This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer (raw, json) Hash identifier: eZiVF0x4VlJRpI6dSynQ0Z85pbDWVjNZtOWZtOwWJ/E= Subject key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED173968E8A06AE485FC10F7BE30BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12493 AS: 47377 AS: 56369 AS: 207467 IP: 62.88.0.0/17 IP: 85.10.64.0/18 IP: 91.86.0.0/15 IP: 91.208.220.0/24 IP: 94.104.0.0/13 IP: 178.50.0.0/15 IP: 185.65.72.0/22 IP: 195.242.172.0/24 IP: 212.53.0.0/20 IP: 212.65.32.0/19 IP: 212.87.96.0/19 IP: 212.224.128.0/17 IP: 2a00:1868::/32 IP: 2a02:4a0::/32 IP: 2a03:1a20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:17:39:68:e8:a0:6a:e4:85:fc:10:f7:be:30:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:15:72:50:77:36:6b:6e:fb:42:fc:96:15: ce:90:4d:0c:5d:d8:a4:57:e0:4f:22:57:b1:1f:89: 98:17:d0:73:66:95:74:2d:4b:11:b7:46:46:3e:71: 94:c4:ae:bd:5b:68:37:11:d5:98:9d:07:8e:b7:a8: 36:34:6f:5a:6d:a5:3e:4b:79:09:20:70:39:01:49: 9e:a1:28:3a:0c:eb:15:7b:1b:a4:8f:df:d6:23:f3: 32:d9:a4:84:ba:11:98:a6:5f:2e:60:76:c5:1f:5b: c1:bd:fa:b2:ec:7e:26:d3:dc:e2:19:06:6a:83:0b: 0d:a6:f2:4a:77:9d:aa:f2:82:fe:fe:9b:b9:a3:ee: b6:4f:89:86:5f:c7:91:2f:2f:60:dc:d0:94:27:45: 2d:e3:36:a7:81:7e:cb:82:e5:ca:45:b8:95:de:59: 52:98:12:47:41:8c:12:10:4e:91:9f:39:2f:46:29: 81:55:c4:cc:17:c8:80:e2:b0:84:eb:f7:43:dd:ae: 08:f3:c4:90:10:60:2e:77:f4:bd:ec:b2:ac:28:dd: 48:be:61:67:da:92:61:a5:d8:ec:97:91:06:fb:20: 6c:de:6f:bb:f8:e2:61:28:92:df:34:83:d5:ff:d9: c7:6a:52:00:7c:6b:14:22:01:31:19:4e:80:55:0b: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.88.0.0/17 85.10.64.0/18 91.86.0.0/15 91.208.220.0/24 94.104.0.0/13 178.50.0.0/15 185.65.72.0/22 195.242.172.0/24 212.53.0.0/20 212.65.32.0/19 212.87.96.0/19 212.224.128.0/17 IPv6: 2a00:1868::/32 2a02:4a0::/32 2a03:1a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12493 47377 56369 207467 Signature Algorithm: sha256WithRSAEncryption 79:cb:2a:ab:65:0c:f5:b3:4d:31:22:9d:8e:ac:a8:ba:6e:a7: df:cd:3e:e0:26:fb:4e:d0:55:20:1b:99:fe:98:58:3a:80:df: 89:ba:7d:bc:de:e3:b6:4e:2c:b0:f9:78:9c:02:9d:1e:53:cf: 77:3e:f5:51:41:48:a2:f7:92:95:19:3c:02:d9:11:cd:ce:bd: bb:81:98:e3:1e:43:43:f1:08:11:b3:de:61:87:d1:25:ee:4a: f9:44:40:db:eb:86:93:c6:db:39:46:97:42:1c:b4:a4:4c:be: 2d:ce:de:f1:0e:25:50:fa:97:65:45:d3:95:40:10:eb:cf:cf: 1c:30:09:ef:9f:63:ef:1b:f0:e5:a9:9d:52:2b:0c:ce:33:54: 68:e0:b8:1d:2c:56:28:eb:79:eb:a0:8f:b0:dc:6d:b8:7c:08: 9b:69:9c:75:95:31:6c:90:bd:3d:fa:95:76:9a:0b:b7:91:21: 67:14:dc:d3:42:e0:23:09:eb:81:a8:9b:ae:77:84:ea:eb:7d: 53:a4:16:7f:9c:77:8c:26:67:18:7f:0b:2b:e7:1f:27:09:66: 94:73:4b:56:5b:e0:a1:ca:8e:14:bb:b0:90:12:76:02:28:5e: fa:ea:0e:2a:05:4f:43:46:e1:31:b9:6f:6e:a8:de:34:21:dd: 51:35:e3:1e -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISAZt57Rc5aOigauSF/BD3vjC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDNiYjg0ODkxNjUxZjIwMzljZDgxYjBiNjA5MTJmN2MwZTVjZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEUVclB3Nmtu+0L8lhXOkE0MXdik V+BPIlexH4mYF9BzZpV0LUsRt0ZGPnGUxK69W2g3EdWYnQeOt6g2NG9abaU+S3kJ IHA5AUmeoSg6DOsVexukj9/WI/My2aSEuhGYpl8uYHbFH1vBvfqy7H4m09ziGQZq gwsNpvJKd52q8oL+/pu5o+62T4mGX8eRLy9g3NCUJ0Ut4zangX7LguXKRbiV3llS mBJHQYwSEE6RnzkvRimBVcTMF8iA4rCE6/dD3a4I88SQEGAud/S97LKsKN1IvmFn 2pJhpdjsl5EG+yBs3m+7+OJhKJLfNIPV/9nHalIAfGsUIgExGU6AVQt1VQIDAQAB o4IDCjCCAwYwHQYDVR0OBBYEFF07uEiRZR8gOc2BsLYJEvfA5c+WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzU4N2Y3 ZS02MGNjLTQxYTAtODg2OS00ZjhjNjM4YTcyZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNTg3Zjdl LTYwY2MtNDFhMC04ODY5LTRmOGM2MzhhNzJlMS8xL1hUdTRTSkZsSHlBNXpZR3d0 Z2tTOThEbHo1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHsGCCsGAQUF BwEHAQH/BGwwajBLBAIAATBFAwQHPlgAAwQGVQpAAwMBW1YDBABb0NwDAwNeaAMD AbIyAwQCuUFIAwQAw/KsAwQE1DUAAwQF1EEgAwQF1FdgAwQH1OCAMBsEAgACMBUD BQAqABhoAwUAKgIEoAMFACoDGiAwKAYIKwYBBQUHAQgBAf8EGTAXoBUwEwICMM0C AwC5EQIDANwxAgMDKmswDQYJKoZIhvcNAQELBQADggEBAHnLKqtlDPWzTTEinY6s qLpup9/NPuAm+07QVSAbmf6YWDqA34m6fbze47ZOLLD5eJwCnR5Tz3c+9VFBSKL3 kpUZPALZEc3OvbuBmOMeQ0PxCBGz3mGH0SXuSvlEQNvrhpPG2zlGl0IctKRMvi3O 3vEOJVD6l2VF05VAEOvPzxwwCe+fY+8b8OWpnVIrDM4zVGjguB0sVijreeugj7Dc bbh8CJtpnHWVMWyQvT36lXaaC7eRIWcU3NNC4CMJ64Gom653hOrrfVOkFn+cd4wm Zxh/CyvnHycJZpRzS1Zb4KHKjhS7sJASdgIoXvrqDioFT0NG4TG5b26o3jQh3VE1 4x4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:12 2026 by rpki-client