This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer File: X_S8YTfFQKibkXPMLeMusEyebq4.cer (raw, json) Hash identifier: 3NMW+jsKCKeDKwp/uENG03g410PirN7sxtbW3Py6L8g= Subject key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2BEBAC44488C9DAA7BF1041C3FB85 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.61.64.0/21 IP: 2a01:52c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:be:ba:c4:44:88:c9:da:a7:bf:10:41:c3:fb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:c4:ad:e9:30:7c:57:c2:72:81:24:2c:3e: 75:ef:fe:56:6e:12:83:92:4d:c6:c9:7b:0a:a3:84: 7f:2a:34:d8:56:af:fe:53:0c:38:b5:3a:64:74:c1: 29:54:4c:13:a4:cd:03:0e:e1:7c:f4:a9:93:74:f3: 00:e8:84:a8:8f:85:9d:17:41:7b:ab:e7:f5:ae:9a: e2:68:9b:cf:4f:b3:2e:d2:37:6b:b4:b4:e2:56:3e: 34:c5:71:e8:15:70:c4:86:73:b6:6f:6f:c1:b3:4a: 9a:33:86:61:bb:66:6a:d5:3a:5d:4b:25:5c:a1:5e: f6:b1:33:ed:79:c6:58:e2:c3:18:1b:7c:54:a9:79: 4c:ac:42:38:73:12:36:41:36:c3:67:6f:00:8d:55: 23:5d:bc:7d:a7:5c:bf:69:41:a5:00:47:ee:50:3f: 71:13:1d:02:86:1f:6c:3e:45:97:85:20:22:58:3b: 16:73:53:af:b5:60:6e:c6:ad:18:8f:b4:d1:55:69: e0:7d:91:9c:b3:e4:38:3a:7c:48:47:21:3a:62:9a: 57:ea:00:c2:bf:c1:7b:ef:37:77:3e:51:bc:21:62: 19:a0:20:42:91:16:e9:1d:1e:fa:b5:a9:20:81:f2: 23:da:28:bd:25:56:79:fb:01:28:25:4b:ec:d8:7b: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.64.0/21 IPv6: 2a01:52c0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:cc:35:ba:74:ad:f1:4b:38:13:75:35:4c:78:d1:19:f0:4d: f3:5d:3e:f8:6e:2e:d7:e9:24:e1:f6:96:8d:b2:3b:19:03:67: e6:a6:87:34:a5:6f:b6:24:1e:a4:9c:fb:d7:dc:9f:86:85:af: ac:f3:fd:25:b4:7d:ea:80:dc:9b:67:10:70:6c:ac:d3:0f:f1: 20:51:19:c8:33:7e:fd:9f:d0:cf:9a:0d:d8:0d:d0:e7:2f:23: 5a:e6:a9:c5:ca:79:fd:72:e1:23:08:10:f0:1d:9c:53:7d:a2: e8:c1:50:48:5f:0a:b8:b7:ea:07:e6:9d:98:7e:54:bd:b3:79: 3f:1b:b6:2f:c3:81:1e:dd:18:0f:8a:a2:12:86:a4:89:06:6a: 88:ef:f4:d0:10:73:de:c7:6f:43:8d:0a:3c:d2:70:6a:24:34: 5a:ae:31:50:02:27:fd:a6:c7:c1:a1:29:32:20:a9:36:d0:66: 55:32:35:43:a9:a6:6e:bb:d5:27:bc:51:bc:41:92:68:2d:e9: d8:d6:28:bf:a0:98:63:21:10:42:1d:ea:ae:71:a3:10:0a:d7: 71:86:04:5c:c9:c8:2f:f3:78:1b:c4:78:be:b5:e6:cb:42:09: 77:d6:b6:9e:4d:c0:1d:1d:f9:c3:e0:91:8f:e0:ae:a0:04:a5: 5f:f5:2c:50 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4or66xESIydqnvxBBw/uFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY0YmM2MTM3YzU0MGE4OWI5MTczY2MyZGUzMmViMDRjOWU2ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdjErekwfFfCcoEkLD517/5WbhKD kk3GyXsKo4R/KjTYVq/+Uww4tTpkdMEpVEwTpM0DDuF89KmTdPMA6ISoj4WdF0F7 q+f1rpriaJvPT7Mu0jdrtLTiVj40xXHoFXDEhnO2b2/Bs0qaM4Zhu2Zq1TpdSyVc oV72sTPtecZY4sMYG3xUqXlMrEI4cxI2QTbDZ28AjVUjXbx9p1y/aUGlAEfuUD9x Ex0Chh9sPkWXhSAiWDsWc1OvtWBuxq0Yj7TRVWngfZGcs+Q4OnxIRyE6YppX6gDC v8F77zd3PlG8IWIZoCBCkRbpHR76takggfIj2ii9JVZ5+wEoJUvs2HuzSwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFF/0vGE3xUCom5FzzC3jLrBMnm6uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2MwMTFj YS00NTZiLTRmNTEtYmM4Yi0wMDVjYjRkY2E2M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvYzAxMWNh LTQ1NmItNGY1MS1iYzhiLTAwNWNiNGRjYTYzZi8xL1hfUzhZVGZGUUtpYmtYUE1M ZU11c0V5ZWJxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBT1AMA0EAgACMAcDBQAqAVLAMA0GCSqGSIb3 DQEBCwUAA4IBAQBfzDW6dK3xSzgTdTVMeNEZ8E3zXT74bi7X6STh9paNsjsZA2fm poc0pW+2JB6knPvX3J+Gha+s8/0ltH3qgNybZxBwbKzTD/EgURnIM379n9DPmg3Y DdDnLyNa5qnFynn9cuEjCBDwHZxTfaLowVBIXwq4t+oH5p2YflS9s3k/G7Yvw4Ee 3RgPiqIShqSJBmqI7/TQEHPex29DjQo80nBqJDRarjFQAif9psfBoSkyIKk20GZV MjVDqaZuu9UnvFG8QZJoLenY1ii/oJhjIRBCHequcaMQCtdxhgRcycgv83gbxHi+ tebLQgl31raeTcAdHfnD4JGP4K6gBKVf9SxQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:20:54 2026 by rpki-client