This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer File: xk0ihrXMe-Qviuuutqrlfnzn2is.cer (raw, json) Hash identifier: 9fbg9aGX52eZowBkqzjKSeBh/FWkr+mOqoo3zUtFS24= Subject key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA685CA5353CD32E10C573028ADADD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48897 IP: 195.88.72.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:85:ca:53:53:cd:32:e1:0c:57:30:28:ad:ad:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:0d:e7:3f:a6:8f:b6:13:e7:a6:37:d1:26: 40:ed:a4:ac:45:f1:46:06:22:e7:a2:54:14:05:be: 9c:f5:f9:85:f2:a9:f7:37:58:ef:62:c8:57:6a:81: 12:fb:41:ef:96:6c:82:c8:a5:4b:8a:bc:ba:23:e7: d8:84:9b:88:c2:94:4e:98:ea:42:82:7c:03:7e:3c: b8:18:ed:79:ac:ff:95:6a:d5:83:35:52:33:48:6a: ef:80:cb:66:4a:5b:e7:db:df:59:25:95:22:e3:89: 67:67:fe:09:c9:7e:29:a7:de:5d:38:33:55:77:5e: 4b:90:91:b9:c5:12:28:87:73:f9:a0:82:30:ea:53: 97:23:ed:80:d3:58:c3:b8:83:31:b7:02:df:b6:1c: 61:bf:18:53:c6:ba:ba:6c:4f:ac:59:65:6e:df:7c: 2c:78:e3:ef:b1:ab:4a:29:fd:71:22:fc:06:24:35: 0e:59:bb:c5:57:6d:15:47:79:d9:1c:4c:ec:aa:5e: 68:56:67:7c:6e:c2:ab:37:9e:06:71:26:7a:aa:16: f8:ba:6a:16:bd:ed:6c:40:cf:cc:53:b1:bb:55:d1: bb:c6:3b:1b:b9:f7:b5:15:b2:e3:85:7a:fc:50:7a: 5b:ab:ab:2f:d3:55:34:57:b9:d8:2c:62:ac:c8:b6: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.72.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48897 Signature Algorithm: sha256WithRSAEncryption 8a:00:a1:c8:46:ab:46:b8:75:b6:9f:3c:3b:87:62:1d:a0:ab: 72:29:57:ca:49:97:b2:bd:e2:0f:ec:a9:45:b9:b2:fd:63:9f: 37:de:36:be:b3:1a:0a:e8:02:51:f0:d0:91:88:02:25:71:8a: d8:41:a4:d9:20:b5:28:db:f7:34:36:62:94:f6:73:11:f6:98: 85:47:16:ca:4c:c3:d7:3b:6d:fa:e0:7a:85:ba:2e:fa:52:51: 78:58:1b:bf:2a:09:49:e3:7e:e7:8e:cd:73:65:e9:79:23:69: 1b:2b:65:5c:78:ac:c0:14:60:d1:48:77:2e:ac:a3:47:4f:ad: 3e:cc:5f:f4:71:91:09:e7:52:ae:24:8b:ce:73:03:07:0d:3b: f0:6b:67:79:1f:1f:bd:5d:7e:0f:10:eb:aa:17:72:fe:5f:f0: 60:41:79:72:d6:52:21:61:82:1e:fc:c4:bf:b0:2c:3e:84:1b: 5a:5a:8e:58:ec:36:b3:07:21:a5:9e:b0:0b:ce:49:fb:aa:74: 42:76:e0:ba:74:5d:f0:06:37:2c:0a:15:1a:ac:3e:f2:49:16: e5:78:fc:ab:56:6a:36:0a:97:f6:3e:dd:6d:5f:d0:bb:17:b7: d6:fd:92:ac:43:14:0f:fc:6d:b0:e8:a3:59:ab:3e:f1:50:89: 7c:e0:06:b2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+poXKU1PNMuEMVzAora3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRkMjI4NmI1Y2M3YmU0MmY4YWViYWViNmFhZTU3ZTdjZTdkYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyUN5z+mj7YT56Y30SZA7aSsRfFG BiLnolQUBb6c9fmF8qn3N1jvYshXaoES+0HvlmyCyKVLiry6I+fYhJuIwpROmOpC gnwDfjy4GO15rP+VatWDNVIzSGrvgMtmSlvn299ZJZUi44lnZ/4JyX4pp95dODNV d15LkJG5xRIoh3P5oIIw6lOXI+2A01jDuIMxtwLfthxhvxhTxrq6bE+sWWVu33ws eOPvsatKKf1xIvwGJDUOWbvFV20VR3nZHEzsql5oVmd8bsKrN54GcSZ6qhb4umoW ve1sQM/MU7G7VdG7xjsbufe1FbLjhXr8UHpbq6sv01U0V7nYLGKsyLaWxQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMZNIoa1zHvkL4rrrraq5X5859orMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2EzYzA1 NS1iMjVhLTQyNWYtOGQ5OS1lNWE3MDAzZTEwZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvYTNjMDU1 LWIyNWEtNDI1Zi04ZDk5LWU1YTcwMDNlMTBkZS8xL3hrMGloclhNZS1Rdml1dXV0 cXJsZm56bjJpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw1hIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/ATANBgkqhkiG9w0BAQsFAAOCAQEAigChyEarRrh1tp88O4diHaCrcilXykmX sr3iD+ypRbmy/WOfN942vrMaCugCUfDQkYgCJXGK2EGk2SC1KNv3NDZilPZzEfaY hUcWykzD1ztt+uB6hbou+lJReFgbvyoJSeN+547Nc2XpeSNpGytlXHiswBRg0Uh3 LqyjR0+tPsxf9HGRCedSriSLznMDBw078GtneR8fvV1+DxDrqhdy/l/wYEF5ctZS IWGCHvzEv7AsPoQbWlqOWOw2swchpZ6wC85J+6p0QnbgunRd8AY3LAoVGqw+8kkW 5Xj8q1ZqNgqX9j7dbV/Quxe31v2SrEMUD/xtsOijWas+8VCJfOAGsg== -----END CERTIFICATE-----Generated at Sun Jan 4 10:07:11 2026 by rpki-client