This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer File: _X0csRSU6ziY8Q09Y1vnXxay3FE.cer (raw, json) Hash identifier: 1+VNvXBYCGNmWcnDIy59VlOq+OyLIuyhf2EB3t6PC9k= Subject key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12C0DE66370E044B984E0BF387CDA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47708 IP: 134.25.0.0/16 IP: 2001:678:330::/48 IP: 2001:67c:d8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c0:de:66:37:0e:04:4b:98:4e:0b:f3:87:cd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:c4:35:0b:6a:e3:fe:e2:a0:c6:cc:93:1e: 5d:81:b7:90:27:8b:17:bc:94:8c:7b:4a:63:e3:70: aa:36:b3:64:32:58:30:3f:fd:8b:91:87:aa:ed:0c: 9d:a4:94:93:56:c7:38:ff:7b:eb:a1:d7:ce:c6:b7: 63:8c:90:42:29:e5:56:3a:f8:97:b1:63:c4:8b:99: ed:57:b8:86:62:ae:49:bd:4c:be:d0:6b:15:02:6e: 9a:87:29:1d:14:52:2a:c5:fc:63:45:fd:6a:f9:0e: 52:b4:af:1d:20:0a:d0:71:e3:7d:20:fe:b1:15:da: a6:fa:5e:93:25:34:13:01:5a:ad:d9:65:03:6a:f1: df:32:cc:6d:62:a1:dd:c8:17:fb:88:84:8d:b7:02: fb:ba:dc:9c:d4:38:ac:b1:f0:3d:8c:ce:b4:28:8d: cf:b7:4a:fa:3f:03:05:a9:88:df:c8:bd:3c:e0:76: ff:75:d0:39:97:79:ff:49:b7:69:78:e5:30:b0:6c: 23:61:53:d1:b1:6c:e5:b9:69:99:4f:87:e8:70:4a: a3:99:4a:9c:97:c0:77:cf:2a:74:60:b6:40:00:65: 2c:bf:61:8d:3d:4a:e9:26:d7:08:ec:c6:51:0e:c0: 8d:15:c1:a3:38:fe:02:34:76:9b:db:1c:b3:e9:39: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.25.0.0/16 IPv6: 2001:678:330::/48 2001:67c:d8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47708 Signature Algorithm: sha256WithRSAEncryption 7e:63:72:8e:0f:cf:4c:e7:43:62:14:9c:a2:d4:7b:e2:55:da: 75:b1:87:75:47:84:ea:1b:50:c7:6e:a2:e2:5f:7b:f0:00:b2: b9:60:7f:df:08:df:60:ed:b6:52:30:c4:b0:d0:25:11:42:24: 36:ca:bf:a5:1c:f3:64:03:3f:1a:32:e4:10:90:5c:10:19:8c: 5e:56:53:78:41:2a:71:9f:58:e1:a6:fe:7f:ba:74:52:7e:53: 0e:17:e0:eb:9c:1a:94:2e:de:f1:89:fd:e7:b2:17:20:b6:99: d9:2c:69:34:1f:6d:2a:cc:09:32:c2:bf:f8:ac:59:39:c2:1d: a3:7d:c1:14:45:26:74:dc:37:63:83:64:b8:3c:65:9c:c7:03: 42:ac:c9:ff:89:ec:fc:25:f2:19:a7:f1:43:25:e8:6a:10:d4: c9:f6:be:98:ae:14:a9:b8:f8:db:90:de:3e:89:31:3d:51:55: a8:d2:42:8e:3b:92:46:aa:1f:79:38:8b:c0:57:36:75:3b:fb: ed:4c:12:e1:39:2b:96:58:e7:35:54:d7:ee:89:53:0d:70:ad: aa:4b:d2:6f:69:fc:5c:7a:86:d1:e7:16:ce:eb:1f:56:ac:46: 41:99:32:77:fe:8f:14:03:48:5b:50:dd:22:06:e2:f5:10:4c: 97:d8:9d:61 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt8EsDeZjcOBEuYTgvzh82lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDdkMWNiMTE0OTRlYjM4OThmMTBkM2Q2MzViZTc1ZjE2YjJkYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/nENQtq4/7ioMbMkx5dgbeQJ4sX vJSMe0pj43CqNrNkMlgwP/2LkYeq7QydpJSTVsc4/3vrodfOxrdjjJBCKeVWOviX sWPEi5ntV7iGYq5JvUy+0GsVAm6ahykdFFIqxfxjRf1q+Q5StK8dIArQceN9IP6x Fdqm+l6TJTQTAVqt2WUDavHfMsxtYqHdyBf7iISNtwL7utyc1DissfA9jM60KI3P t0r6PwMFqYjfyL084Hb/ddA5l3n/SbdpeOUwsGwjYVPRsWzluWmZT4focEqjmUqc l8B3zyp0YLZAAGUsv2GNPUrpJtcI7MZRDsCNFcGjOP4CNHab2xyz6TmgaQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFP19HLEUlOs4mPENPWNb518WstxRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2E2YzE1 Mi0zN2QzLTRmODYtOGY2ZS03NjU5YmY4NmFjNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYTZjMTUy LTM3ZDMtNGY4Ni04ZjZlLTc2NTliZjg2YWM0Yy8xL19YMGNzUlNVNnppWThRMDlZ MXZuWHhheTNGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzALBAIAATAFAwMAhhkwGAQCAAIwEgMHACABBngDMAMHACABBnwA 2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAulwwDQYJKoZIhvcNAQELBQADggEB AH5jco4Pz0znQ2IUnKLUe+JV2nWxh3VHhOobUMduouJfe/AAsrlgf98I32DttlIw xLDQJRFCJDbKv6Uc82QDPxoy5BCQXBAZjF5WU3hBKnGfWOGm/n+6dFJ+Uw4X4Ouc GpQu3vGJ/eeyFyC2mdksaTQfbSrMCTLCv/isWTnCHaN9wRRFJnTcN2ODZLg8ZZzH A0Ksyf+J7Pwl8hmn8UMl6GoQ1Mn2vpiuFKm4+NuQ3j6JMT1RVajSQo47kkaqH3k4 i8BXNnU7++1MEuE5K5ZY5zVU1+6JUw1wrapL0m9p/Fx6htHnFs7rH1asRkGZMnf+ jxQDSFtQ3SIG4vUQTJfYnWE= -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:21 2026 by rpki-client