This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer File: XYjk96MCQSwxaju1mc3SBCtf9IU.cer (raw, json) Hash identifier: tdfcMxuoHu20u8u4IdscI0ZP7VIie78E6PYAbfHpaZA= Subject key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB2D76294866D1A4502F30A76F23F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29084 AS: 57840 IP: 37.209.168.0/21 IP: 78.108.242.0/24 IP: 79.132.0.0/19 IP: 83.222.168.0/24 IP: 83.222.175.0/24 IP: 83.222.182.0/24 IP: 84.54.128.0/18 IP: 87.246.35.0/24 IP: 109.160.4.0/22 IP: 109.160.13.0/24 IP: 109.160.24.0/21 IP: 109.160.42.0/23 IP: 109.160.98.0/24 IP: 185.78.36.0/22 IP: 212.70.150.0/24 IP: 212.70.152.0/22 IP: 212.70.157.0/24 IP: 217.174.48.0/20 IP: 2a02:1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b2:d7:62:94:86:6d:1a:45:02:f3:0a:76:f2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:32:9b:76:05:e0:72:42:68:04:e5:4c:de: 5a:72:7b:2c:40:f9:a4:a9:72:63:ad:d9:90:34:9c: 11:e9:d3:c2:8e:f4:12:5c:d7:df:91:c3:61:e6:f3: 73:51:d5:19:96:19:05:a5:72:10:06:dc:ac:f2:16: 2c:a3:ae:ce:36:f3:de:0a:27:6e:29:f0:0e:6f:7f: 8e:65:fc:92:04:e6:4a:19:a0:78:4d:8e:14:c7:e1: 5c:81:28:a1:c4:d6:85:b6:93:86:64:ff:d7:50:8e: 50:e5:9b:5e:f7:62:73:d1:55:e2:4f:8b:48:fd:e6: 39:fc:43:2e:bc:b4:a9:ce:7e:7c:fb:23:27:c9:e6: 60:1d:ee:fd:4e:62:e6:7a:b0:2a:85:68:0e:ea:c3: 7f:48:97:5a:92:01:28:d3:cb:f7:f6:c9:67:15:6c: af:c9:a9:3e:52:18:56:9c:ae:68:a7:1c:20:a0:b2: f2:1c:5c:16:37:b8:58:3a:5c:27:a3:16:63:9d:85: 75:c6:79:63:a4:29:40:b0:c3:46:35:73:66:60:b1: 24:1d:55:43:95:28:20:82:18:f4:4e:63:e9:e9:69: 08:38:6f:c8:9e:63:74:66:d1:80:78:f2:4c:69:5b: ac:e9:56:de:fb:1c:88:ab:b0:62:6b:ed:ad:69:e2: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.168.0/21 78.108.242.0/24 79.132.0.0/19 83.222.168.0/24 83.222.175.0/24 83.222.182.0/24 84.54.128.0/18 87.246.35.0/24 109.160.4.0/22 109.160.13.0/24 109.160.24.0/21 109.160.42.0/23 109.160.98.0/24 185.78.36.0/22 212.70.150.0/24 212.70.152.0/22 212.70.157.0/24 217.174.48.0/20 IPv6: 2a02:1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29084 57840 Signature Algorithm: sha256WithRSAEncryption 76:78:2f:81:b7:11:14:e8:64:f0:be:c7:9e:d3:65:47:5f:88: 27:3a:56:f7:fd:f5:a0:5f:b5:e4:2b:24:80:e6:df:bf:1d:e6: bc:41:9f:cc:ac:d4:cc:94:f9:2d:bc:65:3a:32:ff:59:f2:81: 5f:4f:a6:87:87:f3:4c:6d:db:35:ff:e6:3f:79:01:b1:5b:5e: d4:1e:3e:9c:28:65:19:d7:b9:df:1f:88:ab:2a:ce:de:bb:87: 07:dd:48:38:e4:9f:20:db:26:28:a9:b5:59:7c:3c:a6:11:32: f7:ed:bd:e7:97:76:f0:95:83:10:06:c2:92:e2:7d:c4:5f:19: bc:f2:74:2c:ae:33:2d:58:da:c2:23:0e:68:03:2b:14:c6:9a: 3b:cf:3c:3c:d0:c6:10:11:df:44:25:88:1d:81:af:8d:69:f7: b2:79:97:c1:bf:4c:da:fc:85:79:ec:ef:3f:d3:1e:96:44:4b: 75:b7:2d:24:d7:e6:ff:64:0c:61:b2:66:43:77:e1:76:0d:8a: 1b:e7:6e:b3:61:98:13:3f:51:23:63:a1:0b:fb:51:2d:8d:4d: b3:d6:ce:4f:bf:54:4b:9e:0b:83:3b:ee:a6:f6:af:20:0c:43: a7:f1:12:41:d1:fb:bb:51:8a:10:58:00:b1:e4:d1:c4:53:d0: 8a:68:02:c0 -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISAZt57LLXYpSGbRpFAvMKdvI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDg4ZTRmN2EzMDI0MTJjMzE2YTNiYjU5OWNkZDIwNDJiNWZmNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHgym3YF4HJCaATlTN5acnssQPmk qXJjrdmQNJwR6dPCjvQSXNffkcNh5vNzUdUZlhkFpXIQBtys8hYso67ONvPeCidu KfAOb3+OZfySBOZKGaB4TY4Ux+FcgSihxNaFtpOGZP/XUI5Q5Zte92Jz0VXiT4tI /eY5/EMuvLSpzn58+yMnyeZgHe79TmLmerAqhWgO6sN/SJdakgEo08v39slnFWyv yak+UhhWnK5opxwgoLLyHFwWN7hYOlwnoxZjnYV1xnljpClAsMNGNXNmYLEkHVVD lSggghj0TmPp6WkIOG/InmN0ZtGAePJMaVus6Vbe+xyIq7Bia+2taeI9iwIDAQAB o4IDHDCCAxgwHQYDVR0OBBYEFF2I5PejAkEsMWo7tZnN0gQrX/SFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzc2MGMw Zi0xMmFiLTQ4M2QtOGNkYi01N2UxZDViNzJiMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvNzYwYzBm LTEyYWItNDgzZC04Y2RiLTU3ZTFkNWI3MmIyZC8xL1hZams5Nk1DUVN3eGFqdTFt YzNTQkN0ZjlJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGWBggrBgEF BQcBBwEB/wSBhjCBgzByBAIAATBsAwQDJdGoAwQATmzyAwQFT4QAAwQAU96oAwQA U96vAwQAU962AwQGVDaAAwQAV/YjAwQCbaAEAwQAbaANAwQDbaAYAwQBbaAqAwQA baBiAwQCuU4kAwQA1EaWAwQC1EaYAwQA1EadAwQE2a4wMA0EAgACMAcDBQMqAgHA MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnGcAgMA4fAwDQYJKoZIhvcNAQELBQAD ggEBAHZ4L4G3ERToZPC+x57TZUdfiCc6Vvf99aBfteQrJIDm378d5rxBn8ys1MyU +S28ZToy/1nygV9PpoeH80xt2zX/5j95AbFbXtQePpwoZRnXud8fiKsqzt67hwfd SDjknyDbJiiptVl8PKYRMvftveeXdvCVgxAGwpLifcRfGbzydCyuMy1Y2sIjDmgD KxTGmjvPPDzQxhAR30QliB2Br41p97J5l8G/TNr8hXns7z/THpZES3W3LSTX5v9k DGGyZkN34XYNihvnbrNhmBM/USNjoQv7US2NTbPWzk+/VEueC4M77qb2ryAMQ6fx EkHR+7tRihBYALHk0cRT0IpoAsA= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:09 2026 by rpki-client