This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer (raw, json) Hash identifier: JZUrubiahPeVv5Zg77vvSaIBhNGaPHMF7WrV1oTHpRE= Subject key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC79954E34F998B0DB76F08F2867224 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56867 AS: 201454 AS: 204511 IP: 45.140.0.0/22 IP: 185.3.4.0/22 IP: 185.73.24.0/22 IP: 185.112.24.0/22 IP: 185.197.116.0/22 IP: 188.94.216.0/21 IP: 193.32.40.0/24 IP: 193.32.102.0/24 IP: 193.32.110.0/24 IP: 193.34.194.0/24 IP: 195.26.0.0/23 IP: 2a01:6f80::/32 IP: 2a02:c340::/29 IP: 2a05:3f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:99:54:e3:4f:99:8b:0d:b7:6f:08:f2:86:72:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:ea:a7:f7:27:59:6c:e5:6f:e2:37:a1:31: da:58:e8:ef:42:36:6a:7e:4b:68:de:c5:fe:47:0e: b8:89:2e:bb:4f:93:3e:36:f5:41:9e:9e:e0:68:d2: 8b:5b:10:d9:e4:9d:41:c7:25:16:19:c2:34:1d:4a: 11:93:69:2d:ee:6c:69:17:fe:fa:67:ea:a8:cf:6f: 5a:c9:46:5c:49:de:d6:86:fc:79:c8:78:2c:eb:a9: 9e:c1:0d:16:a4:a9:ed:a5:5e:96:12:fb:95:c0:9a: 50:7a:3d:b5:ad:28:2e:56:2c:11:04:87:7c:49:f9: ee:dc:b3:c0:4a:0d:1d:79:23:1b:80:4e:0a:ed:ba: d1:b7:b2:6d:2e:f3:a3:9c:6e:14:4a:07:c2:23:11: 36:71:9b:0a:a7:49:a3:64:59:bf:6e:1b:01:9f:fe: 3b:44:d0:bb:14:fc:c0:ed:39:1a:07:e7:a5:00:b9: fc:cb:c5:5d:fd:04:b4:10:a9:3c:41:d9:46:da:e4: 4d:41:b6:be:89:13:99:01:aa:5b:c1:d1:ac:32:05: 4f:13:25:e1:80:b0:1a:5b:cb:5e:70:bb:90:e7:54: 1f:dd:cc:36:8e:3b:3e:a6:63:d5:19:48:43:23:80: 42:9e:12:f9:be:a4:58:72:68:f5:35:9c:ec:62:6f: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.0.0/22 185.3.4.0/22 185.73.24.0/22 185.112.24.0/22 185.197.116.0/22 188.94.216.0/21 193.32.40.0/24 193.32.102.0/24 193.32.110.0/24 193.34.194.0/24 195.26.0.0/23 IPv6: 2a01:6f80::/32 2a02:c340::/29 2a05:3f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56867 201454 204511 Signature Algorithm: sha256WithRSAEncryption 00:ac:47:de:cc:39:f9:2f:5d:b2:74:fd:1d:c3:d3:b8:86:52: 7f:fb:7f:da:47:bd:a9:a8:37:03:a0:7b:f8:7f:f0:d7:83:02: 45:5c:25:80:16:89:2c:6f:fd:51:9c:75:83:7f:93:94:b1:c1: df:e8:0a:29:8e:1f:74:70:af:1c:45:7f:7a:99:2f:93:73:48: 27:af:d3:90:43:2b:fb:d8:06:0d:11:1e:e7:b2:b5:20:97:04: 08:f9:7f:37:7e:c5:62:94:21:3d:8e:cd:17:55:da:19:fa:88: f0:51:20:eb:cd:e6:a0:98:ca:37:9c:c1:3e:37:84:af:37:be: 53:7e:40:a0:4e:49:41:59:d0:1a:a9:09:e0:59:40:3b:1f:11: f0:92:b2:45:21:d3:ec:fb:6c:85:bf:d0:31:70:e5:4c:e7:16: 16:a3:27:28:8d:29:ba:8d:c1:2a:13:de:cc:b4:c7:ec:9a:23: 84:4b:30:52:1c:8e:7a:f3:16:7c:1f:ab:2e:48:05:c0:2e:df: d4:28:23:ed:0c:fa:8f:fd:64:29:20:54:68:ee:7b:cd:cb:f1: d5:23:a9:0a:c9:a0:90:7c:e9:29:89:08:fb:cc:45:78:51:f3: ca:44:e1:ec:34:11:d4:5e:30:ff:b7:be:b8:d3:ec:9c:fd:54: 00:fb:22:58 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZt6x5lU40+Ziw23bwjyhnIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTljNWU1NmFhY2QwMWZmYjI4MjVhOTMxZWQ1ZWRlNDFjM2Y5MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RLqp/cnWWzlb+I3oTHaWOjvQjZq fkto3sX+Rw64iS67T5M+NvVBnp7gaNKLWxDZ5J1BxyUWGcI0HUoRk2kt7mxpF/76 Z+qoz29ayUZcSd7Whvx5yHgs66mewQ0WpKntpV6WEvuVwJpQej21rSguViwRBId8 Sfnu3LPASg0deSMbgE4K7brRt7JtLvOjnG4USgfCIxE2cZsKp0mjZFm/bhsBn/47 RNC7FPzA7TkaB+elALn8y8Vd/QS0EKk8QdlG2uRNQba+iROZAapbwdGsMgVPEyXh gLAaW8tecLuQ51Qf3cw2jjs+pmPVGUhDI4BCnhL5vqRYcmj1NZzsYm/enQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFEqcXlaqzQH/soJakx7V7eQcP5LmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2MwMTBk Yy0wOTEwLTQzNDEtOGIzMy0yZTY5NGIzMzk5MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzAxMGRj LTA5MTAtNDM0MS04YjMzLTJlNjk0YjMzOTkzMy8xL1NweGVWcXJOQWYteWdscVRI dFh0NUJ3X2t1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBIBAIAATBCAwQCLYwAAwQCuQMEAwQCuUkYAwQCuXAYAwQCucV0 AwQDvF7YAwQAwSAoAwQAwSBmAwQAwSBuAwQAwSLCAwQBwxoAMBsEAgACMBUDBQAq AW+AAwUDKgLDQAMFAyoFPwAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAN4jAgMD Eu4CAwMe3zANBgkqhkiG9w0BAQsFAAOCAQEAAKxH3sw5+S9dsnT9HcPTuIZSf/t/ 2ke9qag3A6B7+H/w14MCRVwlgBaJLG/9UZx1g3+TlLHB3+gKKY4fdHCvHEV/epkv k3NIJ6/TkEMr+9gGDREe57K1IJcECPl/N37FYpQhPY7NF1XaGfqI8FEg683moJjK N5zBPjeErze+U35AoE5JQVnQGqkJ4FlAOx8R8JKyRSHT7Ptshb/QMXDlTOcWFqMn KI0puo3BKhPezLTH7JojhEswUhyOevMWfB+rLkgFwC7f1Cgj7Qz6j/1kKSBUaO57 zcvx1SOpCsmgkHzpKYkI+8xFeFHzykTh7DQR1F4w/7e+uNPsnP1UAPsiWA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:05 2026 by rpki-client