This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer File: Xo08C2QUychuPJSnFN-yactekWk.cer (raw, json) Hash identifier: V6ba1slAvxh24+Ta2OV4DdwLFs+MSemgCl2/SS7/rCM= Subject key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3786932D362548992FE3F97BDE455 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.9.0/24 IP: 194.0.36.0/24 IP: 2001:678:c::/48 IP: 2001:678:4c::/48 IP: 2001:67c:1348::/48 IP: 2001:67c:2160::/48 IP: 2001:67c:217c::/48 IP: 2001:67c:2218::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:78:69:32:d3:62:54:89:92:fe:3f:97:bd:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:db:e0:66:0a:9a:a5:1d:9b:55:f1:45:8d: ca:c9:52:f7:58:7d:b5:05:88:fd:6d:d3:8b:20:b7: 9b:67:8b:74:ea:ba:4e:18:80:a5:47:8c:b5:c3:c6: 6b:9f:41:bf:1c:ad:11:6c:3d:77:73:11:36:a5:65: 59:31:ca:f6:50:00:bb:12:8c:65:ac:31:87:98:c3: f9:15:1d:b5:67:5a:f1:8e:b3:da:d2:00:17:d9:a7: 2d:5c:48:4b:bb:ff:cf:f7:93:0a:10:69:02:5e:c1: 26:cd:3f:a9:ac:02:b4:a0:fc:16:e9:86:9d:bf:d5: 49:47:41:93:89:b2:ef:56:df:b3:4b:40:06:93:17: fe:a9:ce:e4:a0:c1:16:ee:6b:cf:40:fb:d0:75:ef: 9d:60:fd:0d:9b:04:ac:2c:dc:52:a0:a6:cf:46:e3: fd:4e:0f:24:05:9d:12:c1:6c:fc:dd:00:73:fe:09: 66:c3:ef:d3:18:d0:59:10:3f:fb:3b:1b:35:09:d8: 85:08:cc:7b:c8:14:90:bd:9d:b6:8e:9e:3c:2b:0c: c8:45:68:22:93:02:21:a9:37:6c:73:80:3d:ad:c7: f7:4d:18:f6:05:a3:87:4a:fc:fb:56:c3:49:53:75: 29:b1:3a:99:ea:4e:fc:df:65:6b:51:5a:46:90:c0: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.9.0/24 194.0.36.0/24 IPv6: 2001:678:c::/48 2001:678:4c::/48 2001:67c:1348::/48 2001:67c:2160::/48 2001:67c:217c::/48 2001:67c:2218::/47 Signature Algorithm: sha256WithRSAEncryption 7f:d2:42:2d:c8:a5:2b:95:1c:64:22:27:8e:37:2f:77:9c:36: 03:9b:14:4b:c5:0e:29:96:4c:fc:97:c1:c0:61:c5:12:c3:ac: 40:c1:1e:f8:c5:7f:b0:51:1e:59:6c:b8:70:77:a7:f3:f6:35: 98:50:b8:53:b5:ad:f0:36:24:61:ee:8f:77:49:88:22:08:d1: b2:b2:92:33:b5:bd:ae:5f:10:22:90:43:26:32:d4:ee:c2:c5: e5:b1:8b:12:ce:cf:ee:d1:dc:57:37:6b:c0:88:c1:8d:30:83: e9:75:03:f2:8d:38:5e:c1:49:c9:9d:5d:c4:0e:f5:ea:cf:3a: 08:c3:41:bf:41:29:b4:98:2e:2b:40:97:ad:c4:cc:16:3a:e2: 55:41:c0:0f:07:3b:66:5a:a0:fb:9a:b1:7d:99:ad:06:72:bd: 0a:c8:b6:c2:34:b0:57:07:0d:56:4c:f6:03:c4:4a:0d:ed:56: 61:0b:7d:ae:18:49:2e:30:2c:08:c3:7e:bd:e8:09:ec:70:6b: 43:e5:fc:0e:f2:18:cd:cf:08:c8:45:25:a7:44:be:1d:4d:c2: 09:67:8d:cc:8c:b3:1c:ae:15:e8:22:2d:a6:d2:39:3b:49:bf: 44:3d:4e:72:71:59:3f:be:12:49:dd:43:a1:45:c6:29:a9:57: 97:dc:9f:00 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt4o3hpMtNiVImS/j+XveRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZThkM2MwYjY0MTRjOWM4NmUzYzk0YTcxNGRmYjI2OWNiNWU5MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreDb4GYKmqUdm1XxRY3KyVL3WH21 BYj9bdOLILebZ4t06rpOGIClR4y1w8Zrn0G/HK0RbD13cxE2pWVZMcr2UAC7Eoxl rDGHmMP5FR21Z1rxjrPa0gAX2actXEhLu//P95MKEGkCXsEmzT+prAK0oPwW6Yad v9VJR0GTibLvVt+zS0AGkxf+qc7koMEW7mvPQPvQde+dYP0NmwSsLNxSoKbPRuP9 Tg8kBZ0SwWz83QBz/glmw+/TGNBZED/7Oxs1CdiFCMx7yBSQvZ22jp48KwzIRWgi kwIhqTdsc4A9rcf3TRj2BaOHSvz7VsNJU3UpsTqZ6k7832VrUVpGkMAK2wIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFF6NPAtkFMnIbjyUpxTfsmnLXpFpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2VjMzUz MS04MmY4LTRiNGQtYjU5MC0yMzQzMDk1MDYwOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZWMzNTMx LTgyZjgtNGI0ZC1iNTkwLTIzNDMwOTUwNjA5Yy8xL1hvMDhDMlFVeWNodVBKU25G Ti15YWN0ZWtXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF BwEHAQH/BFQwUjASBAIAATAMAwQAwgAJAwQAwgAkMDwEAgACMDYDBwAgAQZ4AAwD BwAgAQZ4AEwDBwAgAQZ8E0gDBwAgAQZ8IWADBwAgAQZ8IXwDBwEgAQZ8IhgwDQYJ KoZIhvcNAQELBQADggEBAH/SQi3IpSuVHGQiJ443L3ecNgObFEvFDimWTPyXwcBh xRLDrEDBHvjFf7BRHllsuHB3p/P2NZhQuFO1rfA2JGHuj3dJiCII0bKykjO1va5f ECKQQyYy1O7CxeWxixLOz+7R3Fc3a8CIwY0wg+l1A/KNOF7BScmdXcQO9erPOgjD Qb9BKbSYLitAl63EzBY64lVBwA8HO2ZaoPuasX2ZrQZyvQrItsI0sFcHDVZM9gPE Sg3tVmELfa4YSS4wLAjDfr3oCexwa0Pl/A7yGM3PCMhFJadEvh1NwglnjcyMsxyu FegiLabSOTtJv0Q9TnJxWT++EkndQ6FFximpV5fcnwA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:47 2026 by rpki-client