This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer (raw, json) Hash identifier: gm0hdo7oKZWRE0jS7sk0FhEIoWhaf0Udo860Hdc5EuA= Subject key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1261C36A008B36F1EFC3039FF2B943 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.220.123.0/24 IP: 185.245.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:61:c3:6a:00:8b:36:f1:ef:c3:03:9f:f2:b9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23f5c2585382084792f13ad197205efdd2752df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:85:6d:83:28:ec:99:f1:ba:5c:cd:25:be: 17:da:be:0b:3b:0d:29:5c:34:70:61:c6:71:aa:41: 91:ea:34:3a:b1:72:6f:9c:89:28:20:d8:ef:de:4d: 99:fc:6e:f1:70:a8:5f:ff:4e:2d:70:db:e2:90:23: f9:e2:0a:40:42:6d:95:04:4c:55:5b:5a:cf:73:d2: 03:6c:2a:04:34:1a:2f:0d:3f:90:4e:20:8b:cb:5e: 7d:c1:cf:f4:8a:11:c6:f4:a9:ba:70:d1:6c:c0:d5: 9d:79:88:74:90:ee:a6:68:e0:bd:26:15:71:87:46: d7:ef:23:50:b1:f7:73:a2:77:48:20:ca:18:3b:a6: 59:4c:09:14:9c:a2:37:d7:6a:eb:fd:e3:6d:0f:2d: c1:3b:33:fb:c5:ed:f5:01:2d:d3:29:16:fd:11:01: 4d:6b:10:d1:08:be:a4:1d:70:94:58:4e:20:21:b2: 1c:9c:56:2c:c3:70:c6:5d:63:01:e0:24:09:4f:9d: 5a:b2:5e:c8:d9:b3:d0:7a:0c:e6:85:d5:8d:04:e0: a6:35:43:a9:43:43:bc:11:d6:89:25:15:65:25:21: fd:ae:52:8a:42:4f:f4:e4:54:eb:bb:a5:70:f2:a5: 54:2e:56:e4:a5:39:3a:eb:9f:23:10:a6:5e:d7:0a: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.123.0/24 185.245.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:f5:cf:45:0d:88:79:78:fa:b5:d5:95:7a:82:a7:3e:8b:b8: 9e:f8:56:7c:09:99:c3:79:d2:ad:92:c9:f4:6f:4f:30:45:9c: 16:de:2f:18:fd:f5:fe:e9:da:34:c7:1b:16:50:12:6b:93:e5: 18:48:32:04:85:01:cb:14:4a:b7:1b:3d:9b:17:1a:77:2e:1a: 88:31:a6:ef:f2:05:91:48:3c:81:4a:00:77:34:3b:d3:60:45: e2:9c:7b:b4:b0:a1:63:1d:5c:80:fb:fe:03:73:2c:19:73:38: 81:d7:aa:ee:75:ea:80:09:ce:92:ae:f0:df:bf:ed:64:76:c3: 26:2e:6c:4f:c9:71:2c:c7:fa:93:12:ac:b8:b5:de:46:77:42: a7:cd:be:39:bf:2a:34:27:d7:28:8b:3c:72:a1:b4:e7:ca:5b: aa:34:42:06:fc:2e:82:26:87:cd:99:fa:ac:5d:b7:ce:b5:e3: 83:a1:be:61:14:5d:05:20:7b:b5:c7:4b:b4:f2:e1:ea:e0:75: 4f:51:8e:94:fa:49:ca:8d:d8:e1:27:ce:19:e2:f5:e2:5e:a7: ab:09:89:01:53:38:f3:73:e0:fe:95:e8:d1:cd:f2:0f:6f:42: cf:32:82:d9:62:31:c8:cc:46:04:74:7d:1b:f1:24:60:bf:c2: 32:ad:79:6f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8EmHDagCLNvHvwwOf8rlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2Y1YzI1ODUzODIwODQ3OTJmMTNhZDE5NzIwNWVmZGQyNzUyZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJKFbYMo7JnxulzNJb4X2r4LOw0p XDRwYcZxqkGR6jQ6sXJvnIkoINjv3k2Z/G7xcKhf/04tcNvikCP54gpAQm2VBExV W1rPc9IDbCoENBovDT+QTiCLy159wc/0ihHG9Km6cNFswNWdeYh0kO6maOC9JhVx h0bX7yNQsfdzondIIMoYO6ZZTAkUnKI312rr/eNtDy3BOzP7xe31AS3TKRb9EQFN axDRCL6kHXCUWE4gIbIcnFYsw3DGXWMB4CQJT51asl7I2bPQegzmhdWNBOCmNUOp Q0O8EdaJJRVlJSH9rlKKQk/05FTru6Vw8qVULlbkpTk6658jEKZe1wod0QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFCP1wlhTgghHkvE60ZcgXv3SdS3yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2Y4M2Qw OS0zNDEzLTQ2NTEtOTZjZS04ZmI1MjQ0YmMyNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvZjgzZDA5 LTM0MTMtNDY1MS05NmNlLThmYjUyNDRiYzI1Ni8xL0lfWENXRk9DQ0VlUzhUclJs eUJlX2RKMUxmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9x7AwQAufUVMA0GCSqGSIb3DQEBCwUAA4IB AQB99c9FDYh5ePq11ZV6gqc+i7ie+FZ8CZnDedKtksn0b08wRZwW3i8Y/fX+6do0 xxsWUBJrk+UYSDIEhQHLFEq3Gz2bFxp3LhqIMabv8gWRSDyBSgB3NDvTYEXinHu0 sKFjHVyA+/4DcywZcziB16rudeqACc6SrvDfv+1kdsMmLmxPyXEsx/qTEqy4td5G d0Knzb45vyo0J9coizxyobTnyluqNEIG/C6CJofNmfqsXbfOteODob5hFF0FIHu1 x0u08uHq4HVPUY6U+knKjdjhJ84Z4vXiXqerCYkBUzjzc+D+lejRzfIPb0LPMoLZ YjHIzEYEdH0b8SRgv8IyrXlv -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:06 2026 by rpki-client