This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer File: XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer (raw, json) Hash identifier: S2oTvOReKtjk+c6YJFXG11qg2WZwx9ODTo/zRfeWLjE= Subject key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB32FBDC42D5E02F65396A57DD485B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.81.56.0/22 IP: 2a09:d640::/29 IP: 2a0e:5080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:32:fb:dc:42:d5:e0:2f:65:39:6a:57:dd:48:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:6f:94:57:2f:15:42:22:b3:a6:33:19:68: ea:cb:75:e0:c6:a5:7a:5a:81:04:ce:41:7b:37:4a: 33:cc:51:14:d8:29:d5:ab:c7:3a:56:3e:4b:04:83: 95:d0:79:e3:73:1d:7d:37:91:bc:63:cc:7c:15:e3: db:05:ec:7e:e6:73:ae:98:f2:2d:db:46:b2:79:d2: f6:23:84:f8:70:dd:30:dd:4c:3f:5b:eb:b5:a8:4c: 5b:1f:1b:c3:7c:4b:11:f7:a4:ca:c0:95:2a:44:b0: c2:cc:c4:bd:5b:11:ab:99:26:bb:e1:19:f8:73:12: 09:ff:1f:61:f8:8d:cc:64:89:dc:c5:8c:7a:20:f1: fd:b2:e1:cb:93:ff:44:30:90:b0:8e:c1:ee:5d:84: 1e:eb:7a:e8:54:43:e7:15:e7:2a:3a:77:a0:85:1b: 0e:d2:2b:03:25:31:e1:d4:e4:85:6f:e9:61:ae:3e: 0b:c8:c2:87:f0:58:1c:3c:db:c5:59:5f:89:26:70: 2b:ba:50:53:f1:88:ff:57:ab:b6:0b:0c:dd:a8:84: 58:42:17:72:4e:10:03:08:4e:62:7e:7f:97:f3:44: 31:57:71:a8:39:e8:25:ff:76:1f:e3:64:b6:c2:45: 69:2b:0e:45:fe:18:aa:c2:4a:51:26:28:49:5b:1f: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.56.0/22 IPv6: 2a09:d640::/29 2a0e:5080::/29 Signature Algorithm: sha256WithRSAEncryption 18:4f:fd:12:a8:92:db:90:e0:ed:f7:23:1e:f8:2b:7d:8a:cc: 41:6d:5b:79:14:62:8c:71:4d:93:a2:0a:1a:99:06:63:0e:89: 74:c4:25:2f:4c:27:a5:bb:eb:a7:27:fa:48:25:90:fc:14:24: 88:5f:51:1d:92:5c:00:02:15:08:07:4d:59:0e:70:57:b3:ae: 88:36:78:f0:d6:86:dd:19:e0:a1:71:88:fa:1b:a3:ba:d1:ae: a8:11:54:5b:b7:dc:3d:b0:f6:68:62:a4:c1:e3:99:33:94:29: b1:ad:30:6e:e2:c3:44:7c:31:28:22:e1:3e:fe:c9:1e:25:89: f9:6c:e1:48:c3:b0:4f:0d:f5:55:07:a2:5f:c5:ec:5d:36:93: 61:3b:36:5a:a6:db:4c:5f:64:43:de:01:51:19:e8:94:d9:be: b3:1b:95:b2:4a:9e:83:64:6f:a9:ec:ba:c7:af:fd:a3:71:49: 2e:8e:6d:85:87:00:bc:cc:44:f0:cf:5a:2a:34:a4:63:e5:b0: 04:3e:2b:24:b4:26:0a:20:61:36:cf:36:cc:02:3c:1e:9f:ca: b0:0b:df:1a:07:9b:df:5a:37:36:ca:ca:24:ea:a8:01:e6:bf: 95:22:28:f3:c0:58:a5:59:46:75:13:c0:62:b1:c1:a6:8b:fe: 1d:51:c7:3b -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt26zL73ELV4C9lOWpX3UhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGEzMjE1YWJmYTQ2MjFkNTc3MDlmODM4YTkyODAxZjJlOTBkZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsflvlFcvFUIis6YzGWjqy3XgxqV6 WoEEzkF7N0ozzFEU2CnVq8c6Vj5LBIOV0Hnjcx19N5G8Y8x8FePbBex+5nOumPIt 20ayedL2I4T4cN0w3Uw/W+u1qExbHxvDfEsR96TKwJUqRLDCzMS9WxGrmSa74Rn4 cxIJ/x9h+I3MZIncxYx6IPH9suHLk/9EMJCwjsHuXYQe63roVEPnFecqOneghRsO 0isDJTHh1OSFb+lhrj4LyMKH8FgcPNvFWV+JJnArulBT8Yj/V6u2CwzdqIRYQhdy ThADCE5ifn+X80QxV3GoOegl/3Yf42S2wkVpKw5F/hiqwkpRJihJWx9yXwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFF2jIVq/pGIdV3Cfg4qSgB8ukN3+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JmMjQ1 NjdiLTdhNzQtNGMxZi1hYTg1LWRkMjRhZjczY2NiYi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYy NDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvNURBMzIxNUFCRkE0 NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQmMCQwDAQCAAEwBgME Ai1RODAUBAIAAjAOAwUDKgnWQAMFAyoOUIAwDQYJKoZIhvcNAQELBQADggEBABhP /RKoktuQ4O33Ix74K32KzEFtW3kUYoxxTZOiChqZBmMOiXTEJS9MJ6W766cn+kgl kPwUJIhfUR2SXAACFQgHTVkOcFezrog2ePDWht0Z4KFxiPobo7rRrqgRVFu33D2w 9mhipMHjmTOUKbGtMG7iw0R8MSgi4T7+yR4lifls4UjDsE8N9VUHol/F7F02k2E7 Nlqm20xfZEPeAVEZ6JTZvrMblbJKnoNkb6nsusev/aNxSS6ObYWHALzMRPDPWio0 pGPlsAQ+KyS0JgogYTbPNswCPB6fyrAL3xoHm99aNzbKyiTqqAHmv5UiKPPAWKVZ RnUTwGKxwaaL/h1Rxzs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:00 2026 by rpki-client