This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer File: XOGq4Mk60EtymAgraL9qVPpovPA.cer (raw, json) Hash identifier: OGK3FjNlPY29s9hp1McZ+1viQJReZsQVBzw6gnAYhhE= Subject key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5DE58087C7ED7E9AB03913C6CF84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 94.136.168.0/22 IP: 185.75.20.0/23 IP: 185.196.100.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5d:e5:80:87:c7:ed:7e:9a:b0:39:13:c6:cf:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:ad:51:1c:d5:df:1f:19:2d:70:30:5c:48: a7:55:31:41:6c:bc:34:de:f3:32:ae:fc:ea:6e:81: e0:6c:8b:92:f1:8a:5a:55:69:0a:53:c5:7e:18:a7: 83:70:c1:15:fe:02:20:1d:7c:5d:ef:85:00:35:81: 2f:80:4a:ae:30:b8:ea:b1:55:d2:3c:e1:a3:15:7e: 0f:05:80:3a:5d:54:51:46:da:d4:ba:23:b8:58:24: f9:a8:05:5a:2e:e7:71:f3:b0:d6:32:0a:bc:e0:71: 4e:fb:0c:ee:3a:fa:7c:24:01:7a:59:41:55:cc:93: c3:0d:bf:12:57:e0:03:8c:b1:11:2e:e1:fd:67:3d: 4a:4b:24:a1:d0:c2:bb:bb:b2:12:bb:3d:17:bd:f3: 1a:00:52:32:b3:35:a8:d0:50:d4:7e:99:cd:86:db: 64:2f:e3:67:8e:e9:c5:b6:06:e2:30:4a:a0:83:50: ea:ba:af:4b:cd:98:23:0f:e6:4c:db:68:c0:96:32: 0f:67:02:55:b9:8c:00:30:5e:b5:e3:cb:d3:df:4e: ea:32:5b:c9:50:70:e6:84:d6:c5:4c:1c:4e:d3:05: be:99:7a:f0:ba:c0:00:60:9d:e1:27:0c:f4:01:d4: 0a:10:aa:c2:a2:df:f6:80:07:35:b5:ee:d0:ad:e0: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.168.0/22 185.75.20.0/23 185.196.100.0/22 Signature Algorithm: sha256WithRSAEncryption 56:97:15:0c:7e:51:d0:9e:8f:9c:c9:62:cc:22:24:a1:82:2a: 04:c4:67:b2:4d:25:a0:5d:2d:c2:a6:7c:58:44:57:32:ad:10: 87:0a:8d:12:29:45:28:cf:7b:e9:ec:68:30:eb:b5:10:9e:7d: f2:ff:10:41:e7:5d:78:3d:28:56:1b:c9:a9:f8:75:08:7a:7f: 88:9e:34:20:10:b2:d4:e4:23:a9:df:0a:7a:0e:f6:f0:05:61: a3:6b:5f:4a:8b:7c:ba:ce:c5:8c:78:a5:99:2d:6c:85:e8:b9: f1:5f:ff:5e:df:dc:69:14:e2:a2:9d:dc:7b:5a:4f:6f:43:a7: 19:6d:2a:d0:08:cb:f5:b6:a1:de:13:40:ac:8b:58:70:01:42: c5:04:af:02:c1:1e:e6:2b:08:00:a3:80:d0:9b:0d:a1:da:be: e5:74:9c:cd:bb:fb:7f:79:53:4d:5a:78:0c:16:76:0f:7a:d8: d6:02:b8:c2:b1:5b:01:44:1d:7a:43:91:1e:d0:fc:7a:27:16: 36:c7:f2:19:36:2b:6b:af:01:8e:80:c1:39:6e:7c:e3:c3:12: b7:96:0b:40:ab:1d:2d:49:a7:d3:5b:e1:6d:e3:e7:88:ea:d9: 07:45:6a:30:1e:6b:da:d2:28:00:9f:b6:e4:f1:b2:5e:11:0f: 76:82:57:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt6W13lgIfH7X6asDkTxs+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2UxYWFlMGM5M2FkMDRiNzI5ODA4MmI2OGJmNmE1NGZhNjhiY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4atURzV3x8ZLXAwXEinVTFBbLw0 3vMyrvzqboHgbIuS8YpaVWkKU8V+GKeDcMEV/gIgHXxd74UANYEvgEquMLjqsVXS POGjFX4PBYA6XVRRRtrUuiO4WCT5qAVaLudx87DWMgq84HFO+wzuOvp8JAF6WUFV zJPDDb8SV+ADjLERLuH9Zz1KSySh0MK7u7ISuz0XvfMaAFIyszWo0FDUfpnNhttk L+NnjunFtgbiMEqgg1Dquq9LzZgjD+ZM22jAljIPZwJVuYwAMF6148vT307qMlvJ UHDmhNbFTBxO0wW+mXrwusAAYJ3hJwz0AdQKEKrCot/2gAc1te7QreBMtQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFFzhquDJOtBLcpgIK2i/alT6aLzwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2ZmMzYx OC03MDMyLTQxNDMtOTM3NC1iYTE0MThkMjIwODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZmYzNjE4 LTcwMzItNDE0My05Mzc0LWJhMTQxOGQyMjA4Ny8xL1hPR3E0TWs2MEV0eW1BZ3Jh TDlxVlBwb3ZQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCXoioAwQBuUsUAwQCucRkMA0GCSqGSIb3DQEB CwUAA4IBAQBWlxUMflHQno+cyWLMIiShgioExGeyTSWgXS3CpnxYRFcyrRCHCo0S KUUoz3vp7Ggw67UQnn3y/xBB5114PShWG8mp+HUIen+InjQgELLU5COp3wp6Dvbw BWGja19Ki3y6zsWMeKWZLWyF6LnxX/9e39xpFOKindx7Wk9vQ6cZbSrQCMv1tqHe E0Csi1hwAULFBK8CwR7mKwgAo4DQmw2h2r7ldJzNu/t/eVNNWngMFnYPetjWArjC sVsBRB16Q5Ee0Px6JxY2x/IZNitrrwGOgME5bnzjwxK3lgtAqx0tSafTW+Ft4+eI 6tkHRWowHmva0igAn7bk8bJeEQ92gldA -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:39 2026 by rpki-client