This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer File: XNwEuyPqpM7MeR3-BLsCi355e2g.cer (raw, json) Hash identifier: RFwT63UJneoyFCAZwiAiIBTRrWTWK72+NHkPB/1vjhI= Subject key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB804E8DE1B496D1B1CC863CF42000 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215248 IP: 103.149.168.0/23 IP: 194.117.69.0/24 IP: 2a14:38c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:80:4e:8d:e1:b4:96:d1:b1:cc:86:3c:f4:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:8c:17:12:80:69:85:22:4b:aa:8c:25:e5: 58:e5:ea:5f:2c:00:cd:76:af:46:d8:3d:ab:db:b3: 1b:21:11:b5:e2:58:17:a5:7e:88:84:19:16:04:9c: eb:a5:a2:5f:ff:96:ae:5f:60:e4:04:1b:d6:d9:be: 68:a2:4e:dd:a1:8a:5e:bf:fe:f7:06:b8:74:4c:a8: 34:b7:66:a8:5f:72:04:25:8a:a3:4a:c3:6f:23:a5: 35:f9:97:ff:f2:ff:40:cf:53:ce:d9:92:98:6f:44: be:85:c1:03:12:b3:f9:f8:dd:7f:d6:d5:af:c8:c6: b7:c6:ed:04:0c:8b:8b:31:53:fe:f5:e5:48:69:bb: 0c:80:b3:09:67:23:af:aa:9c:47:e3:4e:b8:30:f8: ad:9b:92:4f:c7:83:30:fe:e0:9d:3b:25:2d:84:ea: 0b:0a:aa:bd:14:95:91:1e:59:56:4d:78:84:34:cb: 73:74:95:81:2f:5b:69:58:ef:c9:1e:12:31:e0:35: 6b:dc:7e:6e:9c:3d:b5:1f:cd:b6:7e:48:26:a3:f0: 9f:79:a3:62:9a:b2:e1:07:ad:00:95:a2:a1:b2:ca: 55:88:ce:77:1e:75:c7:d3:94:2d:d0:e4:88:58:0b: 64:79:5a:c1:f0:06:7e:90:0d:cc:16:70:b5:57:39: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.168.0/23 194.117.69.0/24 IPv6: 2a14:38c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215248 Signature Algorithm: sha256WithRSAEncryption 67:19:13:a2:1a:1f:aa:2e:22:e3:f9:aa:1f:39:cc:12:f9:39: 68:a9:45:6c:43:42:22:b5:da:88:e5:a8:25:19:ba:72:43:e9: c9:16:3e:e5:ef:0f:78:11:8e:5c:64:b2:c1:f9:ed:db:57:95: 18:d1:39:d7:04:d2:6d:b4:5e:11:d4:d4:f7:da:ee:42:c0:92: d0:d2:bd:88:72:45:61:64:24:de:8b:44:4e:e6:0a:76:40:17: 3d:09:a0:f8:4b:96:8d:fb:2a:50:18:90:f6:6c:ab:d2:6b:ba: 94:0f:3a:2d:5a:d4:52:1a:0a:53:d5:17:94:a4:a6:47:3c:39: 05:2f:a0:44:b3:49:7e:99:8a:6a:28:bd:6f:d5:be:cc:ce:0d: fc:c6:ab:34:f9:24:17:f6:2e:bf:ea:91:70:fa:6a:a3:7c:bb: 64:e3:f3:a8:0d:19:0f:87:3a:5e:a3:b9:91:fd:cb:d8:7b:7d: 4a:69:17:a7:30:b1:e1:99:49:4f:33:64:31:01:c8:10:d0:ea: dd:8e:f0:86:0c:58:01:12:69:06:d3:13:bd:2c:a3:b1:d4:64: 9a:01:f0:01:86:34:2f:84:fd:18:27:e1:f0:b0:d2:27:12:29: 86:cf:b2:98:c3:8e:eb:84:b3:bb:2c:1e:c8:57:f0:5e:51:6f: ee:8e:93:2d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt264BOjeG0ltGxzIY89CAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2RjMDRiYjIzZWFhNGNlY2M3OTFkZmUwNGJiMDI4YjdlNzk3YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d+MFxKAaYUiS6qMJeVY5epfLADN dq9G2D2r27MbIRG14lgXpX6IhBkWBJzrpaJf/5auX2DkBBvW2b5ook7doYpev/73 Brh0TKg0t2aoX3IEJYqjSsNvI6U1+Zf/8v9Az1PO2ZKYb0S+hcEDErP5+N1/1tWv yMa3xu0EDIuLMVP+9eVIabsMgLMJZyOvqpxH4064MPitm5JPx4Mw/uCdOyUthOoL Cqq9FJWRHllWTXiENMtzdJWBL1tpWO/JHhIx4DVr3H5unD21H822fkgmo/CfeaNi mrLhB60AlaKhsspViM53HnXH05Qt0OSIWAtkeVrB8AZ+kA3MFnC1VzkvIQIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFFzcBLsj6qTOzHkd/gS7Aot+eXtoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlk YjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2Qx OWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvNUNEQzA0QkIyM0VB QTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME AWeVqAMEAMJ1RTANBAIAAjAHAwUDKhQ4wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDSNAwDQYJKoZIhvcNAQELBQADggEBAGcZE6IaH6ouIuP5qh85zBL5OWipRWxD QiK12ojlqCUZunJD6ckWPuXvD3gRjlxkssH57dtXlRjROdcE0m20XhHU1Pfa7kLA ktDSvYhyRWFkJN6LRE7mCnZAFz0JoPhLlo37KlAYkPZsq9JrupQPOi1a1FIaClPV F5Skpkc8OQUvoESzSX6ZimoovW/VvszODfzGqzT5JBf2Lr/qkXD6aqN8u2Tj86gN GQ+HOl6juZH9y9h7fUppF6cwseGZSU8zZDEByBDQ6t2O8IYMWAESaQbTE70so7HU ZJoB8AGGNC+E/Rgn4fCw0icSKYbPspjDjuuEs7ssHshX8F5Rb+6Oky0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:21 2026 by rpki-client