This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer File: xuHIxlyG6NJt2-toZYo5p6jieGY.cer (raw, json) Hash identifier: QkZ7ad/PkkXFPhUafAUTtPxcXEQoCEUk9TC7N0LpefY= Subject key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4035063E893092B4351825219871 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.34.160.0/22 IP: 89.42.136.0/22 IP: 89.42.196.0/22 IP: 89.47.196.0 -- 89.47.203.255 IP: 92.114.48.0/22 IP: 2a01:5500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:40:35:06:3e:89:30:92:b4:35:18:25:21:98:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:f7:c7:22:95:bf:42:8c:35:b4:94:f3:9d: e1:d3:75:de:11:fd:27:1c:27:9c:21:20:a1:ee:fd: 93:ab:5d:f2:8f:db:9b:2b:79:26:16:c7:75:ea:9a: 72:d4:e6:bb:d5:8e:4b:24:f6:78:68:57:55:e9:fe: ac:62:e5:ec:4e:7c:17:3f:c4:b7:67:4e:5e:1c:52: ee:bd:27:bd:f1:e4:9f:80:6d:e2:b1:9e:65:91:88: 85:e1:d2:78:a5:34:de:c3:d1:99:25:65:ba:ac:23: 9a:23:4a:d6:09:3d:cc:a3:92:6d:29:b1:68:05:ac: 51:e5:f2:87:d6:50:2b:db:2c:ed:a3:ce:3b:26:99: ad:84:5d:9e:46:5c:cd:d1:b6:ab:86:02:dc:af:18: 44:32:f3:32:c9:5e:06:8a:22:92:98:5e:0f:44:2a: 4f:71:61:e6:cc:a0:04:0f:ec:60:c0:48:61:15:aa: 94:0c:c9:84:e1:15:94:17:7e:8b:2f:f1:c9:27:78: c9:c5:80:f4:be:fa:51:e2:35:58:7d:31:64:60:5d: 67:83:64:db:a7:ff:26:70:13:aa:e9:6b:4a:6f:e9: ea:b5:91:01:ba:5c:aa:1c:23:00:eb:0f:01:b4:05: 29:d3:e3:9e:7d:1a:ad:9a:4f:da:aa:be:31:c6:37: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.160.0/22 89.42.136.0/22 89.42.196.0/22 89.47.196.0-89.47.203.255 92.114.48.0/22 IPv6: 2a01:5500::/29 Signature Algorithm: sha256WithRSAEncryption 50:9d:7d:51:96:b5:36:35:63:86:18:6d:8c:ef:d4:6a:96:78: 33:5c:3f:3b:96:e5:0d:db:c5:63:df:15:58:45:40:3a:d8:c6: 26:90:6d:27:c4:64:6c:0b:de:56:05:da:d2:ac:9f:b1:d6:41: 5d:ee:b8:18:2a:50:1d:5b:62:a9:eb:55:69:f3:7f:50:3a:9c: 12:31:bc:e4:ec:52:3d:2d:2a:52:d0:e9:c5:db:66:1f:04:c9: 15:db:83:b8:ae:5d:ed:54:18:29:65:41:51:d1:86:0f:b9:72: 59:e9:0c:9c:24:bd:31:5a:e9:db:19:c5:d8:6a:79:99:b4:98: 8e:b4:e1:b0:ed:74:d7:17:39:86:0c:9b:ec:9f:6d:b3:dc:5b: 4f:54:27:c1:67:21:99:df:ef:fb:4e:30:09:47:37:7a:39:b7: aa:8d:78:95:5e:91:6c:9d:24:19:0d:b8:b5:49:f7:82:5d:30: 44:e2:47:bc:d9:d2:2b:8a:9b:57:4a:7c:cb:82:5f:98:2d:fc: ee:cf:44:78:8d:c6:28:17:33:d8:e8:ed:54:a8:5b:da:52:0e: 68:16:a8:0d:e4:44:a8:65:8e:9b:bc:85:ea:fc:79:86:6c:13: 95:5b:f0:da:4c:ee:c8:68:59:f1:8e:ae:f9:e3:f1:7f:70:1a: 9c:0a:27:14 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt87kA1Bj6JMJK0NRglIZhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmUxYzhjNjVjODZlOGQyNmRkYmViNjg2NThhMzlhN2E4ZTI3ODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz/3xyKVv0KMNbSU853h03XeEf0n HCecISCh7v2Tq13yj9ubK3kmFsd16ppy1Oa71Y5LJPZ4aFdV6f6sYuXsTnwXP8S3 Z05eHFLuvSe98eSfgG3isZ5lkYiF4dJ4pTTew9GZJWW6rCOaI0rWCT3Mo5JtKbFo BaxR5fKH1lAr2yzto847JpmthF2eRlzN0barhgLcrxhEMvMyyV4GiiKSmF4PRCpP cWHmzKAED+xgwEhhFaqUDMmE4RWUF36LL/HJJ3jJxYD0vvpR4jVYfTFkYF1ng2Tb p/8mcBOq6WtKb+nqtZEBulyqHCMA6w8BtAUp0+OefRqtmk/aqr4xxjfyWwIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFMbhyMZchujSbdvraGWKOaeo4nhmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2E0NTNm ZS1hNjY0LTQ3YTItOGI4YS1jZTVlMDFlNzFjOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYTQ1M2Zl LWE2NjQtNDdhMi04YjhhLWNlNWUwMWU3MWM5MS8xL3h1SEl4bHlHNk5KdDItdG9a WW81cDZqaWVHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQCLiKgAwQCWSqIAwQCWSrEMAwDBAJZL8QDBAJZ L8gDBAJccjAwDQQCAAIwBwMFAyoBVQAwDQYJKoZIhvcNAQELBQADggEBAFCdfVGW tTY1Y4YYbYzv1GqWeDNcPzuW5Q3bxWPfFVhFQDrYxiaQbSfEZGwL3lYF2tKsn7HW QV3uuBgqUB1bYqnrVWnzf1A6nBIxvOTsUj0tKlLQ6cXbZh8EyRXbg7iuXe1UGCll QVHRhg+5clnpDJwkvTFa6dsZxdhqeZm0mI604bDtdNcXOYYMm+yfbbPcW09UJ8Fn IZnf7/tOMAlHN3o5t6qNeJVekWydJBkNuLVJ94JdMETiR7zZ0iuKm1dKfMuCX5gt /O7PRHiNxigXM9jo7VSoW9pSDmgWqA3kRKhljpu8her8eYZsE5Vb8NpM7shoWfGO rvnj8X9wGpwKJxQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:07 2026 by rpki-client