This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer File: X1B54OWHxH_xTSAhEvTu94sHhJE.cer (raw, json) Hash identifier: w9T3YRm5iRn/Q6Uq4lM/OT+/nR4KXf1CyTHr5VcyE9s= Subject key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783549069FA9D2614BC35FE6A6D02CC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.24.102.0/24 IP: 2a13:9980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:49:06:9f:a9:d2:61:4b:c3:5f:e6:a6:d0:2c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:60:4c:72:7b:94:7c:05:66:dd:31:22:9d: 7d:76:d7:7e:96:58:ad:e8:0e:eb:21:2f:6c:b0:52: 37:93:fa:3d:8e:45:1c:62:5a:8e:fb:8c:4e:5b:d4: fa:02:f7:c5:83:68:52:a2:b4:0b:7c:ea:ff:6a:a8: a6:9f:ef:c8:a3:df:88:7f:81:fc:b3:64:16:e7:93: ae:a9:9f:2f:71:95:69:d1:ca:da:01:2d:af:f7:d9: 67:60:af:bf:13:85:34:91:3b:93:c3:90:1c:f9:d9: dd:00:d1:28:f8:0a:14:80:59:b1:7c:54:76:62:bb: db:be:e9:a9:23:19:ea:33:7c:0d:6c:08:ec:46:aa: 77:55:a2:81:c3:16:f0:f6:c9:2b:94:27:87:20:b5: f6:81:aa:bd:75:08:9d:61:55:6b:d0:eb:01:a8:9f: f6:54:52:fd:e2:fd:f8:b3:8b:e3:cd:2b:43:9b:9f: a9:7b:fb:ac:bd:16:90:86:b1:e8:cd:51:08:71:df: 51:df:ee:a6:c7:08:46:45:77:45:ee:86:34:b1:9e: c8:77:5f:20:8e:98:8a:25:00:83:5d:e6:ff:3d:83: 3a:74:90:64:fa:be:0f:6a:ad:b5:f3:3b:a2:ef:4f: 4d:13:51:ce:6f:9b:6b:9b:3a:86:d0:e6:58:4b:3e: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.102.0/24 IPv6: 2a13:9980::/29 Signature Algorithm: sha256WithRSAEncryption 18:14:6c:a0:80:23:a9:c5:3d:42:50:ab:c6:ff:f5:44:ab:56: ee:10:3f:4f:60:e9:2b:77:e2:2f:77:59:61:f1:47:5c:af:b1: d5:4d:e4:5e:53:55:6c:fe:2b:31:99:42:30:c8:30:82:39:2c: 99:d2:58:c2:0f:52:6f:17:c0:5b:cd:a6:64:c4:f2:6a:f8:c5: 5f:aa:6f:bc:47:bb:58:fd:eb:84:84:b2:67:1d:49:f9:73:a0: 03:ea:12:4d:91:99:77:bd:fe:d7:6b:72:8d:49:70:a6:ff:eb: e2:34:15:9b:ce:b3:03:fd:cc:0e:68:18:2e:69:6d:15:36:a9: 86:df:25:82:11:0b:cd:60:15:85:93:5d:17:4e:1a:2c:52:6e: b3:62:55:45:7b:08:08:28:dd:b7:ba:a3:5f:61:4c:65:ee:a7: 85:2c:3b:c5:24:1f:81:b8:d3:83:00:90:57:bd:2a:5a:f5:f5: f4:fc:57:8c:0c:cf:21:e2:61:b3:c9:61:2b:9a:bb:cd:19:0e: a2:03:63:2d:c5:3c:c6:10:b4:5e:4e:ab:27:bd:60:4a:42:67: 24:76:3c:70:71:58:25:84:b5:db:90:f6:a3:ba:b4:b0:b8:aa: 30:63:13:08:ac:9b:b1:99:e0:66:f6:ee:3d:42:92:df:9f:1e: 12:4a:d9:46 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NUkGn6nSYUvDX+am0CzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjUwNzllMGU1ODdjNDdmZjE0ZDIwMjExMmY0ZWVmNzhiMDc4NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPhgTHJ7lHwFZt0xIp19dtd+llit 6A7rIS9ssFI3k/o9jkUcYlqO+4xOW9T6AvfFg2hSorQLfOr/aqimn+/Io9+If4H8 s2QW55OuqZ8vcZVp0craAS2v99lnYK+/E4U0kTuTw5Ac+dndANEo+AoUgFmxfFR2 YrvbvumpIxnqM3wNbAjsRqp3VaKBwxbw9skrlCeHILX2gaq9dQidYVVr0OsBqJ/2 VFL94v34s4vjzStDm5+pe/usvRaQhrHozVEIcd9R3+6mxwhGRXdF7oY0sZ7Id18g jpiKJQCDXeb/PYM6dJBk+r4Paq218zui709NE1HOb5trmzqG0OZYSz4rSwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFF9QeeDlh8R/8U0gIRL07veLB4SRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2UzNzhi Mi04ODY0LTQ3MTAtOTY3NC0xZmM4Zjc2YTgwNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZTM3OGIy LTg4NjQtNDcxMC05Njc0LTFmYzhmNzZhODA2YS8xL1gxQjU0T1dIeEhfeFRTQWhF dlR1OTRzSGhKRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwRhmMA0EAgACMAcDBQMqE5mAMA0GCSqGSIb3 DQEBCwUAA4IBAQAYFGyggCOpxT1CUKvG//VEq1buED9PYOkrd+Ivd1lh8Udcr7HV TeReU1Vs/isxmUIwyDCCOSyZ0ljCD1JvF8BbzaZkxPJq+MVfqm+8R7tY/euEhLJn HUn5c6AD6hJNkZl3vf7Xa3KNSXCm/+viNBWbzrMD/cwOaBguaW0VNqmG3yWCEQvN YBWFk10XThosUm6zYlVFewgIKN23uqNfYUxl7qeFLDvFJB+BuNODAJBXvSpa9fX0 /FeMDM8h4mGzyWErmrvNGQ6iA2MtxTzGELReTqsnvWBKQmckdjxwcVglhLXbkPaj urSwuKowYxMIrJuxmeBm9u49QpLfnx4SStlG -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:48 2026 by rpki-client