This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer (raw, json) Hash identifier: o1qIa5tswaBqVm9IDzt5nmPUjNukH0jDLzMd4HONkQY= Subject key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4CDC55820564ED5F0E084489A0B64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21350 IP: 80.244.160.0/20 IP: 95.175.32.0/19 IP: 185.106.128.0/22 IP: 2a00:dc20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cd:c5:58:20:56:4e:d5:f0:e0:84:48:9a:0b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:f8:b9:7b:88:fd:2b:14:45:32:04:6a:bb: 23:de:31:97:11:5a:3b:ce:64:2e:b9:60:e6:68:de: bd:dc:d6:90:3b:5c:cc:89:e2:3d:91:7d:65:74:e9: 69:97:32:8d:a5:51:cd:86:47:1a:eb:c3:ce:d2:e4: 2f:3b:f7:29:14:d0:be:1b:7e:82:b7:7c:81:c8:04: 6f:b9:12:45:3e:a9:59:68:93:b2:00:87:64:fe:27: 2a:63:c4:8b:ce:6c:b9:1e:19:44:c6:c2:70:00:75: 67:2e:d0:06:33:db:2f:7e:f3:a0:2c:9b:b8:80:6d: b9:8b:48:ae:a4:89:14:06:4c:91:ed:64:c0:62:4c: 14:f8:2a:25:1e:cc:9d:46:99:70:b4:b8:97:a2:83: d9:f7:00:ba:fc:be:c9:62:c8:68:79:3e:0b:37:3b: bd:2f:f1:13:f5:3e:3e:3a:6c:dd:dc:a6:cb:4b:e9: 3d:7b:27:ae:78:75:e3:87:a0:38:ee:91:06:83:81: d3:fd:5f:57:92:f2:17:33:ab:18:8f:35:da:5c:5a: c5:e5:e5:9a:76:21:fe:be:04:93:37:3c:01:88:e4: d0:c7:79:60:3f:82:eb:3c:b7:e3:93:6e:43:d1:9d: ae:18:4a:d1:b6:65:08:b0:67:13:90:df:b9:05:ec: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.160.0/20 95.175.32.0/19 185.106.128.0/22 IPv6: 2a00:dc20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21350 Signature Algorithm: sha256WithRSAEncryption 7e:36:fc:1f:a7:f4:fb:14:72:ff:06:8e:10:24:b1:f0:4b:d9: de:0e:4d:ec:a6:93:39:57:8f:bc:51:a3:7a:bb:5a:9f:b1:2a: a9:50:4a:69:2a:e1:aa:cf:12:d1:4c:60:05:b8:54:31:f7:52: e3:80:2f:52:4e:4e:a0:72:8a:52:51:c3:4f:a3:8b:46:3c:0a: 5e:50:ee:51:e4:83:2a:4f:e1:1c:e3:eb:a5:b7:87:d2:bb:34: e0:06:44:49:8c:e0:a8:8b:e1:3c:3b:a4:66:a4:38:de:15:25: 03:86:b1:32:f2:34:31:60:9e:7b:0f:d9:ba:27:68:bc:52:33: 2d:db:f9:6e:2e:cb:e2:3f:bc:e8:38:8a:e2:f5:1d:24:9b:43: f4:67:51:bf:d8:a0:79:4c:c3:d3:89:80:67:9e:94:a0:94:c1: 92:8a:6d:59:5a:f9:0f:cd:dd:4b:b2:74:92:16:9d:21:69:2f: 05:40:b8:85:95:aa:e9:44:ed:6a:83:b2:d6:15:17:48:cd:e1: 73:38:88:0a:63:00:cf:69:3e:8e:f0:0d:c8:52:ac:8f:a0:86: cb:30:6c:73:e5:45:af:61:34:12:47:17:65:30:2b:0d:75:7d: d5:31:8b:f2:5d:15:c0:df:d1:62:c6:41:6a:90:f8:ed:1b:05: f9:39:ef:81 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7pM3FWCBWTtXw4IRImgtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTk1ZmRmZDI4Y2RjMDNkODlkMjE0ZTRhZDNhNmM1ZmIzZWJhY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjH4uXuI/SsURTIEarsj3jGXEVo7 zmQuuWDmaN693NaQO1zMieI9kX1ldOlplzKNpVHNhkca68PO0uQvO/cpFNC+G36C t3yByARvuRJFPqlZaJOyAIdk/icqY8SLzmy5HhlExsJwAHVnLtAGM9svfvOgLJu4 gG25i0iupIkUBkyR7WTAYkwU+ColHsydRplwtLiXooPZ9wC6/L7JYshoeT4LNzu9 L/ET9T4+Omzd3KbLS+k9eyeueHXjh6A47pEGg4HT/V9XkvIXM6sYjzXaXFrF5eWa diH+vgSTNzwBiOTQx3lgP4LrPLfjk25D0Z2uGErRtmUIsGcTkN+5Beyr+wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFF6V/f0ozcA9idIU5K06bF+z66y/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzdiZmYz ZS0wM2FhLTRlMGEtYjJmYy00YTdkZGYyZDg2YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvN2JmZjNl LTAzYWEtNGUwYS1iMmZjLTRhN2RkZjJkODZiZC8xL1hwWDlfU2pOd0QySjBoVGty VHBzWDdQcnJMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUPSgAwQFX68gAwQCuWqAMA0EAgACMAcDBQAq ANwgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlNmMA0GCSqGSIb3DQEBCwUAA4IB AQB+Nvwfp/T7FHL/Bo4QJLHwS9neDk3sppM5V4+8UaN6u1qfsSqpUEppKuGqzxLR TGAFuFQx91LjgC9STk6gcopSUcNPo4tGPApeUO5R5IMqT+Ec4+ult4fSuzTgBkRJ jOCoi+E8O6RmpDjeFSUDhrEy8jQxYJ57D9m6J2i8UjMt2/luLsviP7zoOIri9R0k m0P0Z1G/2KB5TMPTiYBnnpSglMGSim1ZWvkPzd1LsnSSFp0haS8FQLiFlarpRO1q g7LWFRdIzeFzOIgKYwDPaT6O8A3IUqyPoIbLMGxz5UWvYTQSRxdlMCsNdX3VMYvy XRXA39FixkFqkPjtGwX5Oe+B -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:15 2026 by rpki-client