This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer (raw, json) Hash identifier: U+YibtOh/Z6my5gEsMRzSZ2JbgWIVd+bX0NjB1CVahA= Subject key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783543DC05E1E97AED8F946582F72D47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62125 AS: 203179 IP: 185.46.192.0/22 IP: 185.143.156.0/22 IP: 2a04:ab80::/29 IP: 2a07:3640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:43:dc:05:e1:e9:7a:ed:8f:94:65:82:f7:2d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:54:18:f7:e2:0e:f4:f3:91:05:bc:39:b4: de:8e:ca:d0:08:2b:1a:4e:1d:1a:42:77:9f:91:52: fb:28:5b:52:db:d5:35:4d:c5:16:bd:f6:cb:ca:dc: d0:9a:d6:d2:68:f8:e3:b5:56:bf:57:b1:27:77:64: 73:35:1e:14:1d:03:a5:9d:47:5e:3e:a7:fd:b4:16: b8:e7:92:e1:5d:2d:b8:5f:c1:a4:8c:6e:f4:c6:c3: c8:d8:8b:96:27:9b:dd:7f:9a:b8:ee:ae:ac:28:62: 39:84:48:6b:3e:a9:5a:a2:50:00:ef:33:f2:af:50: 2f:2f:d2:e0:f9:99:4b:72:4b:70:46:c4:61:40:03: 75:ec:a6:ae:28:1b:6d:ea:ee:80:69:ab:30:75:12: 62:0c:ae:3b:09:bc:51:bf:40:28:8e:89:e2:d1:22: a1:7d:9d:32:ea:59:28:20:93:8c:3c:24:97:42:47: b5:26:6a:3e:60:80:3d:6e:74:17:4e:40:60:fa:80: 9a:91:e3:a3:0c:bc:31:ef:75:79:a0:9e:a7:60:67: 6e:3d:34:e6:6f:a4:95:8a:1a:fd:a3:33:1f:21:69: 84:6e:95:e7:73:95:1e:0a:0e:03:b0:f1:f5:09:f0: 02:b6:e8:ab:37:71:94:70:09:8e:96:90:98:47:79: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.192.0/22 185.143.156.0/22 IPv6: 2a04:ab80::/29 2a07:3640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62125 203179 Signature Algorithm: sha256WithRSAEncryption 87:bd:5b:48:e7:9e:3e:25:cf:c6:ab:e2:73:41:a3:b7:2b:a5: 6c:27:46:d6:a4:d2:ca:0a:56:5c:71:72:94:72:92:0e:70:74: ed:f4:90:aa:d5:26:4d:a3:d2:18:99:ee:6d:bb:ab:73:a6:b4: 2e:92:b7:d0:7f:b1:58:6b:5f:29:5d:af:f2:c6:14:bc:8b:7c: 34:16:21:b6:50:e7:f1:35:e9:9a:35:f1:49:30:86:6b:18:11: 02:3c:19:9e:22:1c:86:02:89:ff:d6:82:19:ae:5e:bf:46:e5: fa:83:67:88:11:0d:fa:16:c2:54:b4:26:8c:09:88:16:8a:2a: 20:30:40:83:48:aa:ca:11:60:42:16:84:68:70:0b:db:65:47: f9:f8:7b:0a:66:a2:a0:ed:9b:51:70:d1:46:9d:b3:0b:1a:ff: 56:bf:d6:7d:ff:ff:14:c0:ee:c3:97:39:81:d2:4c:15:c1:09: 7f:cf:11:b1:06:4e:12:55:50:27:0a:9b:0e:d6:19:6a:c9:07: b5:dd:da:2d:79:94:d2:88:0b:13:b2:91:46:8e:64:4b:7c:81: 33:93:cb:5a:63:e0:d9:ed:94:bf:06:42:e2:6f:11:5d:00:99: 72:b4:dd:b9:37:0a:9a:43:bd:61:2c:cf:80:62:eb:7d:57:e2: d0:88:bf:a9 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4NUPcBeHpeu2PlGWC9y1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWNjYjdjZDFiOWQ2ZmMzOWQ3MTU4ZjJmZTljZjUyMTdhMTJkMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKNUGPfiDvTzkQW8ObTejsrQCCsa Th0aQnefkVL7KFtS29U1TcUWvfbLytzQmtbSaPjjtVa/V7End2RzNR4UHQOlnUde Pqf9tBa455LhXS24X8GkjG70xsPI2IuWJ5vdf5q47q6sKGI5hEhrPqlaolAA7zPy r1AvL9Lg+ZlLcktwRsRhQAN17KauKBtt6u6AaaswdRJiDK47CbxRv0Aojoni0SKh fZ0y6lkoIJOMPCSXQke1Jmo+YIA9bnQXTkBg+oCakeOjDLwx73V5oJ6nYGduPTTm b6SVihr9ozMfIWmEbpXnc5UeCg4DsPH1CfACtuirN3GUcAmOlpCYR3k6QQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFF7Mt80bnW/DnXFY8v6c9SF6EtN0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2VkYzhm My0wYmIyLTQxYWItYmE2NC1kMjI5NjdlMjJlZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvZWRjOGYz LTBiYjItNDFhYi1iYTY0LWQyMjk2N2UyMmVmMC8xL1hzeTN6UnVkYjhPZGNWanlf cHoxSVhvUzAzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuS7AAwQCuY+cMBQEAgACMA4DBQMqBKuAAwUD Kgc2QDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA8q0CAwMZqzANBgkqhkiG9w0B AQsFAAOCAQEAh71bSOeePiXPxqvic0GjtyulbCdG1qTSygpWXHFylHKSDnB07fSQ qtUmTaPSGJnubburc6a0LpK30H+xWGtfKV2v8sYUvIt8NBYhtlDn8TXpmjXxSTCG axgRAjwZniIchgKJ/9aCGa5ev0bl+oNniBEN+hbCVLQmjAmIFooqIDBAg0iqyhFg QhaEaHAL22VH+fh7CmaioO2bUXDRRp2zCxr/Vr/Wff//FMDuw5c5gdJMFcEJf88R sQZOElVQJwqbDtYZaskHtd3aLXmU0ogLE7KRRo5kS3yBM5PLWmPg2e2UvwZC4m8R XQCZcrTduTcKmkO9YSzPgGLrfVfi0Ii/qQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:11 2026 by rpki-client