This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer (raw, json) Hash identifier: LNvRDb0g1wPJd5ElAmRcDgsb6K1+xDY5SPDQx+/rfRo= Subject key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F8D8751EF1079EF647B84B86E6B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48611 IP: 185.250.184.0/22 IP: 2a0c:1140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f8:d8:75:1e:f1:07:9e:f6:47:b8:4b:86:e6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:36:c7:e3:44:9f:02:c1:34:e0:8e:b1:ac: e2:38:7e:12:7f:c3:67:67:82:dd:60:98:71:de:d6: ca:13:05:df:fe:d2:66:b6:7d:42:99:73:d1:54:bd: da:03:e8:7d:a2:af:cd:33:ae:80:c7:d6:16:c9:94: 72:8e:cc:71:5b:19:5d:db:a5:f4:57:f9:f1:24:22: e0:50:87:3e:c1:92:5a:13:f9:a6:f4:63:71:bc:aa: 8e:93:7d:07:ab:ee:d2:01:73:bc:fa:39:ab:6f:cd: 7e:20:a2:d3:99:f9:28:0b:21:b8:71:57:85:a2:2a: ad:f2:e9:fa:3b:10:36:dd:38:a6:ac:72:96:ad:f2: 4b:dd:21:26:9f:87:49:f0:68:6a:93:ef:9e:9b:db: 42:da:fb:56:75:02:80:24:94:89:24:98:c2:27:77: 12:a9:30:35:33:56:0b:e8:da:51:69:3b:6f:0d:4c: e4:5d:84:4d:1b:37:2b:99:2c:52:05:9e:2f:87:56: af:93:71:7b:d4:ce:83:93:40:54:00:43:24:f1:84: e0:3b:ef:d2:79:64:78:dc:b6:47:38:92:9a:2b:3f: b2:2e:9b:ef:58:c1:f4:52:ef:2e:38:7b:6b:2f:63: 56:db:69:52:79:84:75:74:59:a6:e5:b8:85:1b:d8: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.184.0/22 IPv6: 2a0c:1140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48611 Signature Algorithm: sha256WithRSAEncryption a4:bd:04:36:f8:16:42:84:51:1c:33:e6:fe:6e:fb:86:6d:6e: e7:3d:24:fe:28:33:88:f5:77:dd:bc:38:11:42:af:65:8d:67: 2f:56:ac:54:59:cb:3d:25:33:ae:14:96:13:77:1d:ba:1e:1c: f3:89:35:6f:42:f3:e5:ff:15:d0:2d:c2:24:cf:d0:4b:88:93: 7a:62:22:9c:fa:65:42:fa:db:f7:11:9b:9c:81:13:f8:a3:87: bc:ca:0c:78:4d:db:4c:8f:f5:e0:b3:fa:42:02:dc:9c:b7:7d: 1f:1b:5a:7e:69:67:bc:f8:f8:db:ec:a3:65:f9:a6:9d:54:2b: 88:25:e2:85:61:d3:d2:fc:23:d3:e1:f6:03:b6:89:d7:52:6a: 07:e4:94:a0:5b:54:95:4e:4e:ec:d8:33:5a:69:5f:a9:bb:21: b3:c4:33:81:9b:86:c3:bb:d1:95:24:ea:87:63:52:c9:ad:30: 49:b6:05:69:a8:4c:e8:0a:ef:c1:a0:d4:b8:57:99:95:f3:14: 5a:f0:dc:3c:5a:d6:20:bc:4d:bd:19:bf:30:dc:b9:70:69:c8: 77:ae:46:1d:d9:b3:e6:bf:96:a7:6b:bd:44:6b:98:17:28:b0: 97:29:3c:b8:4d:80:69:c6:e0:63:be:32:06:18:04:18:7e:01: 05:39:ed:8f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NPjYdR7xB572R7hLhua1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzMyYTkyNWM1NWYxZDRlNmU0MGMxMGY0ZThlMDE5YjQ4M2MxZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCo2x+NEnwLBNOCOsaziOH4Sf8Nn Z4LdYJhx3tbKEwXf/tJmtn1CmXPRVL3aA+h9oq/NM66Ax9YWyZRyjsxxWxld26X0 V/nxJCLgUIc+wZJaE/mm9GNxvKqOk30Hq+7SAXO8+jmrb81+IKLTmfkoCyG4cVeF oiqt8un6OxA23TimrHKWrfJL3SEmn4dJ8Ghqk++em9tC2vtWdQKAJJSJJJjCJ3cS qTA1M1YL6NpRaTtvDUzkXYRNGzcrmSxSBZ4vh1avk3F71M6Dk0BUAEMk8YTgO+/S eWR43LZHOJKaKz+yLpvvWMH0Uu8uOHtrL2NW22lSeYR1dFmm5biFG9iulQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFwyqSXFXx1ObkDBD06OAZtIPB1QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2QzYzhm Ny1mZjhkLTQyYjgtYTc2Mi00NTM3NzQxOGZiYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZDNjOGY3 LWZmOGQtNDJiOC1hNzYyLTQ1Mzc3NDE4ZmJiMi8xL1hES3BKY1ZmSFU1dVFNRVBU bzRCbTBnOEhWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufq4MA0EAgACMAcDBQMqDBFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC94zANBgkqhkiG9w0BAQsFAAOCAQEApL0ENvgWQoRR HDPm/m77hm1u5z0k/igziPV33bw4EUKvZY1nL1asVFnLPSUzrhSWE3cduh4c84k1 b0Lz5f8V0C3CJM/QS4iTemIinPplQvrb9xGbnIET+KOHvMoMeE3bTI/14LP6QgLc nLd9HxtafmlnvPj42+yjZfmmnVQriCXihWHT0vwj0+H2A7aJ11JqB+SUoFtUlU5O 7NgzWmlfqbshs8QzgZuGw7vRlSTqh2NSya0wSbYFaahM6ArvwaDUuFeZlfMUWvDc PFrWILxNvRm/MNy5cGnId65GHdmz5r+Wp2u9RGuYFyiwlyk8uE2AacbgY74yBhgE GH4BBTntjw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:13 2026 by rpki-client