This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer File: Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer (raw, json) Hash identifier: ux2Neajow+/v/v3hbz0T1tK3Trnj4MAFKh7sPeUwWms= Subject key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76F98EE0FF596E5FCB1A443C4B3037CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:33:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.146.160.0/22 IP: 2a13:b7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:f9:8e:e0:ff:59:6e:5f:cb:1a:44:3c:4b:30:37:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:33:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:50:32:fe:48:d7:cf:ea:ca:6d:3e:54:dd: 5f:9f:c6:77:c9:3b:79:20:23:fe:88:15:59:84:fb: 17:8d:e8:ed:00:dd:da:c8:9c:dd:2e:70:50:53:a8: ec:70:60:85:45:4a:3f:7e:81:0a:2d:29:13:11:4a: cc:9d:5c:a3:60:23:8a:fd:62:fb:92:4f:3b:d5:09: ca:e7:90:ca:4f:51:3b:3e:14:73:1c:7b:c3:a1:7d: 1e:8e:7f:90:7b:74:fd:46:6f:38:ca:11:b8:cf:5d: ec:72:1a:bf:61:71:69:9b:fe:75:6e:d4:97:58:70: b6:d2:0c:14:a4:4b:45:99:b2:39:ba:de:4a:07:60: 70:bd:60:f7:23:54:8b:98:9f:17:3e:ca:f2:14:b2: 0f:dc:c8:99:14:6e:a6:9d:fb:ef:d2:d6:17:27:1d: 77:a5:7e:7d:70:4f:24:98:98:49:6c:44:a3:27:ed: cf:62:2c:0a:86:c8:92:41:26:d8:bb:b8:4f:21:9f: df:26:42:68:00:9e:1e:a6:a4:94:7c:d1:ec:25:25: a8:bb:90:86:b3:a3:7d:42:96:27:75:ac:4a:15:f6: 71:f6:73:14:41:57:16:94:80:6e:46:b7:31:05:8b: 83:93:a1:16:72:55:d9:fe:70:f2:fe:24:ec:eb:96: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.160.0/22 IPv6: 2a13:b7c0::/29 Signature Algorithm: sha256WithRSAEncryption 57:ca:a2:5a:58:30:dc:4a:85:21:78:f6:64:4c:fb:be:ad:14: 22:65:5b:63:e3:63:6a:2f:ff:f4:78:df:a8:73:16:9a:99:87: 2e:50:4a:16:a6:a1:62:de:fc:5b:22:e7:50:26:50:8a:4e:c8: 2a:df:ed:e9:27:7f:bd:24:07:d9:09:b2:74:fe:6e:49:03:9d: 06:e7:8f:d1:df:ad:54:11:3b:68:63:09:ef:38:15:24:23:dd: c6:97:95:4d:2f:22:dc:21:a6:34:31:af:cf:20:16:59:77:5b: 94:eb:8c:1d:6e:9f:9b:c8:01:61:a6:ac:63:aa:13:3c:ee:e4: 5b:3c:98:6a:81:75:e9:86:de:15:18:4c:8d:9f:60:77:f9:8f: fc:68:e0:f3:6a:e4:c6:25:b0:68:1d:b5:2b:5b:ed:a1:74:ca: cc:f9:95:f9:e1:1f:5f:6c:e5:5e:c4:a5:38:a6:c0:27:44:89: fb:5f:46:97:a5:3c:ab:05:db:a4:38:d6:24:5b:09:0a:20:bc: 1f:c7:d8:43:04:42:f8:16:2b:4e:8b:bb:be:24:bf:23:42:53: f4:38:d0:10:4c:b0:5f:ec:38:9f:8a:37:49:e5:ef:b5:b4:fc: 91:90:a5:bc:28:80:c6:23:6c:ee:05:66:68:35:cd:b4:80:73: ae:69:d7:03 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt2+Y7g/1luX8saRDxLMDfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAzMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGVmZTA5MjJmNGY1NTI3MGRjZDVjMDhmMDRmMWM3YmYyNjA3M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW9QMv5I18/qym0+VN1fn8Z3yTt5 ICP+iBVZhPsXjejtAN3ayJzdLnBQU6jscGCFRUo/foEKLSkTEUrMnVyjYCOK/WL7 kk871QnK55DKT1E7PhRzHHvDoX0ejn+Qe3T9Rm84yhG4z13schq/YXFpm/51btSX WHC20gwUpEtFmbI5ut5KB2BwvWD3I1SLmJ8XPsryFLIP3MiZFG6mnfvv0tYXJx13 pX59cE8kmJhJbESjJ+3PYiwKhsiSQSbYu7hPIZ/fJkJoAJ4epqSUfNHsJSWou5CG s6N9QpYndaxKFfZx9nMUQVcWlIBuRrcxBYuDk6EWclXZ/nDy/iTs65Z5NQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF3v4JIvT1UnDc1cCPBPHHvyYHPDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJmZTJi MjdhLTFlYzUtNGFiNy05NzhlLTZkYTljZjlmMzc5MC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZl MmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvNURFRkUwOTIyRjRG NTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME Ai2SoDANBAIAAjAHAwUDKhO3wDANBgkqhkiG9w0BAQsFAAOCAQEAV8qiWlgw3EqF IXj2ZEz7vq0UImVbY+Njai//9HjfqHMWmpmHLlBKFqahYt78WyLnUCZQik7IKt/t 6Sd/vSQH2QmydP5uSQOdBueP0d+tVBE7aGMJ7zgVJCPdxpeVTS8i3CGmNDGvzyAW WXdblOuMHW6fm8gBYaasY6oTPO7kWzyYaoF16YbeFRhMjZ9gd/mP/Gjg82rkxiWw aB21K1vtoXTKzPmV+eEfX2zlXsSlOKbAJ0SJ+19Gl6U8qwXbpDjWJFsJCiC8H8fY QwRC+BYrTou7viS/I0JT9DjQEEywX+w4n4o3SeXvtbT8kZClvCiAxiNs7gVmaDXN tIBzrmnXAw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:08:53 2026 by rpki-client