This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.cer (raw, json) Hash identifier: rrehxV7Pp/DIzB9oG0nvLyjpuRt3qIdnDjAgReFX7jw= Subject key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F9D638AFCF7E66804C05950C6010C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.206.3.0/24 IP: 2a0f:f4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:9d:63:8a:fc:f7:e6:68:04:c0:59:50:c6:01:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:29:a8:6b:9c:37:72:bd:59:88:47:aa:76: a2:02:c3:8f:15:9c:d6:9b:53:08:27:54:62:ae:bb: 87:4f:82:a5:da:15:d4:e8:d4:a7:ae:f8:75:00:48: f3:dc:75:f4:36:f9:a6:a0:33:06:8b:62:ee:51:06: 23:75:94:16:87:9e:9b:46:29:67:9e:e4:3d:96:50: 76:84:0b:0c:d3:b3:af:28:57:d7:e7:7e:54:c2:92: d6:f3:c2:2e:2a:3b:95:36:96:3c:2c:b2:62:f8:8a: 2b:cc:4e:f7:92:61:09:e0:4b:94:41:b7:9d:c1:8d: 02:0f:75:b8:3c:1e:8d:c1:0a:60:38:54:3c:2d:6c: 2b:67:dd:3e:2c:85:cf:1e:7f:e4:d9:30:97:03:73: fb:dc:f3:7f:dc:fc:99:bb:90:bb:ad:b6:f9:1e:6c: 1c:80:5a:ec:f1:27:90:a0:ae:5f:7c:39:18:7c:9a: 94:b7:94:cc:fb:d5:72:cc:86:52:8f:5e:a5:e2:03: 5a:55:b0:7a:c7:6d:54:88:0d:77:1f:f1:3b:58:58: 1e:f0:87:86:40:7d:b6:d9:f2:29:9e:09:66:ce:85: 72:dc:07:33:54:5d:f3:9d:ae:75:fd:fd:6d:b8:0b: c9:15:7e:8e:a7:b3:b4:47:1f:bb:f9:80:54:4c:df: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.3.0/24 IPv6: 2a0f:f4c0::/29 Signature Algorithm: sha256WithRSAEncryption 9c:4c:c9:63:03:34:a5:59:d0:62:fe:ac:0d:e0:c4:48:41:61: 98:54:c9:52:89:0e:9d:e1:fa:3f:c9:96:67:5b:93:9f:91:e5: 43:ee:0e:81:81:2a:5b:b4:6a:07:ab:02:8f:a8:37:9b:ee:cc: 64:06:0d:51:bd:53:f4:5c:43:88:6e:13:22:1f:ee:5c:41:f1: 83:c1:fb:61:c2:70:00:2b:2e:fa:88:c7:b1:e6:02:f0:11:3d: 87:2d:a0:85:32:24:de:3c:cd:4d:d2:59:7d:13:bf:b8:71:ce: bc:2c:87:63:56:e4:90:8a:a4:d9:65:61:6d:d2:61:f2:70:e7: d5:2b:4e:a9:2d:ff:a0:c6:bf:87:d0:9a:1b:dc:01:f2:26:cc: 7a:06:55:c0:39:c4:d5:23:bc:10:50:69:2f:6d:1f:86:da:5c: 55:e9:87:d6:1c:6b:63:3a:b8:12:33:5d:90:84:7b:c2:78:9f: 06:cd:13:61:20:ac:ed:86:29:66:3e:68:44:09:69:bc:60:85: 9d:9c:25:91:88:d1:d9:17:d0:48:ac:91:14:dc:67:73:9c:cb: db:94:56:ef:2f:2a:0b:3e:c6:43:cc:9f:03:fa:77:b7:16:13: d6:2d:dc:e1:e0:0e:20:69:b3:af:d2:f5:5b:b1:ec:84:64:f0: 08:e7:37:a6 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8f51jivz35mgEwFlQxgEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTdjN2RiMDRlNzhjMjIxZjNkZjJhMmFmMDgyYjUxOGQ5NjJhOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmkpqGucN3K9WYhHqnaiAsOPFZzW m1MIJ1RirruHT4Kl2hXU6NSnrvh1AEjz3HX0NvmmoDMGi2LuUQYjdZQWh56bRiln nuQ9llB2hAsM07OvKFfX535UwpLW88IuKjuVNpY8LLJi+IorzE73kmEJ4EuUQbed wY0CD3W4PB6NwQpgOFQ8LWwrZ90+LIXPHn/k2TCXA3P73PN/3PyZu5C7rbb5Hmwc gFrs8SeQoK5ffDkYfJqUt5TM+9VyzIZSj16l4gNaVbB6x21UiA13H/E7WFge8IeG QH222fIpnglmzoVy3AczVF3zna51/f1tuAvJFX6Op7O0Rx+7+YBUTN/c2QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNV8fbBOeMIh898qKvCCtRjZYqjwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzE4ZDA1 OS0zY2IyLTQ2YmYtYTU4OC1mZTk1YTlhZjNhZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvMThkMDU5 LTNjYjItNDZiZi1hNTg4LWZlOTVhOWFmM2FkYy8xLzFYeDlzRTU0d2lIejN5b3E4 SUsxR05saXFQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW84DMA0EAgACMAcDBQMqD/TAMA0GCSqGSIb3 DQEBCwUAA4IBAQCcTMljAzSlWdBi/qwN4MRIQWGYVMlSiQ6d4fo/yZZnW5OfkeVD 7g6BgSpbtGoHqwKPqDeb7sxkBg1RvVP0XEOIbhMiH+5cQfGDwfthwnAAKy76iMex 5gLwET2HLaCFMiTePM1N0ll9E7+4cc68LIdjVuSQiqTZZWFt0mHycOfVK06pLf+g xr+H0Job3AHyJsx6BlXAOcTVI7wQUGkvbR+G2lxV6YfWHGtjOrgSM12QhHvCeJ8G zRNhIKzthilmPmhECWm8YIWdnCWRiNHZF9BIrJEU3GdznMvblFbvLyoLPsZDzJ8D +ne3FhPWLdzh4A4gabOv0vVbseyEZPAI5zem -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:55 2026 by rpki-client