This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer File: Xjy32YLH-e28k9TLQrlPoCnDgt8.cer (raw, json) Hash identifier: afFduIhgxSYtx7wdKrpgJ6K18gi53li02T+U2pKaDJc= Subject key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775911D411B8DA0277C682B874CF170C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.167.217.0/24 IP: 2a0d:cd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:11:d4:11:b8:da:02:77:c6:82:b8:74:cf:17:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:17:89:66:5e:0e:e8:24:c5:82:60:e1:62:11: 82:88:d1:37:0f:16:a1:dc:5d:73:a8:81:fc:f0:03: cb:e2:9e:d8:34:7e:ad:da:11:73:36:a0:cb:75:3b: 2e:64:94:44:ee:2a:45:fd:b3:30:47:46:26:ca:85: 1f:4d:16:41:04:c9:9c:78:28:91:49:67:6a:8a:11: 79:96:e5:70:05:61:f5:df:20:2a:f9:8a:75:7f:ef: 5c:51:46:9a:9f:68:b2:43:af:a6:07:ab:48:d4:82: 2e:67:a1:28:3b:4f:f4:be:47:f6:31:fb:4e:73:35: 0e:ae:52:8a:0a:e4:73:4e:27:68:bb:8f:bd:28:72: 4f:08:4c:2c:6e:62:ba:94:13:84:1e:d0:05:d2:a3: 01:e7:50:85:56:70:d8:ab:4e:29:4f:31:f8:dd:79: e8:f1:0b:1a:4d:4e:bc:86:77:02:68:51:61:a2:ff: 82:a5:9e:8f:7e:83:9e:22:b6:5d:d7:a9:99:cd:98: 79:dc:67:8a:6e:5c:59:5d:ed:b9:90:b4:c8:18:49: ab:5a:e1:8b:57:2f:bb:28:4c:a4:c6:61:87:cf:6c: 3a:c2:4e:28:75:6b:9d:6d:ce:df:eb:1a:ad:cc:e2: 88:99:a6:eb:b6:27:67:08:01:79:c6:66:73:ee:3b: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.217.0/24 IPv6: 2a0d:cd00::/29 Signature Algorithm: sha256WithRSAEncryption 00:e9:6f:f3:8e:8c:cc:63:47:ab:79:6c:ad:1f:78:73:81:07: e7:b6:3e:8c:f3:a5:28:0b:68:6e:ae:60:1c:9e:1a:44:50:cc: f9:dd:ee:ee:a1:1e:c0:f5:91:fc:e2:d6:d5:67:a3:42:65:1a: 85:dc:9f:09:26:ef:0b:8b:f4:74:a3:82:06:ad:5c:e0:b1:f8: fc:08:28:8d:50:22:68:98:be:f6:95:0a:71:5f:f1:e7:9d:6a: b5:0c:f5:ca:54:59:41:59:bd:69:9c:81:25:2a:ed:7a:af:e8: bf:03:2f:c7:25:9f:4a:23:d9:7c:77:79:40:6b:cb:a4:d1:ad: 04:60:1e:c2:1b:22:df:f7:f6:08:6e:36:a0:74:3c:22:30:48: e0:68:fb:b4:50:5a:f0:92:73:b9:e4:4f:c0:99:2b:fa:a2:e9: 4d:45:d6:d7:2d:c4:43:e4:c5:9e:d6:0c:b8:2f:34:95:72:ab: a9:6f:17:c4:2d:83:2e:b4:d2:c6:fe:9d:b2:bc:60:42:be:f2: 4e:fe:d3:f9:ab:66:e6:f9:41:77:4a:3b:48:6e:56:5d:56:f1: 63:7f:00:3c:d3:29:e6:e1:be:55:13:db:37:6f:e2:21:1a:06: 8f:1b:2f:0d:29:b1:61:ed:48:f5:05:8c:de:10:d6:fc:7b:80: 19:fb:fa:e5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WRHUEbjaAnfGgrh0zxcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTNjYjdkOTgyYzdmOWVkYmM5M2Q0Y2I0MmI5NGZhMDI5YzM4MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ReJZl4O6CTFgmDhYhGCiNE3Dxah 3F1zqIH88APL4p7YNH6t2hFzNqDLdTsuZJRE7ipF/bMwR0YmyoUfTRZBBMmceCiR SWdqihF5luVwBWH13yAq+Yp1f+9cUUaan2iyQ6+mB6tI1IIuZ6EoO0/0vkf2MftO czUOrlKKCuRzTidou4+9KHJPCEwsbmK6lBOEHtAF0qMB51CFVnDYq04pTzH43Xno 8QsaTU68hncCaFFhov+CpZ6PfoOeIrZd16mZzZh53GeKblxZXe25kLTIGEmrWuGL Vy+7KEykxmGHz2w6wk4odWudbc7f6xqtzOKImabrtidnCAF5xmZz7jtFYwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFF48t9mCx/ntvJPUy0K5T6Apw4LfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzFmOGJi OC02MzQyLTQ0MGYtYjA1Zi05ZjJjYzY0ZTA3NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMWY4YmI4 LTYzNDItNDQwZi1iMDVmLTlmMmNjNjRlMDc0NS8xL1hqeTMyWUxILWUyOGs5VExR cmxQb0NuRGd0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuafZMA0EAgACMAcDBQMqDc0AMA0GCSqGSIb3 DQEBCwUAA4IBAQAA6W/zjozMY0ereWytH3hzgQfntj6M86UoC2hurmAcnhpEUMz5 3e7uoR7A9ZH84tbVZ6NCZRqF3J8JJu8Li/R0o4IGrVzgsfj8CCiNUCJomL72lQpx X/HnnWq1DPXKVFlBWb1pnIElKu16r+i/Ay/HJZ9KI9l8d3lAa8uk0a0EYB7CGyLf 9/YIbjagdDwiMEjgaPu0UFrwknO55E/AmSv6oulNRdbXLcRD5MWe1gy4LzSVcqup bxfELYMutNLG/p2yvGBCvvJO/tP5q2bm+UF3SjtIblZdVvFjfwA80ynm4b5VE9s3 b+IhGgaPGy8NKbFh7Uj1BYzeENb8e4AZ+/rl -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:06 2026 by rpki-client