This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.cer (raw, json) Hash identifier: izh1ZSkm/VC2772wtRinuQkzoRS/1Rvq4PyQASilo/Y= Subject key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834EACCF7E7363A5ECCB92AEB32E7AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5420 IP: 137.33.0.0/16 IP: 192.40.72.0/21 IP: 2001:67c:21a4::/48 IP: 2a06:f040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:cc:f7:e7:36:3a:5e:cc:b9:2a:eb:32:e7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:87:b6:6a:98:28:6b:c8:e5:4a:93:f8:98: bd:a9:93:4c:a8:ac:c9:cc:33:f3:84:52:0c:00:8c: 1f:b8:8c:29:a7:55:96:eb:51:d3:29:59:3e:fd:9a: dd:6f:c1:0a:7c:f2:f7:c9:81:3a:d2:e3:d4:44:39: 52:17:a9:fa:3d:99:ef:70:20:0b:43:24:a3:07:db: fb:b0:b3:72:10:5a:0d:c7:ac:1c:cc:38:27:57:a1: 47:d9:1f:b0:06:85:b3:b8:ea:cf:9f:6e:80:d1:17: 04:41:ee:99:30:fd:96:d6:fe:bd:a5:17:f7:cb:9c: 27:bc:41:94:4e:2d:27:9e:fd:1e:41:f0:1e:d7:17: 5f:51:89:2e:d8:e4:8d:ab:aa:1e:cf:39:86:20:db: 47:68:5d:be:bc:0d:f2:90:50:65:9b:34:93:1b:94: 7f:ba:43:39:60:e1:4f:cd:18:71:93:93:80:ed:ac: 36:e2:0c:8b:83:3e:eb:de:b0:d0:cf:53:73:6f:38: ea:cb:94:1e:18:5d:ea:4d:62:eb:97:91:98:bb:0b: cc:64:b4:ba:cd:34:64:a5:1c:c2:15:6f:92:ae:ba: df:0d:d8:f5:d1:59:da:81:ca:5f:f8:11:0d:26:18: 3a:bc:54:c8:42:4b:94:7c:cd:a5:2c:52:75:25:84: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.33.0.0/16 192.40.72.0/21 IPv6: 2001:67c:21a4::/48 2a06:f040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5420 Signature Algorithm: sha256WithRSAEncryption 29:43:58:de:b1:76:48:aa:e1:da:4d:ae:b8:7a:67:91:20:17: 72:6a:e8:ab:3e:22:c5:7b:ed:9b:15:89:54:bf:5b:2d:c3:bd: 72:3b:00:0b:d0:69:c9:3b:54:96:42:50:44:67:e7:d7:2d:68: 58:29:2d:d6:93:67:0a:74:d7:14:f8:ef:f7:a9:3a:86:32:2c: 7a:50:cd:ad:43:43:06:55:1f:b1:94:76:ec:73:b4:67:b9:ea: b4:a5:b0:30:c2:1a:b7:72:14:ec:b1:47:2b:3e:85:9f:1a:9c: 16:c3:3f:a8:42:0d:be:5b:23:c2:fa:83:b3:71:e4:72:02:f2: 55:08:03:30:8f:ff:03:aa:8f:9a:bd:2b:8d:91:64:92:11:f5: e7:9e:13:79:58:d3:27:61:5b:04:2a:cf:71:ca:b2:40:12:8c: 87:80:ae:a3:9e:08:ed:b0:52:84:69:d8:9f:fd:2c:0b:c4:6c: 4f:25:99:a1:85:1d:b3:6e:8f:24:51:52:8f:0f:a2:39:f6:1a: 5c:51:1f:de:8f:87:ef:32:03:31:61:f6:47:22:19:75:03:c7: c5:09:16:88:e3:3a:75:fe:8a:e9:28:22:5c:ef:be:b7:f2:03: ec:f0:57:7e:ad:38:ee:8f:72:5c:21:a6:50:35:e3:50:5c:7e: f0:e5:ea:b5 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt4NOrM9+c2Ol7MuSrrMueqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjFhODEwZTNhYjE5NjRiNDRlY2IzNzc4MzQwYjI2NmRiZGExMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K+HtmqYKGvI5UqT+Ji9qZNMqKzJ zDPzhFIMAIwfuIwpp1WW61HTKVk+/Zrdb8EKfPL3yYE60uPURDlSF6n6PZnvcCAL QySjB9v7sLNyEFoNx6wczDgnV6FH2R+wBoWzuOrPn26A0RcEQe6ZMP2W1v69pRf3 y5wnvEGUTi0nnv0eQfAe1xdfUYku2OSNq6oezzmGINtHaF2+vA3ykFBlmzSTG5R/ ukM5YOFPzRhxk5OA7aw24gyLgz7r3rDQz1Nzbzjqy5QeGF3qTWLrl5GYuwvMZLS6 zTRkpRzCFW+SrrrfDdj10Vnagcpf+BENJhg6vFTIQkuUfM2lLFJ1JYQQZQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFPsagQ46sZZLROyzd4NAsmbb2hEmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzlkNjA2 ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4OTMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZl LTA4YTYtNGY0YS1iOTgwLWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4z ZzBDeVp0dmFFU1kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEF BQcBBwEB/wQtMCswEQQCAAEwCwMDAIkhAwQDwChIMBYEAgACMBADBwAgAQZ8IaQD BQMqBvBAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhUsMA0GCSqGSIb3DQEBCwUA A4IBAQApQ1jesXZIquHaTa64emeRIBdyauirPiLFe+2bFYlUv1stw71yOwAL0GnJ O1SWQlBEZ+fXLWhYKS3Wk2cKdNcU+O/3qTqGMix6UM2tQ0MGVR+xlHbsc7Rnueq0 pbAwwhq3chTssUcrPoWfGpwWwz+oQg2+WyPC+oOzceRyAvJVCAMwj/8Dqo+avSuN kWSSEfXnnhN5WNMnYVsEKs9xyrJAEoyHgK6jngjtsFKEadif/SwLxGxPJZmhhR2z bo8kUVKPD6I59hpcUR/ej4fvMgMxYfZHIhl1A8fFCRaI4zp1/orpKCJc77638gPs 8Fd+rTjuj3JcIaZQNeNQXH7w5eq1 -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:09 2026 by rpki-client