This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer File: XzpsIZQcHhO__E1E1hvSWV_dj-g.cer (raw, json) Hash identifier: 7SQXaEhPrJnCrWkZGiG0zXk2xDhxgn4UD9FtH+2e6bI= Subject key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA7571F8DAF2FE152B4231105C4C81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215082 IP: 91.233.120.0/24 IP: 194.104.235.0/24 IP: 194.117.79.0/24 IP: 2a14:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:75:71:f8:da:f2:fe:15:2b:42:31:10:5c:4c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:c9:2a:25:47:36:4f:5b:58:cc:57:b8:3e: 52:0f:7b:5b:05:67:57:dc:de:d9:2e:ab:22:48:ca: 4c:3c:3a:79:36:88:d9:3c:82:d4:05:46:47:6d:fa: e5:15:db:9e:52:de:c3:40:53:28:f9:60:66:45:f1: 46:24:70:b2:02:e6:8b:73:d4:c5:ed:38:6c:cf:c9: a8:78:a0:69:fe:ec:f2:44:91:99:53:3c:8f:ab:fe: 83:10:18:23:ed:16:0a:84:21:70:a9:38:4e:00:5e: d2:72:b5:8d:db:87:5d:43:49:e6:f8:3d:05:b4:c8: ce:9b:94:29:7b:b1:58:3c:f4:30:3e:b9:63:87:22: 7d:e4:d8:55:d4:81:49:38:13:e6:be:a5:eb:b4:69: ff:96:74:c0:04:44:4d:77:be:0f:27:48:61:b2:e9: 30:de:d5:2d:ab:27:70:f0:3d:05:35:82:21:4f:57: dd:97:67:2c:10:1b:c8:eb:8f:15:20:4a:63:a0:5d: 6c:68:f3:09:d2:9c:c1:78:8a:9f:71:e8:3a:28:65: c2:f7:c6:ab:da:39:a0:69:6c:9f:6a:98:9b:df:16: 33:48:7f:95:ae:70:bc:22:de:0e:d7:61:37:d4:b9: 7b:cb:bb:ec:47:41:c3:45:8f:52:1e:60:e1:de:16: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.120.0/24 194.104.235.0/24 194.117.79.0/24 IPv6: 2a14:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215082 Signature Algorithm: sha256WithRSAEncryption 95:18:76:43:2f:68:34:6f:d0:4f:7e:aa:db:7a:ce:17:da:18: c6:07:d2:bc:c2:ef:45:fd:86:10:df:27:f1:9f:ed:6a:53:c9: 2d:5c:dd:b1:1b:3f:1d:a8:8d:29:f3:b5:57:37:38:2b:6a:6c: cb:f4:fb:23:aa:09:34:0e:09:fb:d4:7a:57:d2:cc:36:ae:b1: 88:24:1c:1f:33:ba:01:59:1e:5f:29:57:c9:ac:dd:50:3d:e3: ff:1e:63:bc:2f:07:53:2e:29:f4:3d:82:2f:2c:d0:14:f5:71: 08:70:dd:58:20:c4:ce:d9:80:53:a6:5d:a3:a2:08:57:19:ba: 79:d9:39:e3:dc:a7:b7:82:93:35:39:6a:34:83:2a:2c:b8:ba: d0:ec:db:35:7d:10:67:d9:5f:5e:fb:11:42:02:1e:1a:d0:79: 10:ff:1e:29:1c:46:99:aa:9b:cd:1e:35:fc:9f:bc:7a:cc:7c: 43:66:8e:bb:ee:06:d4:d6:a6:ff:09:39:7e:32:2f:27:f8:df: 53:8d:7f:fd:8e:6d:47:d5:a2:b2:d5:bc:14:da:01:d1:04:23: 96:cb:d1:b1:98:40:c4:8e:4d:fe:65:cf:b5:81:d4:84:2f:ac: c0:93:55:4b:4c:b0:39:16:26:4a:16:8d:63:af:4a:a4:79:d2: 83:85:bf:de -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9ynVx+Nry/hUrQjEQXEyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjNhNmMyMTk0MWMxZTEzYmZmYzRkNDRkNjFiZDI1OTVmZGQ4ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoefJKiVHNk9bWMxXuD5SD3tbBWdX 3N7ZLqsiSMpMPDp5NojZPILUBUZHbfrlFdueUt7DQFMo+WBmRfFGJHCyAuaLc9TF 7Thsz8moeKBp/uzyRJGZUzyPq/6DEBgj7RYKhCFwqThOAF7ScrWN24ddQ0nm+D0F tMjOm5Qpe7FYPPQwPrljhyJ95NhV1IFJOBPmvqXrtGn/lnTABERNd74PJ0hhsukw 3tUtqydw8D0FNYIhT1fdl2csEBvI648VIEpjoF1saPMJ0pzBeIqfceg6KGXC98ar 2jmgaWyfapib3xYzSH+VrnC8It4O12E31Ll7y7vsR0HDRY9SHmDh3hagYQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFF86bCGUHB4Tv/xNRNYb0llf3Y/oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2JhMzBi Yi1hYzBiLTQ1YTAtOWYwYy1jZjg2OTg3NTdkMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvYmEzMGJi LWFjMGItNDVhMC05ZjBjLWNmODY5ODc1N2QzNy8xL1h6cHNJWlFjSGhPX19FMUUx aHZTV1ZfZGotZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW+l4AwQAwmjrAwQAwnVPMA0EAgACMAcDBQMq FD7AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIKjANBgkqhkiG9w0BAQsFAAOC AQEAlRh2Qy9oNG/QT36q23rOF9oYxgfSvMLvRf2GEN8n8Z/talPJLVzdsRs/HaiN KfO1Vzc4K2psy/T7I6oJNA4J+9R6V9LMNq6xiCQcHzO6AVkeXylXyazdUD3j/x5j vC8HUy4p9D2CLyzQFPVxCHDdWCDEztmAU6Zdo6IIVxm6edk549ynt4KTNTlqNIMq LLi60OzbNX0QZ9lfXvsRQgIeGtB5EP8eKRxGmaqbzR41/J+8esx8Q2aOu+4G1Nam /wk5fjIvJ/jfU41//Y5tR9WistW8FNoB0QQjlsvRsZhAxI5N/mXPtYHUhC+swJNV S0ywORYmShaNY69KpHnSg4W/3g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:17 2026 by rpki-client