This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer File: XWwVypA9fSVFPq619ySgTjqmWQg.cer (raw, json) Hash identifier: JfsqWk24RV8lTu5dMBKl8XGn/C2mCRjP5HVkPlHtTmM= Subject key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110849D8AED585E3580DBFF731DCF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6775 AS: 44432 AS: 60728 AS: 206327 IP: 5.154.186.0/24 IP: 79.134.224.0/19 IP: 85.209.172.0/22 IP: 128.0.33.0/24 IP: 185.0.40.0/26 IP: 185.22.52.0/22 IP: 2001:7f8:137::/48 IP: 2001:4b28::/29 IP: 2a01:528::/29 IP: 2a04:1d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:08:49:d8:ae:d5:85:e3:58:0d:bf:f7:31:dc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:68:20:38:f8:49:43:66:ee:45:23:b3:f6: 27:66:9a:0c:bb:00:4e:1e:70:21:d9:3d:8d:a9:90: dc:45:64:9e:27:11:2f:30:fc:08:b2:07:24:13:2a: fa:cf:6f:9c:a4:5f:46:40:89:3b:fe:4a:3d:4b:2e: 5c:fc:85:8c:85:71:f9:bd:ab:e6:be:59:dd:bd:d2: fd:4e:5a:ba:b9:26:6e:33:88:d5:a1:9f:71:ca:ff: 08:08:d6:e6:b8:68:ce:cf:04:88:a8:fb:dc:88:76: 44:a2:ce:57:6a:7e:14:88:dc:a2:64:eb:bd:e9:cf: 5a:4e:24:ec:0b:a7:91:de:5e:ba:15:73:01:8c:0e: 0a:d2:47:ec:c4:1d:e7:79:71:cb:a0:6d:63:7e:0e: f1:a9:e7:31:0a:0a:d5:ff:c1:19:5f:ff:3a:8d:bc: 9d:1e:a1:2a:2f:ff:a0:61:92:01:d0:ec:56:26:68: 4a:09:ac:08:f2:bd:b5:9c:5b:c6:b5:5d:6a:6e:ee: c2:c4:5a:28:d7:65:a2:d7:fc:64:08:36:93:c2:5b: 1b:a2:98:6e:1c:5d:66:f3:11:ae:6c:d9:87:d9:8b: a8:bc:d2:e0:58:02:16:6c:1a:25:1d:d8:c2:12:99: 99:ac:a4:fb:86:2d:ef:b9:75:24:44:5e:8c:84:d0: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.186.0/24 79.134.224.0/19 85.209.172.0/22 128.0.33.0/24 185.0.40.0/26 185.22.52.0/22 IPv6: 2001:7f8:137::/48 2001:4b28::/29 2a01:528::/29 2a04:1d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6775 44432 60728 206327 Signature Algorithm: sha256WithRSAEncryption 1f:53:cd:f0:48:c3:c8:41:ff:06:19:6b:2e:c4:b2:3c:d4:48: ee:f7:a5:8d:46:07:bb:cf:cf:86:96:30:5e:6b:68:11:da:e7: c4:79:ac:7b:23:69:25:d6:30:ea:a4:76:87:01:c9:26:df:a4: ee:fc:cd:65:30:d1:70:1d:28:97:4f:c0:69:be:08:c7:95:0e: 4e:51:86:dd:d2:57:3b:bd:78:1a:45:61:1e:28:b9:f8:16:c3: e8:80:ff:0c:d5:35:c9:92:fa:7a:40:2e:3d:3e:fd:56:99:cb: ea:5f:ed:b3:9e:fa:f9:8e:22:67:a3:ae:10:13:16:7a:e5:39: aa:e4:23:3c:86:f8:67:b3:87:73:8f:6b:93:14:0d:61:ec:4e: 43:61:1d:fc:13:ee:2f:e6:b5:0e:97:3a:c7:f0:85:c3:3c:60: e8:44:d8:fb:93:ab:2e:af:c7:65:32:1d:6c:72:31:c7:08:8e: 90:08:54:56:e8:6f:48:e4:c2:15:8f:04:b7:4b:29:46:98:51: 26:28:f9:b0:9c:a8:8c:d2:63:14:59:0f:2f:07:e2:cc:27:c7: 35:94:10:b6:b2:a1:54:d8:85:8a:08:0b:ca:b6:54:14:be:a7: ec:c5:2d:83:f4:ac:93:1c:7e:07:b4:74:3c:ee:93:06:4a:bf: 98:db:c0:47 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt5EQhJ2K7VheNYDb/3Mdz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDZjMTVjYTkwM2Q3ZDI1NDUzZWFlYjVmNzI0YTA0ZTNhYTY1OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsRoIDj4SUNm7kUjs/YnZpoMuwBO HnAh2T2NqZDcRWSeJxEvMPwIsgckEyr6z2+cpF9GQIk7/ko9Sy5c/IWMhXH5vavm vlndvdL9Tlq6uSZuM4jVoZ9xyv8ICNbmuGjOzwSIqPvciHZEos5Xan4UiNyiZOu9 6c9aTiTsC6eR3l66FXMBjA4K0kfsxB3neXHLoG1jfg7xqecxCgrV/8EZX/86jbyd HqEqL/+gYZIB0OxWJmhKCawI8r21nFvGtV1qbu7CxFoo12Wi1/xkCDaTwlsbophu HF1m8xGubNmH2YuovNLgWAIWbBolHdjCEpmZrKT7hi3vuXUkRF6MhNDhCQIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFF1sFcqQPX0lRT6utfckoE46plkIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzI4NjRj OC1jMDQyLTQyOGYtYTAyZC0zYjM0YzIzYjljNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMjg2NGM4 LWMwNDItNDI4Zi1hMDJkLTNiMzRjMjNiOWM1YS8xL1hXd1Z5cEE5ZlNWRlBxNjE5 eVNnVGpxbVdRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzArBAIAATAlAwQABZq6AwQFT4bgAwQCVdGsAwQAgAAhAwUGuQAo AAMEArkWNDAkBAIAAjAeAwcAIAEH+AE3AwUDIAFLKAMFAyoBBSgDBQMqBB1AMCgG CCsGAQUFBwEIAQH/BBkwF6AVMBMCAhp3AgMArZACAwDtOAIDAyX3MA0GCSqGSIb3 DQEBCwUAA4IBAQAfU83wSMPIQf8GGWsuxLI81Eju96WNRge7z8+GljBea2gR2ufE eax7I2kl1jDqpHaHAckm36Tu/M1lMNFwHSiXT8BpvgjHlQ5OUYbd0lc7vXgaRWEe KLn4FsPogP8M1TXJkvp6QC49Pv1WmcvqX+2znvr5jiJno64QExZ65Tmq5CM8hvhn s4dzj2uTFA1h7E5DYR38E+4v5rUOlzrH8IXDPGDoRNj7k6sur8dlMh1scjHHCI6Q CFRW6G9I5MIVjwS3SylGmFEmKPmwnKiM0mMUWQ8vB+LMJ8c1lBC2sqFU2IWKCAvK tlQUvqfsxS2D9KyTHH4HtHQ87pMGSr+Y28BH -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:35 2026 by rpki-client