This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer File: XP44gfPER3T1HMde5-b5HFVlpgY.cer (raw, json) Hash identifier: 5HndyFEQypzMPgZU4SKoN+o9Uz6hxqHi+sL2GmqsgkI= Subject key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385F5E82A0E4E3CFB98A40B50C549D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61162 AS: 202681 IP: 185.133.68.0/22 IP: 185.153.56.0/22 IP: 193.104.32.0/24 IP: 2a05:2440::/29 IP: 2a07:8880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5f:5e:82:a0:e4:e3:cf:b9:8a:40:b5:0c:54:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:b9:8b:84:65:89:3d:9c:87:db:26:c3:e0: 14:a6:66:f2:de:45:a3:20:0d:34:28:ee:54:03:21: d8:8f:1c:00:c1:00:c8:68:17:dd:e9:16:38:e1:78: b0:5e:18:e5:48:2c:27:e4:7b:ee:d9:88:47:a5:41: 0b:80:07:7e:04:19:4e:53:ca:0a:8a:cb:3a:11:a6: 87:e5:cb:6f:ac:54:da:ff:95:4b:44:61:2d:d0:70: 0a:0f:7a:43:8d:75:28:ac:87:9e:64:db:1b:45:7d: 2b:7a:24:01:10:ad:eb:b2:8e:dc:1b:59:bb:39:c6: 1d:aa:6f:5e:4a:3d:4d:34:28:c9:f1:f0:57:e3:a8: 6e:10:06:1e:16:04:e7:47:10:9f:f3:4e:f2:c5:e6: 9d:53:7d:05:b7:94:c9:af:e1:b7:73:f4:06:4a:29: 45:f7:a5:b8:da:66:26:f8:e5:11:99:f2:4e:07:b9: e7:14:92:1e:c4:50:21:dc:de:56:15:2e:dc:77:79: 22:48:a8:d6:94:53:42:d0:17:d5:ee:4d:62:ca:57: f9:97:97:80:0b:ed:dc:61:64:2e:93:26:51:43:90: 52:b6:79:14:aa:54:fb:ea:b5:ea:a5:c8:09:d1:43: b7:e9:92:37:05:a2:23:06:dc:6f:2b:d1:e0:61:a9: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.68.0/22 185.153.56.0/22 193.104.32.0/24 IPv6: 2a05:2440::/29 2a07:8880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61162 202681 Signature Algorithm: sha256WithRSAEncryption 3a:e2:b0:2b:51:74:a7:e1:3a:e1:79:95:ef:d1:c1:64:85:83: 0f:32:58:23:00:55:fd:1e:69:4a:d5:c8:27:6d:9f:a2:63:70: 27:91:77:b5:c2:fd:24:3b:df:05:b5:69:ce:5b:cf:26:8f:76: ea:1d:f6:3c:70:5a:2f:dd:7a:03:78:a6:04:65:a0:6c:48:88: 3c:1e:03:72:33:b1:d9:81:09:e0:5c:74:b8:a6:b8:20:78:35: 76:df:6e:5e:48:cf:fe:1a:d3:c2:63:9a:3b:d9:0b:1f:2a:a9: 8d:a7:a1:5e:99:8e:4d:44:5d:e6:04:2d:8b:fc:64:53:20:8a: 5a:ea:8b:56:15:87:ca:10:f8:1c:0d:0f:fb:eb:33:f3:4a:82: 5c:31:78:a1:5a:50:3e:9f:4a:c6:c8:7a:99:e5:3d:17:db:c9: 9b:54:c1:75:54:98:8c:ae:b4:14:20:8e:47:43:dd:8b:4d:14: 0c:32:84:c5:dd:e1:a4:e3:76:9a:ad:20:bf:62:38:63:ec:ce: 22:fb:4a:9f:db:d7:00:8a:0c:dd:15:b8:73:be:e7:d4:70:43: 11:5d:32:07:ae:01:14:f7:2e:4c:a7:f4:36:26:22:c7:4c:30: 09:9b:ae:15:19:0c:ac:95:ee:f2:8b:b7:92:42:0d:95:aa:b8: ba:c6:94:26 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt+OF9egqDk48+5ikC1DFSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2ZlMzg4MWYzYzQ0Nzc0ZjUxY2M3NWVlN2U2ZjkxYzU1NjVhNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx665i4RliT2ch9smw+AUpmby3kWj IA00KO5UAyHYjxwAwQDIaBfd6RY44XiwXhjlSCwn5Hvu2YhHpUELgAd+BBlOU8oK iss6EaaH5ctvrFTa/5VLRGEt0HAKD3pDjXUorIeeZNsbRX0reiQBEK3rso7cG1m7 OcYdqm9eSj1NNCjJ8fBX46huEAYeFgTnRxCf807yxeadU30Ft5TJr+G3c/QGSilF 96W42mYm+OURmfJOB7nnFJIexFAh3N5WFS7cd3kiSKjWlFNC0BfV7k1iylf5l5eA C+3cYWQukyZRQ5BStnkUqlT76rXqpcgJ0UO36ZI3BaIjBtxvK9HgYaldRQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFFz+OIHzxEd09RzHXufm+RxVZaYGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzUyNjBk MC0xODU1LTRmMzAtYjhlZi03Yzk5ODA3OWE2YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTI2MGQw LTE4NTUtNGYzMC1iOGVmLTdjOTk4MDc5YTZhOS8xL1hQNDRnZlBFUjNUMUhNZGU1 LWI1SEZWbHBnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuYVEAwQCuZk4AwQAwWggMBQEAgACMA4DBQMq BSRAAwUDKgeIgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA7uoCAwMXuTANBgkq hkiG9w0BAQsFAAOCAQEAOuKwK1F0p+E64XmV79HBZIWDDzJYIwBV/R5pStXIJ22f omNwJ5F3tcL9JDvfBbVpzlvPJo926h32PHBaL916A3imBGWgbEiIPB4DcjOx2YEJ 4Fx0uKa4IHg1dt9uXkjP/hrTwmOaO9kLHyqpjaehXpmOTURd5gQti/xkUyCKWuqL VhWHyhD4HA0P++sz80qCXDF4oVpQPp9Kxsh6meU9F9vJm1TBdVSYjK60FCCOR0Pd i00UDDKExd3hpON2mq0gv2I4Y+zOIvtKn9vXAIoM3RW4c77n1HBDEV0yB64BFPcu TKf0NiYix0wwCZuuFRkMrJXu8ou3kkINlaq4usaUJg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:53 2026 by rpki-client