This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer File: X17ZkhxjvxDbCEutMy6p_5-BmeY.cer (raw, json) Hash identifier: s9g4I/RDMnIEeZU5gwdx5+q0ET8a9t8c5mZ6zDT3pKM= Subject key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB00868C073EA2133D39C89F58BDE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44529 IP: 194.26.96.0/24 IP: 2a14:4e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:00:86:8c:07:3e:a2:13:3d:39:c8:9f:58:bd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:a4:e2:ac:f5:c4:99:b7:33:fa:e3:48:84: 5a:f1:81:e1:75:17:41:2b:dd:d3:35:e3:f4:c0:e5: 8b:cd:cb:bb:17:aa:c0:d7:9a:fd:da:8e:ea:de:2e: 14:bf:f7:d5:63:84:08:1a:a1:a5:a3:a2:76:1b:47: f6:73:ec:d1:d7:6f:2b:e4:7f:4b:81:2c:4e:dc:17: 5b:a3:1f:d4:e7:4b:3b:2e:eb:84:85:16:00:b4:c1: 5a:f3:33:e2:3a:cd:50:6b:3b:d6:21:12:e5:56:d3: 1b:0b:07:c2:51:50:a4:c2:42:64:61:d2:94:38:ff: b4:b4:48:93:b6:46:b9:1b:54:dd:fb:3a:d6:0f:23: 1c:fc:47:33:0a:a2:70:23:5c:ff:b4:20:48:2f:ee: 56:71:6e:01:00:04:68:df:b0:08:ab:a0:56:f4:c8: 62:04:4e:49:9e:5c:f0:01:10:33:03:a4:b6:61:74: 77:11:6a:48:1c:e6:01:c3:90:c7:20:59:97:dc:7e: 92:63:ee:76:2e:8a:3f:1a:93:62:03:5b:70:af:36: 42:a3:b1:2a:ee:0c:c1:16:90:f0:74:57:21:1d:cc: dd:7c:38:99:7c:63:9d:a4:f2:8c:45:89:38:14:b7: 6d:49:71:33:b3:79:b2:e7:1c:96:33:ab:a6:b2:0b: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.96.0/24 IPv6: 2a14:4e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44529 Signature Algorithm: sha256WithRSAEncryption 62:c2:c6:8b:df:08:cc:c4:09:20:23:fc:c1:87:33:28:3c:0c: 4a:3c:1f:c4:91:20:28:b7:a1:4a:35:54:6a:be:98:df:14:d3: 34:4e:88:e2:53:01:13:43:cc:4d:ed:ca:04:31:7c:ee:1d:cf: 64:fd:88:bd:9c:8f:8a:7c:5e:ec:56:3d:ee:db:db:53:85:11: a6:f4:db:d8:4a:03:67:f3:8d:67:25:04:c6:9e:81:65:d8:ca: 62:89:02:84:a1:53:42:08:d0:0b:33:b1:1e:e3:b8:f9:bb:e3: 4c:89:9a:e6:39:2a:38:97:de:cd:aa:c9:c0:76:00:94:8e:93: 92:f9:0e:75:64:97:9e:17:cc:ed:a2:a5:dd:ce:dd:31:b2:b1: d0:de:ba:cd:57:4e:fe:21:61:c1:db:fa:50:e3:b1:31:30:05: 4d:6d:42:58:c0:7e:01:f0:58:5e:da:2b:ac:b7:50:c5:cf:c8: 11:19:1c:76:31:59:18:7a:62:6f:df:75:76:c5:15:6e:2b:e7: ff:24:ea:93:d3:68:8f:3e:a3:62:92:b1:4f:71:8e:5e:e4:6b: ad:84:6b:68:7b:c5:03:d4:41:70:e7:35:3c:f2:18:22:23:34: e9:e2:b4:a9:46:fe:e5:66:66:db:03:12:09:2b:e8:af:aa:8e: 8b:1e:21:f8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ywCGjAc+ohM9OcifWL3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjVlZDk5MjFjNjNiZjEwZGIwODRiYWQzMzJlYTlmZjlmODE5OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h2k4qz1xJm3M/rjSIRa8YHhdRdB K93TNeP0wOWLzcu7F6rA15r92o7q3i4Uv/fVY4QIGqGlo6J2G0f2c+zR128r5H9L gSxO3Bdbox/U50s7LuuEhRYAtMFa8zPiOs1QazvWIRLlVtMbCwfCUVCkwkJkYdKU OP+0tEiTtka5G1Td+zrWDyMc/EczCqJwI1z/tCBIL+5WcW4BAARo37AIq6BW9Mhi BE5JnlzwARAzA6S2YXR3EWpIHOYBw5DHIFmX3H6SY+52Loo/GpNiA1twrzZCo7Eq 7gzBFpDwdFchHczdfDiZfGOdpPKMRYk4FLdtSXEzs3my5xyWM6umsgvaoQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF9e2ZIcY78Q2whLrTMuqf+fgZnmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2RmMGI3 YS02OGIzLTQ3ZDUtYjY3MS1kZjI3ZjEwYzcwOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZGYwYjdh LTY4YjMtNDdkNS1iNjcxLWRmMjdmMTBjNzA5Ny8xL1gxN1praHhqdnhEYkNFdXRN eTZwXzUtQm1lWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwhpgMA0EAgACMAcDBQMqFE6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCt8TANBgkqhkiG9w0BAQsFAAOCAQEAYsLGi98IzMQJ ICP8wYczKDwMSjwfxJEgKLehSjVUar6Y3xTTNE6I4lMBE0PMTe3KBDF87h3PZP2I vZyPinxe7FY97tvbU4URpvTb2EoDZ/ONZyUExp6BZdjKYokChKFTQgjQCzOxHuO4 +bvjTIma5jkqOJfezarJwHYAlI6TkvkOdWSXnhfM7aKl3c7dMbKx0N66zVdO/iFh wdv6UOOxMTAFTW1CWMB+AfBYXtorrLdQxc/IERkcdjFZGHpib991dsUVbivn/yTq k9Nojz6jYpKxT3GOXuRrrYRraHvFA9RBcOc1PPIYIiM06eK0qUb+5WZm2wMSCSvo r6qOix4h+A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:16 2026 by rpki-client