This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer File: XfEaGA3xeZTkitMxhyz9AK2augQ.cer (raw, json) Hash identifier: mq5HKpiwybpoM6wlejNSNOmRkm+bn4ic4+I2NXqb33w= Subject key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7100A3ED02E63B59024516E7ADC5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.80.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:10:0a:3e:d0:2e:63:b5:90:24:51:6e:7a:dc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5df11a180df17994e48ad331872cfd00ad9aba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:bd:c3:f3:55:19:4b:1b:e5:02:a9:8b:ce: 0d:68:3f:c8:d5:43:e4:57:f2:af:5d:37:19:83:5b: 6b:be:34:0d:96:6a:94:04:c9:59:fa:df:22:c0:e1: a9:9c:91:ad:b4:62:d0:24:2a:3c:1b:a9:6a:a3:5a: 6a:08:98:fb:df:f0:4f:ce:1a:17:95:87:94:95:8b: d7:07:45:32:61:1f:83:0d:31:db:3a:03:b7:4e:37: d6:58:0f:43:a4:3d:b5:89:1b:6f:64:cf:63:3b:81: 40:76:cf:d5:7a:c0:4e:a1:50:13:62:24:3c:eb:27: aa:1e:27:91:15:cd:e6:73:81:49:27:00:38:6f:11: af:7e:37:cb:14:83:81:fc:98:28:60:98:0c:47:fa: 56:9f:4e:57:a8:f4:40:94:3f:34:e9:6f:96:25:bb: 42:79:c4:5e:63:e8:10:3c:1f:58:f8:38:55:a5:f5: 89:22:ab:00:f6:dc:8d:9e:cb:a0:e7:84:9d:27:e0: 9b:71:20:35:ff:0f:3b:19:e4:ab:50:dd:28:3b:22: cf:43:87:e2:dd:2a:8c:be:05:e0:06:4b:60:69:d5: e8:9a:6f:d3:87:3f:0c:1e:a2:d1:1d:b2:96:9f:2d: 01:59:d2:1a:54:43:bb:5c:3b:af:a1:cc:6e:81:69: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.80.60.0/22 Signature Algorithm: sha256WithRSAEncryption 21:cb:ef:9d:a2:73:b7:75:6c:9b:5f:ea:3e:49:4d:c6:74:1f: 04:fe:65:c1:aa:64:25:a8:29:cf:1d:33:c0:de:67:d9:63:ae: c4:2a:76:b8:08:95:16:09:99:bf:3e:51:94:b7:83:9b:86:cf: 57:5f:de:56:8d:0f:71:43:ef:52:89:38:b9:d0:5a:c3:45:d5: 81:cb:12:22:ce:bb:4a:40:95:0b:3c:17:f4:77:5a:d3:7a:d1: ba:af:39:6a:13:66:67:90:41:d9:8a:73:b8:29:41:57:55:1c: e0:e6:3a:b2:14:5d:99:52:ed:15:41:46:3e:73:96:41:1b:20: 39:35:cd:eb:79:52:82:b1:a1:ea:86:01:4d:5c:86:d0:7c:a7: 15:72:14:d1:e0:80:e8:7e:db:d2:b7:00:95:b9:6f:0d:ed:c6: f0:e5:70:59:a5:22:da:d9:ff:76:5f:37:59:77:56:3e:07:ed: 28:ce:29:e3:a2:c1:9d:e1:f3:86:7d:fe:4a:8d:ed:a4:f4:b4: 32:e1:12:5f:8b:79:ad:00:14:b3:7c:af:4b:1a:cc:be:b0:3f: bb:f9:81:09:73:b7:9a:52:6c:34:a8:ca:de:fa:a5:47:14:48: d1:f1:4a:ba:97:da:ca:a7:8e:1e:d5:ee:68:61:90:54:9a:5a: 64:2e:04:52 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xxAKPtAuY7WQJFFuetxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGYxMWExODBkZjE3OTk0ZTQ4YWQzMzE4NzJjZmQwMGFkOWFiYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno29w/NVGUsb5QKpi84NaD/I1UPk V/KvXTcZg1trvjQNlmqUBMlZ+t8iwOGpnJGttGLQJCo8G6lqo1pqCJj73/BPzhoX lYeUlYvXB0UyYR+DDTHbOgO3TjfWWA9DpD21iRtvZM9jO4FAds/VesBOoVATYiQ8 6yeqHieRFc3mc4FJJwA4bxGvfjfLFIOB/JgoYJgMR/pWn05XqPRAlD806W+WJbtC ecReY+gQPB9Y+DhVpfWJIqsA9tyNnsug54SdJ+CbcSA1/w87GeSrUN0oOyLPQ4fi 3SqMvgXgBktgadXomm/Thz8MHqLRHbKWny0BWdIaVEO7XDuvocxugWm2AQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFF3xGhgN8XmU5IrTMYcs/QCtmroEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzczZDE0 NS1lYjk5LTRiZDgtYTgxNy02YmNlNzc5OWNiZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNzNkMTQ1 LWViOTktNGJkOC1hODE3LTZiY2U3Nzk5Y2JlYS8xL1hmRWFHQTN4ZVpUa2l0TXho eXo5QUsyYXVnUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw1A8MA0GCSqGSIb3DQEBCwUAA4IBAQAhy++d onO3dWybX+o+SU3GdB8E/mXBqmQlqCnPHTPA3mfZY67EKna4CJUWCZm/PlGUt4Ob hs9XX95WjQ9xQ+9SiTi50FrDRdWByxIizrtKQJULPBf0d1rTetG6rzlqE2ZnkEHZ inO4KUFXVRzg5jqyFF2ZUu0VQUY+c5ZBGyA5Nc3reVKCsaHqhgFNXIbQfKcVchTR 4IDoftvStwCVuW8N7cbw5XBZpSLa2f92XzdZd1Y+B+0ozinjosGd4fOGff5Kje2k 9LQy4RJfi3mtABSzfK9LGsy+sD+7+YEJc7eaUmw0qMre+qVHFEjR8Uq6l9rKp44e 1e5oYZBUmlpkLgRS -----END CERTIFICATE-----Generated at Mon Jan 26 10:16:44 2026 by rpki-client