This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer File: XiNRj6qblKQtGjtNn2O5dDlNBmI.cer (raw, json) Hash identifier: L/uN3KpFPXddJ1bwKOyu628D66D7+cSXWnS+cg6XpgM= Subject key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12BA30549EDC4F3731CF53AC427032 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24700 AS: 42865 AS: 61316 AS: 62160 IP: 46.174.184.0/21 IP: 78.108.176.0/20 IP: 94.198.224.0/21 IP: 94.198.240.0/21 IP: 176.10.90.0/24 IP: 185.10.208.0/22 IP: 185.41.52.0/22 IP: 193.33.212.0/23 IP: 2a03:6540::/32 IP: 2a04:a380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ba:30:54:9e:dc:4f:37:31:cf:53:ac:42:70:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:b8:90:da:84:2e:8e:ff:33:ff:59:c6:78: 54:dd:1f:df:4a:c3:95:8c:30:bc:89:c3:ae:b0:5d: f9:66:b4:3b:8f:24:c9:c0:5f:79:74:67:44:24:a3: 72:39:66:21:d3:99:8b:70:be:8e:15:62:a1:64:1a: f1:af:3a:35:81:73:db:60:77:97:2c:f5:5d:40:71: 33:7f:c8:1e:04:56:8f:00:63:7e:56:49:2e:20:e3: 2b:42:4b:e8:dc:76:0d:7e:b5:d1:97:87:dc:a0:6c: 8a:db:68:d3:8e:a6:e1:72:5d:d8:27:9e:8d:22:a1: 1c:a2:c2:74:c1:e1:eb:5b:4f:da:8a:ff:49:08:59: 6e:b8:09:d8:f4:02:8c:18:92:10:cd:bb:df:35:b0: f0:4d:c2:80:ac:a1:cf:d4:09:55:90:83:52:fc:f6: 17:01:ce:d3:5a:bd:80:e2:87:1f:44:5e:d7:d9:f9: 74:c3:f3:f0:d9:5e:25:bc:95:31:a7:82:7f:77:33: 5d:82:64:d1:cc:d3:59:e0:37:e8:d3:89:7f:5a:d5: 5e:68:11:38:d8:12:bf:89:07:97:b7:15:e0:0b:e6: 74:a6:ec:c3:1a:d4:f4:9e:9c:db:ab:b9:fa:6d:5a: 4f:86:13:56:94:69:1b:eb:38:1e:3d:c1:0b:ec:87: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.184.0/21 78.108.176.0/20 94.198.224.0/21 94.198.240.0/21 176.10.90.0/24 185.10.208.0/22 185.41.52.0/22 193.33.212.0/23 IPv6: 2a03:6540::/32 2a04:a380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24700 42865 61316 62160 Signature Algorithm: sha256WithRSAEncryption 45:10:36:ff:bf:49:1b:d5:77:da:05:07:1f:56:7e:00:cb:74: 8f:62:67:fd:74:e9:d7:de:f5:35:d7:8b:64:f5:f8:b5:cc:cf: e8:da:48:f8:6b:c1:b5:97:d7:bd:f3:63:06:d7:06:47:74:1e: 51:d8:90:fa:58:ee:76:d5:b5:7f:69:86:c0:32:9c:25:cd:46: 75:88:36:c7:ee:72:30:9e:33:4d:be:48:77:a1:ac:07:28:ad: 00:65:2b:89:2b:a5:00:5d:34:95:56:81:ca:e8:e2:e8:25:1f: 60:ec:b3:6d:e7:75:93:ff:73:0f:61:f4:78:e4:fa:2f:f7:c7: cd:98:d2:fe:d1:6a:d0:c8:4e:10:ff:58:9d:20:05:15:9a:36: 53:4f:84:a2:35:d6:21:52:96:12:04:d9:c8:63:12:57:e8:38: 38:f9:3c:61:fd:fd:17:5b:bb:b2:ca:10:13:0d:0f:e3:96:ac: 33:87:2a:d4:5b:2e:67:28:a5:c0:64:29:83:af:76:04:10:66: 6a:84:d8:74:11:fa:27:a6:44:24:2a:68:ae:6c:91:1d:8b:17: 36:91:d4:8b:45:25:c1:43:d3:f6:d9:f8:93:ed:2c:fd:92:21: 36:a2:2c:5d:d5:08:e7:34:e3:e5:15:f3:0a:9b:a1:a4:50:b5: f0:f2:0b:70 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt8ErowVJ7cTzcxz1OsQnAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTIzNTE4ZmFhOWI5NGE0MmQxYTNiNGQ5ZjYzYjk3NDM5NGQwNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocm4kNqELo7/M/9ZxnhU3R/fSsOV jDC8icOusF35ZrQ7jyTJwF95dGdEJKNyOWYh05mLcL6OFWKhZBrxrzo1gXPbYHeX LPVdQHEzf8geBFaPAGN+VkkuIOMrQkvo3HYNfrXRl4fcoGyK22jTjqbhcl3YJ56N IqEcosJ0weHrW0/aiv9JCFluuAnY9AKMGJIQzbvfNbDwTcKArKHP1AlVkINS/PYX Ac7TWr2A4ocfRF7X2fl0w/Pw2V4lvJUxp4J/dzNdgmTRzNNZ4Dfo04l/WtVeaBE4 2BK/iQeXtxXgC+Z0puzDGtT0npzbq7n6bVpPhhNWlGkb6zgePcEL7Ids1QIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzQxNGIz Ni1lY2E5LTRlMjItYWVkNS1hNDhhYzMxZGJiZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNDE0YjM2 LWVjYTktNGUyMi1hZWQ1LWE0OGFjMzFkYmJmMC8xL1hpTlJqNnFibEtRdEdqdE5u Mk81ZERsTkJtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQDLq64AwQETmywAwQDXsbgAwQDXsbwAwQAsApa AwQCuQrQAwQCuSk0AwQBwSHUMBQEAgACMA4DBQAqA2VAAwUDKgSjgDAoBggrBgEF BQcBCAEB/wQZMBegFTATAgJgfAIDAKdxAgMA74QCAwDy0DANBgkqhkiG9w0BAQsF AAOCAQEARRA2/79JG9V32gUHH1Z+AMt0j2Jn/XTp1971NdeLZPX4tczP6NpI+GvB tZfXvfNjBtcGR3QeUdiQ+ljudtW1f2mGwDKcJc1GdYg2x+5yMJ4zTb5Id6GsByit AGUriSulAF00lVaByuji6CUfYOyzbed1k/9zD2H0eOT6L/fHzZjS/tFq0MhOEP9Y nSAFFZo2U0+EojXWIVKWEgTZyGMSV+g4OPk8Yf39F1u7ssoQEw0P45asM4cq1Fsu ZyilwGQpg692BBBmaoTYdBH6J6ZEJCpormyRHYsXNpHUi0UlwUPT9tn4k+0s/ZIh NqIsXdUI5zTj5RXzCpuhpFC18PILcA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:20 2026 by rpki-client