40:be:8b: 1f:60:06:af:78:d2:72:d7:d1:ac:77:f7:f8:45:98: c5:82:97:39:16:67:a0:0a:89:4c:29:df:1e:ec:28: 57:4a:c3:3c:60:2b:7d:57:0c:71:2e:bf:f9:d3:7d: 70:8d:d3:1b:2e:fe:57:4c:e3:20:58:24:84:5f:87: b0:f2:d3:b2:bf:cd:f6:2f:2f:0d:df:d9:41:46:49: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.162.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205672 Signature Algorithm: sha256WithRSAEncryption 6d:6b:51:14:f1:af:d9:14:7f:ce:5e:3c:e3:62:51:fa:8f:c1: 6a:68:cb:18:7d:be:69:0a:b5:50:d9:c8:82:aa:fa:eb:83:3d: 9b:18:c3:b8:1c:20:52:29:67:7f:5e:72:ff:de:45:93:1a:86: 6a:a2:9c:7e:e3:f8:6b:47:8e:ed:3f:ba:bb:63:dc:64:b4:9c: 84:2a:17:b2:5d:3f:24:eb:91:ee:32:c8:83:21:9a:b1:01:c0: 65:17:3d:06:da:23:e7:07:80:83:d4:82:64:be:b5:51:87:7f: 9d:6a:45:32:89:21:d7:1f:f7:4a:0e:b7:2c:da:15:c7:cf:b6: e2:1f:5a:65:55:a0:7e:f9:0b:da:74:89:f2:6a:1e:6e:d6:d9: 81:d8:57:9a:e3:44:f2:2f:e8:ae:32:18:4f:61:3e:2a:96:20: a4:93:a1:18:88:70:c7:be:7e:9e:e5:1a:39:a7:ed:b5:3d:ff: 87:c8:14:0e:3d:66:58:04:da:cc:9b:37:e8:76:a7:40:e8:80: 78:59:f1:93:a2:16:17:a6:b2:28:13:a3:88:04:87:4e:e7:08: ba:0a:a9:10:9b:d4:98:26:09:f0:e9:a9:65:9b:a8:76:5c:33: 53:e9:22:5e:4f:a1:63:16:46:1b:7c:64:b0:cd:7b:5a:33:10: 56:03:8f:07 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xqrIOWWX3Kf+z3H7/zD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTMzOGVmY2U0NDk0ZjViOTI1ZjBlOWFmNzM2NTFjMWNiZjFlMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYiQSe0Cy+Jv0mSjTPJ8eNzVY4Tu eW9+6+YB+1G5f235uhpkdQ6qxAQd2iQ5JTFzK9qQwgpeR1mtToIzSrtAogRKXDHF p4vcjOU5ocAt4BVkorfheKMp+WR+JIO/OO8tyoETEEliZYug/4HJYtd7S0f0j/zh T4zVOvBBhsLZ5BDhsazAdKW4bqxtN3OPPkKMDK4g7j+7ioSd26Jw2KhBQQ5WYC6y 6AUuFCoAsuxKFUJAvosfYAaveNJy19Gsd/f4RZjFgpc5FmegColMKd8e7ChXSsM8 YCt9VwxxLr/5031wjdMbLv5XTOMgWCSEX4ew8tOyv832Ly8N39lBRkldfwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMUzjvzkSU9bkl8Omvc2UcHL8eBMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzdjNGUz Mi02YzIwLTQxYzEtYTg1Zi1mZGQzYTgxNWFiYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvN2M0ZTMy LTZjMjAtNDFjMS1hODVmLWZkZDNhODE1YWJiOC8xL3hUT09fT1JKVDF1U1h3NmE5 elpSd2N2eDRFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw4miMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMjaDANBgkqhkiG9w0BAQsFAAOCAQEAbWtRFPGv2RR/zl4842JR+o/BamjLGH2+ aQq1UNnIgqr664M9mxjDuBwgUilnf15y/95FkxqGaqKcfuP4a0eO7T+6u2PcZLSc hCoXsl0/JOuR7jLIgyGasQHAZRc9Btoj5weAg9SCZL61UYd/nWpFMokh1x/3Sg63 LNoVx8+24h9aZVWgfvkL2nSJ8moebtbZgdhXmuNE8i/orjIYT2E+KpYgpJOhGIhw x75+nuUaOafttT3/h8gUDj1mWATazJs36HanQOiAeFnxk6IWF6ayKBOjiASHTucI ugqpEJvUmCYJ8OmpZZuodlwzU+kiXk+hYxZGG3xksM17WjMQVgOPBw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:39 2026 by rpki-client