This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer File: eXpIzBPiAOLT84r4MxjRvK9vYzE.cer (raw, json) Hash identifier: vQ9oxapZ63eyWA5WN8WX92nZEWjUO/dwnjuhLczSmdE= Subject key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12735D12D85AF01FAA7031A829A819 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16032 AS: 41678 IP: 89.185.128.0/19 IP: 194.46.0.0/19 IP: 194.46.96.0 -- 194.46.191.255 IP: 212.108.64.0/20 IP: 212.108.92.0/22 IP: 2a00:10f0::/32 IP: 2a00:4240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:73:5d:12:d8:5a:f0:1f:aa:70:31:a8:29:a8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:8d:a6:b2:1a:8a:13:4f:1a:2d:bf:0d:13: 31:ad:2a:af:46:fc:5a:b3:56:c5:50:a8:39:77:82: ba:be:50:cb:52:99:08:61:04:d6:d6:9e:1b:73:8c: 21:e4:fa:2c:62:7f:d4:36:51:3b:7f:a3:84:3b:b4: 09:14:f4:a8:b7:c6:95:ef:1a:04:99:47:b7:8d:dd: 47:1e:5d:45:c9:29:95:07:56:6f:f9:51:8c:dd:e7: 1d:6f:43:56:48:43:4c:07:ec:07:12:05:82:e8:dd: ce:ce:f5:a9:14:c5:e8:7e:11:39:ea:2f:7a:42:87: 2b:0d:a8:2e:f6:87:46:21:bb:d0:4a:53:a8:68:3e: 42:c8:e2:69:7b:1e:61:d5:af:93:cb:bd:5d:cc:56: d3:91:32:05:64:57:82:47:14:78:9f:b8:e1:9c:f8: 11:c9:75:5a:79:45:db:e0:ce:ad:2c:0e:d4:85:1b: 3a:4c:ec:4c:b6:be:f8:86:3c:e1:c6:f5:25:d1:ff: 85:34:08:ac:e4:dd:58:74:a6:67:70:18:10:95:41: 1a:99:62:7a:93:fa:7e:c3:b9:09:33:73:76:63:38: 5b:48:27:2d:33:38:ea:22:43:63:6d:df:cd:9b:ba: d9:5b:3f:29:2e:55:7f:df:9d:6e:7d:4b:15:06:b6: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.128.0/19 194.46.0.0/19 194.46.96.0-194.46.191.255 212.108.64.0/20 212.108.92.0/22 IPv6: 2a00:10f0::/32 2a00:4240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16032 41678 Signature Algorithm: sha256WithRSAEncryption 54:d9:8e:9c:21:e0:c3:3a:c7:63:bd:4b:c2:d4:f2:da:62:43: ef:8a:4c:d9:b2:1a:df:eb:db:61:ed:3e:97:34:19:9e:e6:fc: b8:9b:83:1b:3d:5e:a1:4f:47:a4:ae:16:1a:b1:86:57:5c:a6: 80:dd:99:ca:75:ef:1b:1c:30:2e:5a:f1:0f:20:f6:ae:37:3d: 7b:a3:98:08:8c:a2:de:20:b5:42:e7:c7:6b:7c:c2:0b:17:aa: 57:ef:23:55:5d:fd:56:3d:86:6f:d7:e3:3b:31:56:d0:78:96: b1:e1:69:52:21:d8:30:1e:e5:4e:98:89:3f:b0:99:ed:ab:16: cb:52:8e:4e:e5:a2:b4:19:11:45:2b:ec:06:85:40:5f:35:68: f2:85:a4:d8:84:4f:7d:3a:86:e8:ee:e2:7d:3f:38:b6:9c:9e: 3d:ca:47:80:bd:24:79:48:34:50:11:1f:55:74:fb:4c:e3:15: da:89:0b:a1:9c:06:a0:73:0f:c0:59:d1:ad:e8:88:85:ef:2e: 1d:d0:43:2f:ab:85:2a:41:2e:ab:e0:3b:1e:6c:a4:b6:a4:65: eb:0d:73:71:89:8c:35:ba:8c:6c:e9:79:e1:e2:45:1c:fd:30: 63:42:4b:17:7d:f9:12:d9:15:dc:62:83:d6:e3:e3:05:0e:b1: 0e:3c:69:7b -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt8EnNdEtha8B+qcDGoKagZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTdhNDhjYzEzZTIwMGUyZDNmMzhhZjgzMzE4ZDFiY2FmNmY2MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rKNprIaihNPGi2/DRMxrSqvRvxa s1bFUKg5d4K6vlDLUpkIYQTW1p4bc4wh5PosYn/UNlE7f6OEO7QJFPSot8aV7xoE mUe3jd1HHl1FySmVB1Zv+VGM3ecdb0NWSENMB+wHEgWC6N3OzvWpFMXofhE56i96 QocrDagu9odGIbvQSlOoaD5CyOJpex5h1a+Ty71dzFbTkTIFZFeCRxR4n7jhnPgR yXVaeUXb4M6tLA7UhRs6TOxMtr74hjzhxvUl0f+FNAis5N1YdKZncBgQlUEamWJ6 k/p+w7kJM3N2YzhbSCctMzjqIkNjbd/Nm7rZWz8pLlV/351ufUsVBrY5JwIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFHl6SMwT4gDi0/OK+DMY0byvb2MxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2I5Y2Vh MC02OTI4LTQ1ODQtYjMyMS03ZDdmNGI2MzQ4NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYjljZWEw LTY5MjgtNDU4NC1iMzIxLTdkN2Y0YjYzNDg0OS8xL2VYcEl6QlBpQU9MVDg0cjRN eGpSdks5dll6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAsBAIAATAmAwQFWbmAAwQFwi4AMAwDBAXCLmADBAbCLoADBATU bEADBALUbFwwFAQCAAIwDgMFACoAEPADBQAqAEJAMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAj6gAgMAos4wDQYJKoZIhvcNAQELBQADggEBAFTZjpwh4MM6x2O9S8LU 8tpiQ++KTNmyGt/r22HtPpc0GZ7m/Libgxs9XqFPR6SuFhqxhldcpoDdmcp17xsc MC5a8Q8g9q43PXujmAiMot4gtULnx2t8wgsXqlfvI1Vd/VY9hm/X4zsxVtB4lrHh aVIh2DAe5U6YiT+wme2rFstSjk7lorQZEUUr7AaFQF81aPKFpNiET306huju4n0/ OLacnj3KR4C9JHlINFARH1V0+0zjFdqJC6GcBqBzD8BZ0a3oiIXvLh3QQy+rhSpB LqvgOx5spLakZesNc3GJjDW6jGzpeeHiRRz9MGNCSxd9+RLZFdxig9bj4wUOsQ48 aXs= -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:51 2026 by rpki-client