This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.cer (raw, json) Hash identifier: FSBNFxIg7X7sa9rJ3QNyoX0JTeyym+o3wtzOem5NswI= Subject key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AFD71795A098F67E31F28007D4C33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.100.152.0/21 IP: 185.195.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fd:71:79:5a:09:8f:67:e3:1f:28:00:7d:4c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:77:75:15:39:c5:39:2c:bf:54:c9:99:13: 5b:2f:ff:a3:92:11:32:cb:fe:e8:90:31:8b:1d:12: 69:78:8d:cd:3f:63:8d:92:f0:33:68:0a:f1:16:ec: 35:d8:8d:cd:45:61:a4:21:b0:28:7c:82:2b:9b:23: ee:5a:01:2a:47:1d:a5:1d:44:a0:6f:bd:7b:55:e9: 02:a8:bc:8a:6c:27:54:c5:34:76:a7:ba:6e:a6:7d: d3:b3:86:49:90:38:0c:fb:57:9e:f7:74:5c:81:4d: cb:78:a0:e0:2d:5b:d9:d3:5c:69:8c:2d:49:23:38: 4c:e9:0a:7b:de:26:4c:91:78:63:69:bc:6b:05:66: 03:c7:eb:cd:97:2c:7e:dd:d4:85:ab:3b:d4:74:07: 6d:52:09:e5:29:04:e1:0e:6e:04:05:df:f9:a9:5e: 88:f3:e0:0b:71:0a:c0:59:4e:3c:5e:1b:4e:c0:94: 37:6e:b9:8b:66:f1:49:42:b5:de:5b:53:ac:7b:83: 1d:7f:23:2d:75:84:53:43:6d:e4:fd:80:90:1e:4f: ee:d9:0b:50:c8:9e:d6:c0:e9:98:11:d9:a6:9a:6d: 1b:19:bc:56:ec:b6:4e:99:b3:72:b4:3d:33:5d:e4: 24:91:85:04:14:99:87:8f:90:78:ff:ca:60:7f:34: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.152.0/21 185.195.12.0/22 Signature Algorithm: sha256WithRSAEncryption 73:87:54:bc:b9:5a:fa:1f:05:cc:40:6d:57:75:35:0e:70:15: de:ea:99:38:b1:c2:6b:b4:62:a2:10:03:05:7b:1a:ba:08:4c: ed:6a:26:3a:93:51:e0:8b:21:e2:30:97:6d:91:21:5a:d1:84: 8f:c6:9f:81:07:16:5e:91:96:d5:9a:16:8c:ce:6e:2a:14:3b: 75:29:16:4e:92:15:81:d7:d3:06:24:17:aa:78:1b:05:3e:be: 6d:09:9a:e3:c3:64:6c:a8:90:0c:7e:71:4a:fc:44:41:32:74: 3a:42:cf:72:85:a6:cb:3c:4f:21:b3:99:82:de:3d:d4:1a:86: a0:1b:eb:7d:c5:a8:9e:b6:f3:ee:f8:b0:5c:c3:8e:82:58:8c: 9c:8c:d6:64:c2:67:b1:81:85:b9:21:2b:79:73:8f:65:ed:69: ea:39:21:bc:66:7b:af:36:a9:69:79:56:bf:db:eb:a7:38:fe: d5:fd:ca:77:52:5f:5c:df:e2:16:36:bc:b9:27:55:3a:e1:1e: d0:c7:28:3e:06:cc:40:34:f6:3c:cd:5d:e1:83:77:71:de:1d: 77:d5:10:68:47:1b:d1:75:69:96:e7:e5:d5:17:f7:eb:5a:24: 8f:c6:9c:82:f0:69:8b:04:79:7a:58:e9:f9:70:c8:e0:33:6d: d9:d7:ef:06 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6Wv1xeVoJj2fjHygAfUwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTdhZTlkYzlmNDNhMjY5ZWIwYWNjZjM0ODhlODYxZjRmZjBlODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5N3dRU5xTksv1TJmRNbL/+jkhEy y/7okDGLHRJpeI3NP2ONkvAzaArxFuw12I3NRWGkIbAofIIrmyPuWgEqRx2lHUSg b717VekCqLyKbCdUxTR2p7pupn3Ts4ZJkDgM+1ee93RcgU3LeKDgLVvZ01xpjC1J IzhM6Qp73iZMkXhjabxrBWYDx+vNlyx+3dSFqzvUdAdtUgnlKQThDm4EBd/5qV6I 8+ALcQrAWU48XhtOwJQ3brmLZvFJQrXeW1Ose4MdfyMtdYRTQ23k/YCQHk/u2QtQ yJ7WwOmYEdmmmm0bGbxW7LZOmbNytD0zXeQkkYUEFJmHj5B4/8pgfzR+lwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFNF66dyfQ6Jp6wrM80iOhh9P8OieMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzNjOGRj ZS04MzU2LTQ0MjItYmU4NS1mZGE0ZThhNWI0NmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvM2M4ZGNl LTgzNTYtNDQyMi1iZTg1LWZkYTRlOGE1YjQ2ZS8xLzBYcnAzSjlEb21uckNzenpT STZHSDBfdzZKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDBWSYAwQCucMMMA0GCSqGSIb3DQEBCwUAA4IB AQBzh1S8uVr6HwXMQG1XdTUOcBXe6pk4scJrtGKiEAMFexq6CEztaiY6k1HgiyHi MJdtkSFa0YSPxp+BBxZekZbVmhaMzm4qFDt1KRZOkhWB19MGJBeqeBsFPr5tCZrj w2RsqJAMfnFK/ERBMnQ6Qs9yhabLPE8hs5mC3j3UGoagG+t9xaietvPu+LBcw46C WIycjNZkwmexgYW5ISt5c49l7WnqOSG8ZnuvNqlpeVa/2+unOP7V/cp3Ul9c3+IW Nry5J1U64R7Qxyg+BsxANPY8zV3hg3dx3h131RBoRxvRdWmW5+XVF/frWiSPxpyC 8GmLBHl6WOn5cMjgM23Z1+8G -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:13 2026 by rpki-client