This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer File: XYbEfabZB5NHtg8E7VxVV_6YPrg.cer (raw, json) Hash identifier: QKij1eRslaY6w+q2uv8IGweDGKJ4yfhuWHr4lfI3Bys= Subject key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C21B5628F506231AEF0AA6D694E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39011 IP: 5.253.188.0/22 IP: 194.102.204.0/24 IP: 2a09:5c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c2:1b:56:28:f5:06:23:1a:ef:0a:a6:d6:94:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:f6:f3:e7:8c:22:e4:41:19:f6:b6:46:39: fc:0b:5d:f4:f4:19:6a:f4:1a:3e:28:88:d0:cd:c8: 34:2c:65:80:c2:0d:95:e0:4d:90:c9:d5:6f:82:92: ad:fb:2a:15:71:54:2f:41:2f:88:05:df:6a:c4:04: 6e:42:d0:f7:38:6a:2c:97:bf:63:ca:77:4c:14:7b: 28:96:dc:4c:df:8c:a7:02:e9:ab:c4:6e:3c:81:c3: 31:40:6e:16:34:10:6e:96:9e:b2:80:bd:41:11:84: 1c:d4:a4:12:6e:85:29:cf:73:87:1f:ea:68:6e:20: 51:dd:e1:0c:47:3d:dc:c1:fc:f3:df:af:b5:02:0f: 30:e7:5f:bc:56:d9:a7:03:17:2f:0b:b5:34:41:91: 7f:c2:4a:19:62:bc:e4:e2:1e:86:7a:d2:5d:76:75: 08:a4:6f:e9:b3:ff:6f:c5:53:02:55:a4:f4:62:40: c6:b1:dc:2f:e2:32:22:d7:45:ae:df:b9:a9:0a:0c: ef:fd:e9:fc:72:4f:07:5e:72:c0:72:fc:74:ff:a3: 23:f2:6b:95:4f:5b:19:37:42:13:7e:70:d3:b4:30: 65:bb:9f:3d:14:15:34:bd:d9:5e:98:e1:07:f1:fe: ba:a6:c7:46:10:cd:89:3f:75:c7:0f:a3:06:f9:d2: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.188.0/22 194.102.204.0/24 IPv6: 2a09:5c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39011 Signature Algorithm: sha256WithRSAEncryption 79:c6:9e:89:84:15:7a:9f:75:fe:47:2e:fa:88:f0:6c:54:34: dd:e4:97:ba:39:50:7c:17:85:19:26:a8:94:6c:90:94:a4:c8: 2c:3b:c5:7a:42:15:24:b2:40:ba:b4:d0:47:35:20:a8:b2:6f: e4:66:07:f7:5b:91:df:f2:3f:90:b6:18:c9:89:92:6a:8d:b0: fe:f4:03:cf:06:19:65:c2:27:6d:d7:e6:b7:98:4d:fd:08:87: 23:92:4c:f7:16:fc:21:82:74:27:65:d2:ff:86:e8:5f:88:76: 61:20:a2:23:aa:e1:bf:03:a6:6f:99:08:f5:d2:64:92:68:02: db:42:05:5c:46:ac:45:e2:57:ad:40:c3:07:6e:ea:65:b6:ca: 3b:e8:d5:4e:17:4a:6c:56:b8:4d:2b:6e:b3:ff:6d:cd:9d:79: fd:d0:65:ff:de:42:b7:15:cd:65:2b:78:63:d4:a7:1f:ae:ce: 7b:b3:68:e0:b7:a2:93:dd:07:23:1b:23:c3:d7:bf:7c:4e:26: 30:99:fb:fc:28:71:cf:e2:78:5f:f5:ca:3d:bb:a7:cb:08:27: 69:dd:71:dd:24:e4:24:0c:f5:d9:5a:29:a7:68:3f:f6:12:a8: 00:71:d3:6f:16:dd:de:62:a5:b3:a3:2e:de:06:ba:f7:cd:e1: a5:61:4e:68 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pMIbVij1BiMa7wqm1pTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDg2YzQ3ZGE2ZDkwNzkzNDdiNjBmMDRlZDVjNTU1N2ZlOTgzZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+f28+eMIuRBGfa2Rjn8C1309Blq 9Bo+KIjQzcg0LGWAwg2V4E2QydVvgpKt+yoVcVQvQS+IBd9qxARuQtD3OGosl79j yndMFHsoltxM34ynAumrxG48gcMxQG4WNBBulp6ygL1BEYQc1KQSboUpz3OHH+po biBR3eEMRz3cwfzz36+1Ag8w51+8VtmnAxcvC7U0QZF/wkoZYrzk4h6GetJddnUI pG/ps/9vxVMCVaT0YkDGsdwv4jIi10Wu37mpCgzv/en8ck8HXnLAcvx0/6Mj8muV T1sZN0ITfnDTtDBlu589FBU0vdlemOEH8f66psdGEM2JP3XHD6MG+dJvRwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFF2GxH2m2QeTR7YPBO1cVVf+mD64MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2RmNjZh MC1jOTU4LTRlNWMtYTZkZi1mYzYzMjg0MWJhM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvZGY2NmEw LWM5NTgtNGU1Yy1hNmRmLWZjNjMyODQxYmEzZS8xL1hZYkVmYWJaQjVOSHRnOEU3 VnhWVl82WVByZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBf28AwQAwmbMMA0EAgACMAcDBQMqCVxAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYYzANBgkqhkiG9w0BAQsFAAOCAQEAecae iYQVep91/kcu+ojwbFQ03eSXujlQfBeFGSaolGyQlKTILDvFekIVJLJAurTQRzUg qLJv5GYH91uR3/I/kLYYyYmSao2w/vQDzwYZZcInbdfmt5hN/QiHI5JM9xb8IYJ0 J2XS/4boX4h2YSCiI6rhvwOmb5kI9dJkkmgC20IFXEasReJXrUDDB27qZbbKO+jV ThdKbFa4TStus/9tzZ15/dBl/95CtxXNZSt4Y9SnH67Oe7No4Leik90HIxsjw9e/ fE4mMJn7/Chxz+J4X/XKPbunywgnad1x3STkJAz12Vopp2g/9hKoAHHTbxbd3mKl s6Mu3ga6983hpWFOaA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:02 2026 by rpki-client