This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer File: xyCKi4W8uAfK1kE4VDJjrLIERIs.cer (raw, json) Hash identifier: HftuA0qgUXlqKxauzG9Wo7Ayo+nrV3paH19QOVCMnbA= Subject key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1283FA1C097FB8E0BA93ED237801C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12715 IP: 37.11.0.0/16 IP: 37.14.0.0/15 IP: 37.35.128.0/17 IP: 37.97.124.0/22 IP: 37.132.0.0/14 IP: 62.14.0.0/15 IP: 87.216.0.0/13 IP: 95.16.0.0/13 IP: 146.158.128.0/17 IP: 185.4.188.0/22 IP: 188.76.0.0/14 IP: 212.9.64.0/19 IP: 212.106.192.0/18 IP: 213.179.96.0/19 IP: 2a02:2e00::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:83:fa:1c:09:7f:b8:e0:ba:93:ed:23:78:01:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7208a8b85bcb807cad64138543263acb204448b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:16:74:8c:96:50:08:52:7b:fe:b5:b9:d0: c2:4e:07:6a:3c:3d:d9:37:87:03:09:f8:15:fc:d9: 1c:74:9e:88:3f:96:76:96:11:3b:b2:b1:73:75:e0: 43:04:8f:07:fc:63:10:68:4c:9a:29:7d:44:8f:16: 04:4f:03:53:02:6e:d5:1e:3a:34:19:11:f2:db:b6: 09:3d:6b:90:40:e0:d3:aa:c9:1b:a8:10:56:8a:9d: bd:ef:02:73:c1:0b:d7:97:f8:d6:d7:37:bc:ab:27: a7:0e:47:60:13:59:61:a2:d1:58:27:31:43:42:c4: 15:7a:2d:8f:73:43:fa:eb:bd:ce:18:89:d5:07:51: 72:cd:6b:0e:20:ab:fc:6b:78:b3:f7:17:b9:12:1c: 3f:b7:a0:30:14:ec:59:df:5b:2f:a7:0d:d0:ef:64: a4:9d:76:b4:4f:c9:7f:92:4c:bc:b6:78:8f:a6:23: cb:97:bc:e2:8b:35:50:f0:9b:c2:09:16:a0:bf:67: fd:df:8e:ef:ab:20:75:6a:80:b0:de:76:5f:7f:d4: c7:98:48:f2:9c:43:3a:13:3a:c8:76:ba:da:83:03: f6:f0:63:84:aa:f2:14:ed:b0:f7:1b:b9:56:ed:72: 29:9b:9c:dc:05:f4:1c:93:d7:33:91:ba:8f:73:7b: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.11.0.0/16 37.14.0.0/15 37.35.128.0/17 37.97.124.0/22 37.132.0.0/14 62.14.0.0/15 87.216.0.0/13 95.16.0.0/13 146.158.128.0/17 185.4.188.0/22 188.76.0.0/14 212.9.64.0/19 212.106.192.0/18 213.179.96.0/19 IPv6: 2a02:2e00::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12715 Signature Algorithm: sha256WithRSAEncryption 17:37:2b:de:cc:a1:74:3f:3b:e8:8c:e1:96:62:24:63:50:80: 06:36:5b:e0:0a:0b:98:95:0a:76:d8:12:54:e6:2a:35:fe:78: 71:99:0c:a0:69:4c:35:d8:4e:81:68:f7:3d:70:2c:6b:e1:f0: 42:3d:fd:32:c6:88:ce:6e:0e:0d:55:cb:5d:16:9b:c8:2f:10: 40:db:b3:57:10:ff:8a:1a:b3:75:4a:a8:9a:3b:8a:16:8b:e3: fa:d4:c3:1a:ae:81:60:bf:62:39:7e:cf:5e:46:76:70:66:8b: f3:30:09:f1:a4:84:f7:47:25:2d:44:11:8e:f7:bd:50:74:98: 6d:6e:5c:f7:ff:de:8e:13:9d:3d:96:72:78:ad:6c:03:e7:dd: 4c:74:97:92:5c:86:85:b8:f9:20:f0:c8:68:a8:2c:89:e7:80: c5:43:66:e6:00:76:49:c1:39:20:e3:36:b6:46:0c:43:7c:ec: 4f:bc:26:58:62:d5:a9:30:a9:a9:d8:f9:56:2d:36:e1:12:19: 6f:58:3b:0a:50:a6:dd:88:3f:8c:8f:b0:33:51:b3:d9:6c:00: 1c:9e:ee:3d:30:84:c3:37:a2:e4:f9:b3:69:7a:6e:5a:a9:72: f6:ee:60:43:89:04:4b:7e:c4:02:d6:e9:bc:43:24:cc:94:f2: cf:b2:39:0e -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZt8EoP6HAl/uOC6k+0jeAHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzIwOGE4Yjg1YmNiODA3Y2FkNjQxMzg1NDMyNjNhY2IyMDQ0NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGQWdIyWUAhSe/61udDCTgdqPD3Z N4cDCfgV/NkcdJ6IP5Z2lhE7srFzdeBDBI8H/GMQaEyaKX1EjxYETwNTAm7VHjo0 GRHy27YJPWuQQODTqskbqBBWip297wJzwQvXl/jW1ze8qyenDkdgE1lhotFYJzFD QsQVei2Pc0P6673OGInVB1FyzWsOIKv8a3iz9xe5Ehw/t6AwFOxZ31svpw3Q72Sk nXa0T8l/kky8tniPpiPLl7ziizVQ8JvCCRagv2f9347vqyB1aoCw3nZff9THmEjy nEM6EzrIdrragwP28GOEqvIU7bD3G7lW7XIpm5zcBfQck9czkbqPc3sLzwIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFMcgiouFvLgHytZBOFQyY6yyBESLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzI3OWEz YS1lN2EwLTQwNjUtYjZkOC0wZjZjNDEyY2YzZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMjc5YTNh LWU3YTAtNDA2NS1iNmQ4LTBmNmM0MTJjZjNkZi8xL3h5Q0tpNFc4dUFmSzFrRTRW REpqckxJRVJJcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHUGCCsGAQUF BwEHAQH/BGYwZDBTBAIAATBNAwMAJQsDAwElDgMEByUjgAMEAiVhfAMDAiWEAwMB Pg4DAwNX2AMDA18QAwQHkp6AAwQCuQS8AwMCvEwDBAXUCUADBAbUasADBAXVs2Aw DQQCAAIwBwMFBSoCLgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICMaswDQYJKoZI hvcNAQELBQADggEBABc3K97MoXQ/O+iM4ZZiJGNQgAY2W+AKC5iVCnbYElTmKjX+ eHGZDKBpTDXYToFo9z1wLGvh8EI9/TLGiM5uDg1Vy10Wm8gvEEDbs1cQ/4oas3VK qJo7ihaL4/rUwxqugWC/Yjl+z15GdnBmi/MwCfGkhPdHJS1EEY73vVB0mG1uXPf/ 3o4TnT2WcnitbAPn3Ux0l5JchoW4+SDwyGioLInngMVDZuYAdknBOSDjNrZGDEN8 7E+8Jlhi1akwqanY+VYtNuESGW9YOwpQpt2IP4yPsDNRs9lsABye7j0whMM3ouT5 s2l6blqpcvbuYEOJBEt+xALW6bxDJMyU8s+yOQ4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:40 2026 by rpki-client