This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer (raw, json) Hash identifier: Ek9jJJW4QlMVPV4vrgdHmCtqKm49jBAkLWO5GSiNLFQ= Subject key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37703CE29B6B61C625CB7D75CE265 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209810 IP: 85.92.96.0/22 IP: 89.190.128.0/22 IP: 176.118.170.0/23 IP: 194.31.188.0/22 IP: 2a09:1980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:03:ce:29:b6:b6:1c:62:5c:b7:d7:5c:e2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:a7:2e:90:b0:70:fb:4e:70:64:33:3f:23: 79:1e:6e:e9:a0:0a:f8:c5:2b:01:e4:33:8c:96:ff: e8:4e:b8:e1:44:d0:a1:d3:17:3e:e4:d8:3f:7b:f0: 82:96:c3:c3:f0:99:72:04:35:e8:d0:71:e1:83:77: d5:3e:8c:b1:35:1a:f3:e6:76:31:c7:2b:aa:bf:28: 0e:01:d4:7c:89:da:92:2b:a7:81:be:10:32:c0:61: 2e:cc:44:ed:84:81:4f:1d:47:3d:5d:c1:81:51:7e: 7a:0f:12:33:3e:6f:19:e6:9c:fb:46:dd:fe:3e:9f: 2b:ad:f0:e2:72:91:81:90:9c:10:8f:35:46:3e:d2: a6:60:53:3b:8b:f9:1f:9b:43:8d:11:09:90:23:d9: 7c:03:f4:49:5b:ff:8e:53:01:fb:39:5e:6a:c4:e7: bc:3c:79:a6:3a:8b:62:95:3e:73:d5:24:7b:62:92: 40:d4:87:b1:a0:1c:fa:cb:7e:70:41:1f:a8:ce:63: 42:d0:d0:82:06:40:3e:ac:80:2a:67:bb:64:93:ba: 71:f3:de:0f:2e:da:59:1c:d3:ce:20:2f:31:d0:dd: 93:54:e6:35:f3:8a:42:a4:0f:50:c4:b2:43:3a:28: e9:cc:7b:6c:66:52:39:60:35:9c:0e:95:df:04:7f: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.92.96.0/22 89.190.128.0/22 176.118.170.0/23 194.31.188.0/22 IPv6: 2a09:1980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209810 Signature Algorithm: sha256WithRSAEncryption 89:54:2c:4a:0a:d1:7d:50:71:7a:b8:23:fc:7d:30:30:8b:54: ab:0d:c5:23:45:cf:01:18:b8:27:14:d0:e6:0a:5d:da:ed:02: a6:8d:e5:9a:ff:b7:d7:a6:8e:af:f5:63:b7:03:05:dd:0b:5c: 66:05:a1:6b:52:51:d5:23:93:9a:85:85:31:55:62:23:dc:8c: 73:fd:14:9d:7f:72:06:62:44:34:2e:23:9b:1c:d6:9e:0b:15: a3:07:f8:9e:c9:cb:a9:84:9d:b5:19:34:e0:97:1d:0e:19:0b: 12:55:69:d8:12:54:fb:f8:5e:c3:1a:3b:9b:a6:bb:29:5f:69: 97:fc:8a:a0:56:96:66:61:05:45:3c:48:d1:6f:97:54:d7:a3: 17:36:28:d7:7a:92:48:1f:82:f9:23:68:b4:27:c4:4b:46:ea: 83:5c:d6:0e:a8:c8:12:fb:b2:5e:5a:f4:eb:68:55:ff:5d:44: 48:9f:95:b3:dd:be:93:9c:98:56:ca:b3:d3:b5:c3:7a:04:72: b4:48:90:4d:72:22:da:cb:7d:b5:60:a3:84:ff:30:51:97:f3: 41:cb:3a:2c:7d:1d:59:cb:66:2b:fd:fb:51:c3:09:07:40:44: 7c:89:f9:2f:db:0b:ae:f9:94:64:4c:26:d4:af:bf:61:b2:85: dc:88:98:b1 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4o3cDzim2thxiXLfXXOJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTQyYzM1NjEyZjQ1YWY0MTEwMzUyMGFmMjc2MWNkYWE1MWUzYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtACnLpCwcPtOcGQzPyN5Hm7poAr4 xSsB5DOMlv/oTrjhRNCh0xc+5Ng/e/CClsPD8JlyBDXo0HHhg3fVPoyxNRrz5nYx xyuqvygOAdR8idqSK6eBvhAywGEuzETthIFPHUc9XcGBUX56DxIzPm8Z5pz7Rt3+ Pp8rrfDicpGBkJwQjzVGPtKmYFM7i/kfm0ONEQmQI9l8A/RJW/+OUwH7OV5qxOe8 PHmmOotilT5z1SR7YpJA1IexoBz6y35wQR+ozmNC0NCCBkA+rIAqZ7tkk7px894P LtpZHNPOIC8x0N2TVOY184pCpA9QxLJDOijpzHtsZlI5YDWcDpXfBH/LvwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzY3NDQ5 Ni05N2JkLTRlYjAtYTg4Ni04MjExOTk3OGQ2YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNjc0NDk2 LTk3YmQtNGViMC1hODg2LTgyMTE5OTc4ZDZiYi8xL1hrTERWaEwwV3ZRUkExSUs4 blljMnFVZU9xUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCVVxgAwQCWb6AAwQBsHaqAwQCwh+8MA0EAgAC MAcDBQMqCRmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzkjANBgkqhkiG9w0B AQsFAAOCAQEAiVQsSgrRfVBxergj/H0wMItUqw3FI0XPARi4JxTQ5gpd2u0Cpo3l mv+316aOr/VjtwMF3QtcZgWha1JR1SOTmoWFMVViI9yMc/0UnX9yBmJENC4jmxzW ngsVowf4nsnLqYSdtRk04JcdDhkLElVp2BJU+/hewxo7m6a7KV9pl/yKoFaWZmEF RTxI0W+XVNejFzYo13qSSB+C+SNotCfES0bqg1zWDqjIEvuyXlr062hV/11ESJ+V s92+k5yYVsqz07XDegRytEiQTXIi2st9tWCjhP8wUZfzQcs6LH0dWctmK/37UcMJ B0BEfIn5L9sLrvmUZEwm1K+/YbKF3IiYsQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:43 2026 by rpki-client