This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer (raw, json) Hash identifier: fGfk+JYAXWTz9bdGTPm3iPCMdY9/SxcI9EOeYAcfaak= Subject key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA64BD17A78F6277B57B8AC005192 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.181.80.0/22 IP: 62.68.90.0/24 IP: 147.78.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a6:4b:d1:7a:78:f6:27:7b:57:b8:ac:00:51:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:53:fd:e0:f7:23:d6:2c:8e:87:92:49:c2: 08:e2:94:74:2f:eb:59:e8:d0:d2:a1:d5:03:7f:d9: c0:c2:d8:65:58:60:b2:17:e2:b4:04:10:e4:ba:f2: 2a:ec:46:27:6d:9d:e8:5a:e4:be:1e:d7:4f:2d:1b: da:4a:2a:aa:a9:52:14:dc:7c:7c:0d:0b:c6:ce:f8: 96:a1:9b:d2:82:6a:63:cb:23:5f:41:fa:72:3f:7e: 83:ff:9a:4f:a7:f4:41:88:a4:57:a0:c3:f1:62:d9: d2:41:e3:c6:82:f5:b4:db:ed:27:ea:93:31:5c:34: c6:20:38:7e:8f:46:b0:36:36:d4:16:7b:93:a7:a6: 35:d6:e0:b6:01:5a:db:0e:97:a8:f8:04:fd:eb:d0: 13:be:ea:63:8b:c7:bd:8a:59:b5:0e:11:73:3b:08: fb:75:89:a7:ca:e7:58:03:e3:bb:6f:39:7a:95:c7: 35:98:3e:82:15:8e:d9:f0:c1:b2:12:83:ea:56:2c: 89:3c:9e:4d:36:65:38:12:b4:2b:09:74:f0:66:c6: 2b:b9:5a:1d:9c:0f:cc:59:bc:03:c0:d0:e0:46:97: 32:c8:c2:d6:ee:c9:3e:e3:6a:a9:c8:83:80:99:66: 9d:de:3a:3a:11:64:ce:76:8c:6a:2e:24:1c:d5:d2: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.80.0/22 62.68.90.0/24 147.78.140.0/22 Signature Algorithm: sha256WithRSAEncryption 56:ff:5d:3d:5d:8a:7c:98:4f:6c:6a:1f:79:e2:8b:9b:61:2f: 03:d6:66:71:15:0d:0a:21:92:c1:59:bb:65:d3:f5:0b:0d:91: 0c:47:88:ae:44:ff:0c:fa:bd:f0:63:6f:36:1a:c6:21:b8:89: 45:f8:1e:de:18:b4:e9:b7:db:97:ec:5b:fd:01:4f:fb:d0:f6: a4:cd:02:a9:12:e8:b5:5a:8a:bb:0a:66:3a:61:fc:1b:1e:b8: 17:8d:c3:4d:f1:1b:63:f9:6c:3c:c3:96:27:bd:2f:27:7b:c2: 40:a7:dd:f3:b3:d8:65:94:40:0b:40:38:97:91:91:5a:02:3b: 51:89:0a:e2:38:5b:be:8c:80:0f:ae:d3:ef:35:85:a9:f1:ed: 63:38:93:6a:d9:fe:0f:72:7f:9c:fa:31:8c:fe:c9:98:67:c1: 4a:cc:9f:5c:92:b7:07:ed:52:ac:60:36:1b:5c:03:d3:2a:48: 72:80:81:23:3e:37:49:52:20:26:81:85:1e:6c:1c:e9:bc:a1: 71:b2:83:46:13:03:90:82:4b:42:d4:07:55:80:4c:f2:cb:e4: 6b:9d:54:77:5f:0f:55:4c:c3:f4:ef:be:02:40:68:f2:93:48: c5:2a:fa:4f:75:cc:fd:7a:41:95:3c:cc:06:7f:7f:76:0f:00: fe:df:f4:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt9yqZL0Xp49id7V7isAFGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQ2OWQ5Zjc0OTYzMGYwMjU2Y2YwY2VhYjU4ODM2YjQ5MWE1OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqidT/eD3I9YsjoeSScII4pR0L+tZ 6NDSodUDf9nAwthlWGCyF+K0BBDkuvIq7EYnbZ3oWuS+HtdPLRvaSiqqqVIU3Hx8 DQvGzviWoZvSgmpjyyNfQfpyP36D/5pPp/RBiKRXoMPxYtnSQePGgvW02+0n6pMx XDTGIDh+j0awNjbUFnuTp6Y11uC2AVrbDpeo+AT969ATvupji8e9ilm1DhFzOwj7 dYmnyudYA+O7bzl6lcc1mD6CFY7Z8MGyEoPqViyJPJ5NNmU4ErQrCXTwZsYruVod nA/MWbwDwNDgRpcyyMLW7sk+42qpyIOAmWad3jo6EWTOdoxqLiQc1dIJWwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFF3WnZ90ljDwJWzwzqtYg2tJGlj2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzYxNjky NC05M2IyLTRkY2ItYWVlYi1mM2ZkNjQzMzE3MDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNjE2OTI0 LTkzYjItNGRjYi1hZWViLWYzZmQ2NDMzMTcwOS8xL1hkYWRuM1NXTVBBbGJQRE9x MWlEYTBrYVdQWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCBbVQAwQAPkRaAwQCk06MMA0GCSqGSIb3DQEB CwUAA4IBAQBW/109XYp8mE9sah954oubYS8D1mZxFQ0KIZLBWbtl0/ULDZEMR4iu RP8M+r3wY282GsYhuIlF+B7eGLTpt9uX7Fv9AU/70PakzQKpEui1Woq7CmY6Yfwb HrgXjcNN8Rtj+Ww8w5YnvS8ne8JAp93zs9hllEALQDiXkZFaAjtRiQriOFu+jIAP rtPvNYWp8e1jOJNq2f4Pcn+c+jGM/smYZ8FKzJ9ckrcH7VKsYDYbXAPTKkhygIEj PjdJUiAmgYUebBzpvKFxsoNGEwOQgktC1AdVgEzyy+RrnVR3Xw9VTMP0774CQGjy k0jFKvpPdcz9ekGVPMwGf392DwD+3/SY -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:53 2026 by rpki-client