This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer (raw, json) Hash identifier: mFfPY5Gq8ogIydGW2zM1StRHNDiUD42BbSUwaOmNUsI= Subject key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1459DF9C1BFD59A753CEDCCF383513 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.143.240.0/22 IP: 185.200.244.0/22 IP: 185.206.168.0/22 IP: 2a07:3980::/29 IP: 2a0a:bb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:59:df:9c:1b:fd:59:a7:53:ce:dc:cf:38:35:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:2d:37:a2:7c:3b:16:e5:6e:ac:d9:10:84: 88:24:4a:d2:3a:ab:43:bd:cc:7b:0e:8f:b7:af:0c: cf:88:3d:2d:54:a5:d3:6c:c9:49:0e:4a:cd:2a:aa: c5:a4:5b:6c:83:4a:02:74:90:7d:de:50:ca:e6:80: 1a:6f:6f:cf:2f:42:32:66:cb:7c:d8:66:4a:35:bd: 51:2a:8e:8a:96:cd:32:a5:a7:73:46:26:a4:93:52: 0b:e1:9f:74:15:db:fc:af:ec:d0:a6:12:a7:6a:17: 70:c6:cb:0b:b3:a3:c0:c7:f0:b7:11:bb:f5:82:f0: 03:a0:5f:ad:58:54:ba:6d:a2:b1:82:a0:9d:39:a8: 12:69:8e:0f:cb:ea:7e:1e:78:1b:34:e3:67:06:02: 1c:39:a0:b3:06:89:21:3c:75:c7:fc:db:03:57:5f: b3:ad:c5:b0:a4:1d:18:b4:b5:03:8e:32:51:1d:e6: c0:64:60:5b:1e:32:4f:fd:80:54:e3:c7:78:f7:5a: eb:bc:31:74:5b:04:ba:24:4b:51:32:fd:c6:d0:9c: 9a:1c:3c:12:fc:ea:3d:24:b6:76:96:9a:aa:7a:14: 5b:11:2a:fe:e0:e2:1d:8b:66:3c:fc:0a:1e:3d:00: e9:c5:a8:d6:59:46:07:e7:ef:cd:30:aa:35:2d:a2: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.240.0/22 185.200.244.0/22 185.206.168.0/22 IPv6: 2a07:3980::/29 2a0a:bb40::/29 Signature Algorithm: sha256WithRSAEncryption a8:2f:d2:b2:2f:8e:c4:c4:c1:0b:32:c0:f1:84:fd:c1:5f:59: d9:22:c1:07:80:c0:72:a7:7d:5d:e2:82:26:bb:15:96:c7:f7: 15:be:f3:14:6b:87:8b:a2:3d:51:e3:fd:af:b3:0e:4a:44:f0: 5a:33:85:3d:e3:65:68:ab:63:09:f9:51:cb:8b:a0:5c:c1:29: 63:ac:20:97:af:76:c8:fc:8c:54:18:cb:41:7b:ad:ea:9f:61: 40:2f:72:f1:2a:db:17:4e:44:eb:97:01:2d:63:b2:02:40:8c: 75:e1:55:6b:78:18:67:bb:9d:1d:ba:92:3e:bd:e8:94:51:c9: 2f:f0:02:2c:eb:dd:63:4f:98:80:d5:c2:ef:59:3b:f6:a9:24: 92:15:0b:35:96:60:60:c3:4a:53:a1:cb:c6:1c:8d:ec:25:8f: 15:34:5a:b8:24:19:1f:0d:4c:6d:77:ae:df:76:76:3f:8b:6e: 98:2f:20:78:6c:3d:f8:9b:41:03:15:2d:c4:10:6b:3d:b8:f0: 36:42:27:82:8a:77:c7:8f:39:7c:0e:9c:54:71:7a:eb:f7:fd: d2:50:33:8c:43:7a:75:f7:fa:d6:4f:ff:ed:5f:c2:5f:d2:a4: 06:51:c3:73:50:47:00:ce:2c:3d:b8:fd:0c:99:b1:9e:ff:57: 55:9a:af:6e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/FFnfnBv9WadTztzPODUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGRlNGIzYjgyZjIwOWI3MDFhZTM0MGNmNTNiOTc0MDc4ZjE2YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJgtN6J8OxblbqzZEISIJErSOqtD vcx7Do+3rwzPiD0tVKXTbMlJDkrNKqrFpFtsg0oCdJB93lDK5oAab2/PL0IyZst8 2GZKNb1RKo6Kls0ypadzRiakk1IL4Z90Fdv8r+zQphKnahdwxssLs6PAx/C3Ebv1 gvADoF+tWFS6baKxgqCdOagSaY4Py+p+HngbNONnBgIcOaCzBokhPHXH/NsDV1+z rcWwpB0YtLUDjjJRHebAZGBbHjJP/YBU48d491rrvDF0WwS6JEtRMv3G0JyaHDwS /Oo9JLZ2lpqqehRbESr+4OIdi2Y8/AoePQDpxajWWUYH5+/NMKo1LaI9AQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFF3eSzuC8gm3Aa40DPU7l0B48WqfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzAyYmRm MC1iZjI5LTRkYWUtYjE5Yi04NmE1NTE4ZTJkNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMDJiZGYw LWJmMjktNGRhZS1iMTliLTg2YTU1MThlMmQ1Mi8xL1hkNUxPNEx5Q2JjQnJqUU05 VHVYUUhqeGFwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuY/wAwQCucj0AwQCuc6oMBQEAgACMA4DBQMq BzmAAwUDKgq7QDANBgkqhkiG9w0BAQsFAAOCAQEAqC/Ssi+OxMTBCzLA8YT9wV9Z 2SLBB4DAcqd9XeKCJrsVlsf3Fb7zFGuHi6I9UeP9r7MOSkTwWjOFPeNlaKtjCflR y4ugXMEpY6wgl692yPyMVBjLQXut6p9hQC9y8SrbF05E65cBLWOyAkCMdeFVa3gY Z7udHbqSPr3olFHJL/ACLOvdY0+YgNXC71k79qkkkhULNZZgYMNKU6HLxhyN7CWP FTRauCQZHw1MbXeu33Z2P4tumC8geGw9+JtBAxUtxBBrPbjwNkIngop3x485fA6c VHF66/f90lAzjEN6dff61k//7V/CX9KkBlHDc1BHAM4sPbj9DJmxnv9XVZqvbg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:02 2026 by rpki-client