This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer File: XuAEvvpVPds1Vk-3disF6yIuz5M.cer (raw, json) Hash identifier: AuQcFe3r+V231OLSv6Mj/0DhfHIDxlZOAlvRelIC75s= Subject key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6ECDE6C6F905E829E28191FCEC29E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 81.28.224.0/20 IP: 185.95.96.0/22 IP: 2a00:1c38::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ec:de:6c:6f:90:5e:82:9e:28:19:1f:ce:c2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:64:61:f1:f5:80:94:9a:e6:d7:87:b8:24: a9:de:51:a3:ff:47:53:6f:9f:ce:df:ae:33:7b:78: c8:94:bc:9f:58:76:a7:32:7a:75:e8:ce:a3:45:6a: 76:9c:b7:b9:94:99:0d:65:69:94:f7:fe:41:e3:3d: b9:fd:a0:33:e2:73:4a:bd:89:16:a2:06:98:94:ee: b9:72:91:f4:42:77:e9:ed:49:c6:34:a9:ce:a4:82: e8:69:76:b8:10:3b:31:f7:97:37:13:d2:13:3a:27: 4a:a3:52:e6:11:82:98:87:dc:2c:88:cb:c8:26:18: 2e:11:0d:8a:2f:ba:53:a9:31:a1:ca:d7:4b:8c:00: 23:ac:45:b6:95:ab:24:41:3f:3f:fe:66:87:89:60: 78:89:1c:a3:d7:2e:1f:13:bd:c8:2d:bd:cc:c8:d5: 86:97:28:33:2d:3b:5a:51:e5:92:39:cc:9d:f6:3c: 88:e2:2a:69:be:94:13:31:38:b4:88:cf:0f:f3:db: ed:4d:3e:cc:44:84:4f:b0:9d:a5:1f:e3:d5:6e:13: 47:89:4a:96:9c:9f:86:93:22:16:d4:3a:73:38:d8: e2:57:3b:60:13:0b:e5:90:79:42:a7:d8:d8:e0:72: 40:e7:eb:52:1b:9f:e9:30:57:a0:6c:71:15:40:0f: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.224.0/20 185.95.96.0/22 IPv6: 2a00:1c38::/29 Signature Algorithm: sha256WithRSAEncryption 03:5d:31:a3:b5:86:03:72:d6:77:25:c1:82:82:1e:40:bf:7b: f8:35:bd:9e:aa:14:b7:33:3a:98:58:7f:b9:07:be:ed:d7:36: 44:cb:de:97:e4:0d:7c:a4:4a:bc:43:39:18:f6:51:11:12:7c: 75:62:43:f9:5a:f0:65:c8:a3:b3:58:a4:3e:27:5c:c4:b0:72: e0:b3:de:0e:8c:58:3b:29:74:21:e2:a7:77:61:3b:23:42:37: e7:0a:d5:2f:70:ac:d0:58:60:38:8f:ac:b4:38:1a:fa:be:5a: 6a:0a:7f:55:ae:68:6e:31:1c:c0:77:2a:42:2f:f3:ae:70:74: 9e:fc:d0:81:35:8a:20:86:79:57:28:ef:ca:b5:7a:54:18:90: 8d:e1:e4:b6:4a:b2:09:ac:18:44:03:8d:73:1f:4b:b6:76:e1: 22:45:69:25:22:a2:9d:08:f4:d2:1f:3c:60:0e:8c:01:e3:97: 25:dc:b2:cd:cb:a3:bd:10:b0:30:db:64:f1:27:63:9f:cc:6b: b7:b8:4c:e0:c9:02:45:9b:7f:59:7d:27:96:57:b0:66:bc:0d: 62:42:41:4f:ed:bb:d0:9f:cc:31:58:50:eb:b9:ba:b1:b5:d6: 16:11:a8:84:4b:bd:48:65:bf:72:20:59:6f:79:d2:82:e7:43: 8f:95:43:49 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+puzebG+QXoKeKBkfzsKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWUwMDRiZWZhNTUzZGRiMzU1NjRmYjc3NjJiMDVlYjIyMmVjZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuNkYfH1gJSa5teHuCSp3lGj/0dT b5/O364ze3jIlLyfWHanMnp16M6jRWp2nLe5lJkNZWmU9/5B4z25/aAz4nNKvYkW ogaYlO65cpH0Qnfp7UnGNKnOpILoaXa4EDsx95c3E9ITOidKo1LmEYKYh9wsiMvI JhguEQ2KL7pTqTGhytdLjAAjrEW2laskQT8//maHiWB4iRyj1y4fE73ILb3MyNWG lygzLTtaUeWSOcyd9jyI4ippvpQTMTi0iM8P89vtTT7MRIRPsJ2lH+PVbhNHiUqW nJ+GkyIW1DpzONjiVztgEwvlkHlCp9jY4HJA5+tSG5/pMFegbHEVQA/mXwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFF7gBL76VT3bNVZPt3YrBesiLs+TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzNjMzVl YS03YzlhLTQ4ZTItYjNiMi1lMjI4YWFiNDUwMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvM2MzNWVh LTdjOWEtNDhlMi1iM2IyLWUyMjhhYWI0NTAxNC8xL1h1QUV2dnBWUGRzMVZrLTNk aXNGNnlJdXo1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEURzgAwQCuV9gMA0EAgACMAcDBQMqABw4MA0G CSqGSIb3DQEBCwUAA4IBAQADXTGjtYYDctZ3JcGCgh5Av3v4Nb2eqhS3MzqYWH+5 B77t1zZEy96X5A18pEq8QzkY9lEREnx1YkP5WvBlyKOzWKQ+J1zEsHLgs94OjFg7 KXQh4qd3YTsjQjfnCtUvcKzQWGA4j6y0OBr6vlpqCn9VrmhuMRzAdypCL/OucHSe /NCBNYoghnlXKO/KtXpUGJCN4eS2SrIJrBhEA41zH0u2duEiRWklIqKdCPTSHzxg DowB45cl3LLNy6O9ELAw22TxJ2OfzGu3uEzgyQJFm39ZfSeWV7BmvA1iQkFP7bvQ n8wxWFDrubqxtdYWEaiES71IZb9yIFlvedKC50OPlUNJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:30 2026 by rpki-client