This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer (raw, json) Hash identifier: PJlxG6avln6lMNrcm142Rb1rnb0fbBxTA9ytoYQvcIo= Subject key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101B3ECBDDFF465280038ECA152D39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197617 IP: 31.24.64.0/21 IP: 185.61.108.0/22 IP: 2a00:bd60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1b:3e:cb:dd:ff:46:52:80:03:8e:ca:15:2d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c722ad43471b606bcc853bba11b8ed663c151882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:0f:38:98:1c:a2:0a:5f:8e:9d:16:bc:6d: 72:21:05:bb:4d:1c:4a:69:d8:7a:b6:3f:76:b3:d0: 20:7d:84:64:85:cb:11:46:62:07:96:5c:64:17:87: 2a:64:fd:06:70:0e:e2:f0:52:a2:74:fe:ff:4a:66: 39:82:5b:59:cd:e2:85:9a:f5:d9:8c:a6:46:6c:2e: 1a:3a:b1:29:53:4f:05:7d:b4:82:f8:44:9a:c3:1c: 25:37:6e:12:22:ad:2e:3b:49:10:3f:73:1b:d8:04: a5:63:74:bb:f1:a4:fa:b8:d7:26:a4:90:cd:d0:4f: 0f:ac:d1:43:1a:96:b3:ee:df:ad:04:83:94:7b:fb: 76:e9:f7:f3:9e:98:49:62:b0:9e:11:30:62:99:42: 4b:a7:0a:ed:b0:9e:5a:6e:f8:7a:7e:97:63:6a:d3: f0:26:57:c2:6e:62:f0:6f:40:1d:58:38:18:19:cb: 12:8c:30:3d:59:45:43:10:15:a1:12:d5:66:49:5a: 95:6a:ad:1b:e8:ee:11:36:31:2a:cf:7b:5c:f4:13: 2e:08:bf:19:b2:1a:27:df:59:cf:ac:29:0d:c3:b6: 78:71:db:cf:61:76:fb:a4:3d:1b:a8:63:25:15:1f: fa:d1:e8:d4:c1:be:e8:94:44:25:96:bd:6b:fa:2d: b6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.64.0/21 185.61.108.0/22 IPv6: 2a00:bd60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197617 Signature Algorithm: sha256WithRSAEncryption aa:02:2f:c1:9b:6b:79:bc:ac:5c:39:14:cb:fc:76:4b:5d:ca: ca:ec:d4:25:1f:ef:22:f1:92:75:ec:22:5a:3c:12:1b:18:0a: 60:4e:3d:be:fc:a8:92:27:5a:26:59:0f:6f:c7:03:d2:70:67: 3d:b5:30:63:d8:28:64:1e:e2:9f:3e:1c:25:ad:e1:64:4d:02: 52:c8:d6:d8:23:55:b4:99:65:39:4d:9d:f6:22:d5:9f:46:2d: 63:ba:18:aa:1e:1f:2f:be:e9:44:f9:ad:6c:0c:ca:1f:97:19: 36:ad:1b:78:f6:6e:ef:6d:e3:82:87:91:b7:ef:da:7c:2f:7f: 3c:5b:17:63:aa:2c:11:ff:76:a4:fa:b0:11:b0:d4:70:ea:bb: ed:29:9c:66:72:a1:94:52:b5:13:90:f0:96:ba:59:5d:22:19: 99:c6:af:80:6f:09:ed:38:ca:c0:93:71:fb:55:35:87:7a:df: a1:6d:61:cc:7a:d6:d5:01:d2:59:be:f1:66:76:d5:90:da:06: 82:12:86:66:77:07:6a:c6:e7:2b:2d:ee:a4:5c:a8:4c:85:4d: 3b:78:f7:47:32:5f:71:a4:30:ce:1c:d5:69:4e:64:03:d9:0b: 6d:a0:0e:6f:5f:b3:4a:c8:d6:60:9d:96:3b:c6:63:77:be:17: 28:02:67:dd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EBs+y93/RlKAA47KFS05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzIyYWQ0MzQ3MWI2MDZiY2M4NTNiYmExMWI4ZWQ2NjNjMTUxODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bcPOJgcogpfjp0WvG1yIQW7TRxK adh6tj92s9AgfYRkhcsRRmIHllxkF4cqZP0GcA7i8FKidP7/SmY5gltZzeKFmvXZ jKZGbC4aOrEpU08FfbSC+ESawxwlN24SIq0uO0kQP3Mb2ASlY3S78aT6uNcmpJDN 0E8PrNFDGpaz7t+tBIOUe/t26ffznphJYrCeETBimUJLpwrtsJ5abvh6fpdjatPw JlfCbmLwb0AdWDgYGcsSjDA9WUVDEBWhEtVmSVqVaq0b6O4RNjEqz3tc9BMuCL8Z shon31nPrCkNw7Z4cdvPYXb7pD0bqGMlFR/60ejUwb7olEQllr1r+i22JQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMcirUNHG2BrzIU7uhG47WY8FRiCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2QzYTBi MS0wOGEwLTQ0ZGQtODc3NC0wNjZmZmVmZDBjYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZDNhMGIx LTA4YTAtNDRkZC04Nzc0LTA2NmZmZWZkMGNhYi8xL3h5S3RRMGNiWUd2TWhUdTZF Ymp0Wmp3VkdJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDHxhAAwQCuT1sMA0EAgACMAcDBQAqAL1gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMD8TANBgkqhkiG9w0BAQsFAAOCAQEAqgIv wZtrebysXDkUy/x2S13KyuzUJR/vIvGSdewiWjwSGxgKYE49vvyokidaJlkPb8cD 0nBnPbUwY9goZB7inz4cJa3hZE0CUsjW2CNVtJllOU2d9iLVn0YtY7oYqh4fL77p RPmtbAzKH5cZNq0bePZu723jgoeRt+/afC9/PFsXY6osEf92pPqwEbDUcOq77Smc ZnKhlFK1E5DwlrpZXSIZmcavgG8J7TjKwJNx+1U1h3rfoW1hzHrW1QHSWb7xZnbV kNoGghKGZncHasbnKy3upFyoTIVNO3j3RzJfcaQwzhzVaU5kA9kLbaAOb1+zSsjW YJ2WO8Zjd74XKAJn3Q== -----END CERTIFICATE-----Generated at Mon Jan 12 10:49:10 2026 by rpki-client