This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer File: XGsMABqZq2KW4kIXO_fn_c8DwBk.cer (raw, json) Hash identifier: +qm0PciZvw4Tx/2e0JihsB1KIrc1FGBtFtgf/4KS9us= Subject key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA58DCF8F76C7153E98A4EDBE03C50C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44600 IP: 46.182.80.0/21 IP: 91.202.72.0/22 IP: 91.202.160.0/22 IP: 94.131.240.0/20 IP: 176.103.116.0/22 IP: 178.214.208.0/20 IP: 185.41.248.0/22 IP: 185.46.148.0/22 IP: 185.128.232.0/22 IP: 185.156.52.0/22 IP: 185.241.109.0/24 IP: 194.42.201.0/24 IP: 2a03:a600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8d:cf:8f:76:c7:15:3e:98:a4:ed:be:03:c5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:bf:76:60:81:82:b7:6b:d4:3e:4f:e1:48: 75:c4:4a:63:a4:89:e1:94:10:3c:e6:07:1e:d3:b3: 9d:62:45:fb:c5:09:a6:0e:20:c2:49:a4:e9:1e:5a: 30:77:b1:31:30:0f:dc:99:7c:e1:d2:7d:6a:2b:72: 7c:08:8d:db:3d:60:f5:f8:2c:c8:f1:c1:c4:04:38: 25:71:e9:02:af:84:f6:1f:d2:95:21:bb:98:77:6f: 9f:e1:cd:e5:3b:35:3d:21:be:f1:05:30:cb:ac:cc: 40:49:6c:44:1c:68:37:d0:0b:ff:ea:02:48:c9:62: 5e:3a:3d:6c:3f:e0:56:52:ac:4e:8b:dc:4c:8e:92: 47:3c:a9:73:ff:49:95:66:8f:f2:37:a8:3a:3b:bc: fa:4b:c9:9b:bc:3e:61:77:b1:5c:a0:d4:51:51:7c: 9c:d9:31:02:e7:8c:58:61:33:3f:30:f8:5b:62:f9: 38:58:0c:cd:f2:1d:83:1b:19:45:79:c9:60:08:8a: 39:3f:c4:3d:97:70:62:91:84:20:48:d1:5a:3b:46: 43:19:2e:85:1a:a7:d7:8c:2b:0e:fa:2e:11:32:bc: a0:f1:b9:e7:5e:ae:8a:94:51:02:1e:cf:41:e2:e4: af:04:16:89:88:9c:15:79:98:f6:91:dc:4f:9e:f4: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.80.0/21 91.202.72.0/22 91.202.160.0/22 94.131.240.0/20 176.103.116.0/22 178.214.208.0/20 185.41.248.0/22 185.46.148.0/22 185.128.232.0/22 185.156.52.0/22 185.241.109.0/24 194.42.201.0/24 IPv6: 2a03:a600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44600 Signature Algorithm: sha256WithRSAEncryption 40:22:c3:38:49:0b:83:a7:7f:15:66:f4:cd:16:7c:9a:90:db: e9:ab:15:30:8b:bf:e8:cd:7e:51:2f:0c:33:48:d7:bc:c5:3d: 1d:5f:47:08:aa:ac:b9:38:9b:64:46:b2:61:52:0d:3d:a0:cd: 5a:69:bb:88:bd:61:25:a0:2f:87:f9:94:f6:3d:d6:cf:f6:82: 2e:1a:be:a1:a4:14:06:1b:4d:7f:d3:2e:c9:db:f2:ad:d3:91: 55:5f:6a:22:3e:b5:d2:58:63:33:c7:99:29:88:cd:d5:6f:9d: 01:c6:40:48:5b:d7:5c:36:24:b7:b8:44:de:e6:1c:ab:07:f2: 2e:c4:aa:15:63:4b:86:1e:d6:de:b2:14:ee:05:26:87:ca:6a: 22:9b:e0:26:28:38:77:dd:6b:e9:75:2b:82:7e:a2:df:5a:f9: e7:88:81:88:8f:29:1b:bc:34:73:80:85:66:5c:bb:07:fe:f3: 0f:6d:c9:0b:88:19:ca:f2:10:de:f8:45:d6:ad:71:c6:06:1d: fa:7d:c7:e0:fb:29:16:dc:71:bf:dd:42:3b:73:77:d9:fc:a8: 91:b1:e7:a2:f4:8b:2e:16:8f:51:4a:fb:39:0a:cf:a3:ab:1f: 5e:47:1d:9d:c7:88:5e:4e:fc:b7:0c:8c:99:0f:a8:be:47:b1: 2c:40:8d:7f -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt+pY3Pj3bHFT6YpO2+A8UMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzZiMGMwMDFhOTlhYjYyOTZlMjQyMTczYmY3ZTdmZGNmMDNjMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSi/dmCBgrdr1D5P4Uh1xEpjpInh lBA85gce07OdYkX7xQmmDiDCSaTpHlowd7ExMA/cmXzh0n1qK3J8CI3bPWD1+CzI 8cHEBDglcekCr4T2H9KVIbuYd2+f4c3lOzU9Ib7xBTDLrMxASWxEHGg30Av/6gJI yWJeOj1sP+BWUqxOi9xMjpJHPKlz/0mVZo/yN6g6O7z6S8mbvD5hd7FcoNRRUXyc 2TEC54xYYTM/MPhbYvk4WAzN8h2DGxlFeclgCIo5P8Q9l3BikYQgSNFaO0ZDGS6F GqfXjCsO+i4RMryg8bnnXq6KlFECHs9B4uSvBBaJiJwVeZj2kdxPnvQ0rwIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFFxrDAAamatiluJCFzv35/3PA8AZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2M4OTY3 Ny0xZDlhLTQxOGQtODU5My1jMThlM2NjYzc0MmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYzg5Njc3 LTFkOWEtNDE4ZC04NTkzLWMxOGUzY2NjNzQyYi8xL1hHc01BQnFacTJLVzRrSVhP X2ZuX2M4RHdCay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQDLrZQAwQCW8pIAwQCW8qgAwQEXoPwAwQCsGd0 AwQEstbQAwQCuSn4AwQCuS6UAwQCuYDoAwQCuZw0AwQAufFtAwQAwirJMA0EAgAC MAcDBQMqA6YAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCuODANBgkqhkiG9w0B AQsFAAOCAQEAQCLDOEkLg6d/FWb0zRZ8mpDb6asVMIu/6M1+US8MM0jXvMU9HV9H CKqsuTibZEayYVINPaDNWmm7iL1hJaAvh/mU9j3Wz/aCLhq+oaQUBhtNf9Muydvy rdORVV9qIj610lhjM8eZKYjN1W+dAcZASFvXXDYkt7hE3uYcqwfyLsSqFWNLhh7W 3rIU7gUmh8pqIpvgJig4d91r6XUrgn6i31r554iBiI8pG7w0c4CFZly7B/7zD23J C4gZyvIQ3vhF1q1xxgYd+n3H4PspFtxxv91CO3N32fyokbHnovSLLhaPUUr7OQrP o6sfXkcdnceIXk78twyMmQ+ovkexLECNfw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:14 2026 by rpki-client