This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer File: xk-grYmHFJ8FU0cktFovTV6_R10.cer (raw, json) Hash identifier: lnqtXpegCaqHGt6jf0KISHi3uBt6Tud2uJBAMf9R+Is= Subject key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A73A1AB0369B67384B897CD80DF0FFEDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 15:56:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59645 AS: 62078 AS: 211286 AS: 215250 IP: 45.91.12.0/22 IP: 193.104.168.0/24 IP: 195.191.196.0/23 IP: 2a06:d1c0::/29 IP: 2a0d:8d04::/32 IP: 2a0e:a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:a1:ab:03:69:b6:73:84:b8:97:cd:80:df:0f:fe:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 15:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:95:5a:76:c2:13:d8:2b:36:71:ee:07:89: e5:cc:00:09:01:ae:03:ca:f0:5f:55:be:b3:f9:d9: 21:9b:5b:1c:6f:3f:44:d2:e9:77:aa:9f:7c:60:07: 56:ef:ac:14:f3:92:5b:d4:86:c6:ed:3e:0b:9e:7d: c2:6a:80:da:89:71:03:ab:dc:34:13:29:8a:7f:bd: aa:fb:3f:6d:f0:de:f5:e9:22:ee:ac:3d:12:94:94: 1e:70:81:34:92:af:7e:56:fb:98:39:19:96:99:fe: 75:36:1d:c0:13:5c:19:df:08:56:f6:56:72:5d:54: 08:13:3d:1d:da:2c:7a:93:54:ef:c0:5f:8c:c5:0d: 54:67:4a:6f:ad:f5:e3:ab:6b:e5:9e:19:82:a4:77: 08:b7:b0:28:78:48:73:35:51:1e:ba:e7:10:2e:1f: 79:a4:fc:a3:23:dd:07:34:98:34:8d:dd:65:e8:f8: b5:41:74:70:5b:0e:c8:26:91:76:53:02:d9:62:7c: 1b:c8:d9:bc:e8:98:92:1b:8a:54:19:3a:c7:c2:1a: fb:f2:8f:7c:ec:df:b2:e3:1f:1c:36:81:0f:e9:3a: 34:d7:2b:a8:69:b9:4f:89:a1:ee:e6:18:55:11:0c: 30:29:98:58:be:97:8f:d5:0e:b1:83:65:6e:37:3a: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.12.0/22 193.104.168.0/24 195.191.196.0/23 IPv6: 2a06:d1c0::/29 2a0d:8d04::/32 2a0e:a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59645 62078 211286 215250 Signature Algorithm: sha256WithRSAEncryption a4:df:dd:42:88:34:08:23:99:b5:9d:a7:6e:a9:79:ad:cb:91: 0a:ab:80:55:81:e6:73:d2:42:c4:a7:f5:44:ec:12:36:82:d3: 6a:25:ec:5e:e2:13:46:af:3d:e0:ac:10:d5:09:a2:6f:1c:2d: 42:90:58:98:17:40:7e:12:77:60:8c:b1:89:2c:33:f3:8c:c3: 9c:fd:82:8c:ce:aa:a8:0f:81:d9:45:09:33:d8:46:f9:00:c3: 11:6d:07:06:8b:ad:72:d8:6c:22:48:55:54:2d:c4:92:1e:25: 85:a7:18:74:c1:d5:eb:44:19:98:d4:9d:3c:f6:b4:97:99:91: fb:fc:01:d2:51:5c:90:5a:7f:28:7b:17:c4:85:66:23:64:28: e9:70:58:4d:26:44:3d:ca:67:c9:8e:48:f8:02:fd:7a:ab:b5: d9:56:af:f1:15:ee:87:5f:d7:e0:e1:a7:b8:6e:6c:f9:d5:75: 72:7b:eb:61:b8:53:e9:d5:10:1b:4d:29:9d:06:cf:d4:e1:a3: fe:c2:ff:8b:e9:4b:88:2e:f8:5e:67:73:a6:42:d8:4d:e6:a3: d1:17:69:91:bd:f3:59:98:fb:16:f7:fa:a6:8a:85:35:65:8d: f0:0f:e8:cf:d4:d8:59:39:6b:c4:c1:bb:f9:dd:93:a4:95:5b: d9:04:7a:b1 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZpzoasDabZzhLiXzYDfD/7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTU1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRmYTBhZDg5ODcxNDlmMDU1MzQ3MjRiNDVhMmY0ZDVlYmY0NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUeVWnbCE9grNnHuB4nlzAAJAa4D yvBfVb6z+dkhm1scbz9E0ul3qp98YAdW76wU85Jb1IbG7T4Lnn3CaoDaiXEDq9w0 EymKf72q+z9t8N716SLurD0SlJQecIE0kq9+VvuYORmWmf51Nh3AE1wZ3whW9lZy XVQIEz0d2ix6k1TvwF+MxQ1UZ0pvrfXjq2vlnhmCpHcIt7AoeEhzNVEeuucQLh95 pPyjI90HNJg0jd1l6Pi1QXRwWw7IJpF2UwLZYnwbyNm86JiSG4pUGTrHwhr78o98 7N+y4x8cNoEP6To01yuoablPiaHu5hhVEQwwKZhYvpeP1Q6xg2VuNzq5hQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFMZPoK2JhxSfBVNHJLRaL01ev0ddMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzI0MDE1 Zi0wOTFjLTRjNWQtYjVjMS1iY2Y3NzAyNjkzOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMjQwMTVm LTA5MWMtNGM1ZC1iNWMxLWJjZjc3MDI2OTM5ZC8xL3hrLWdyWW1IRko4RlUwY2t0 Rm92VFY2X1IxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCLVsMAwQAwWioAwQBw7/EMBsEAgACMBUDBQMq BtHAAwUAKg2NBAMFAyoOCkAwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAOj9AgMA 8n4CAwM5VgIDA0jSMA0GCSqGSIb3DQEBCwUAA4IBAQCk391CiDQII5m1naduqXmt y5EKq4BVgeZz0kLEp/VE7BI2gtNqJexe4hNGrz3grBDVCaJvHC1CkFiYF0B+Endg jLGJLDPzjMOc/YKMzqqoD4HZRQkz2Eb5AMMRbQcGi61y2GwiSFVULcSSHiWFpxh0 wdXrRBmY1J089rSXmZH7/AHSUVyQWn8oexfEhWYjZCjpcFhNJkQ9ymfJjkj4Av16 q7XZVq/xFe6HX9fg4ae4bmz51XVye+thuFPp1RAbTSmdBs/U4aP+wv+L6UuILvhe Z3OmQthN5qPRF2mRvfNZmPsW9/qmioU1ZY3wD+jP1NhZOWvEwbv53ZOklVvZBHqx -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:09 2025 by rpki-client