This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer File: pX1M_mD4owpND_lLlOut_IjJrBE.cer (raw, json) Hash identifier: 6+GlgAAuqRWzorZtlmEyXzXDapud5Q+a7q7vz+GBpXo= Subject key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5A48EF8BFB7D2E3F3D3D758D8B70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.3.32.0/19 IP: 37.58.0.0/20 IP: 37.152.96.0/19 IP: 46.34.224.0/19 IP: 151.236.224.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5a:48:ef:8b:fb:7d:2e:3f:3d:3d:75:8d:8b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:42:d8:88:e0:b2:24:91:8a:a6:d8:7c:fe: c8:f7:c8:be:16:21:ea:02:72:45:1b:06:33:af:ba: 25:51:14:4d:d6:23:3f:d1:92:b0:e1:06:a7:2e:c0: b0:d3:53:1d:fe:e1:77:c9:31:45:ae:9c:6c:24:af: 52:22:ed:6e:b9:8b:c2:bb:d7:85:0c:b6:43:31:ef: e6:27:5f:ad:e3:a5:54:03:47:06:e6:69:1b:c9:9d: 28:44:41:c2:9a:65:d8:d2:4c:27:a7:98:d8:85:f2: e0:b3:57:3a:b6:a9:31:05:e7:0a:e2:99:5d:ab:fe: cf:50:a1:dd:69:5c:14:48:f6:54:26:94:2d:87:c7: 1b:61:d5:62:8a:ce:a4:c4:29:ac:19:ee:a6:cf:e0: fe:74:f5:a7:01:ad:d6:c1:ff:ee:3d:15:91:60:c2: d0:23:67:11:dc:20:ac:2f:78:fa:1f:66:3c:eb:f8: b5:d5:67:eb:16:98:6f:53:0e:47:1a:49:b7:32:3b: ff:38:cd:af:ed:d9:0f:5b:e3:5a:69:20:5e:a1:8a: 9f:21:1b:aa:ff:c9:88:a0:10:74:4e:31:ef:69:9b: c8:42:e8:b1:d4:36:85:e9:ed:2a:d2:f8:0e:d8:d4: f4:d2:d9:6a:e4:37:28:44:fd:df:b4:80:73:3a:71: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.32.0/19 37.58.0.0/20 37.152.96.0/19 46.34.224.0/19 151.236.224.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:a7:2b:30:43:b6:a3:89:bd:67:3f:a3:06:22:3d:47:d0:bb: 7e:60:38:f1:36:3c:d7:62:ec:ae:d4:7f:87:4f:09:c8:ce:ca: df:76:3c:64:74:17:a3:7d:7d:93:7d:6d:5e:c1:5a:5a:3a:ab: 79:f6:06:a4:98:b5:d9:fd:56:70:cd:fa:0e:b6:6b:7d:c0:41: 1e:f9:83:27:37:8b:eb:b0:c9:d4:a1:79:19:e9:86:31:7b:13: 61:04:0c:d1:6d:b5:42:e2:98:e0:53:12:11:80:61:05:ed:d1: 2f:9f:ba:c0:80:91:35:be:32:75:a0:69:81:c2:fa:f9:83:42: 72:06:cf:92:34:49:a5:aa:e3:29:0a:0b:06:aa:6f:97:e0:fd: 55:91:8f:58:e6:90:22:76:73:a5:cb:ff:66:71:49:2b:98:42: 19:1c:ba:fb:d1:25:c1:85:ee:68:9f:20:04:a5:e2:fb:db:06: f8:af:5a:cb:dd:48:02:20:09:81:a7:82:f9:cc:aa:e6:19:18: fa:da:02:a5:54:92:88:1c:95:30:4a:1d:52:f9:d8:c4:ea:a4: 84:14:bc:7b:82:59:92:1d:5b:31:f2:79:e6:82:6d:16:ec:37: 65:16:ae:58:67:6c:d6:0b:03:54:e0:fb:00:7f:8b:37:91:5f: 76:64:78:cc -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt57VpI74v7fS4/PT11jYtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTdkNGNmZTYwZjhhMzBhNGQwZmY5NGI5NGViYWRmYzg4YzlhYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWVC2IjgsiSRiqbYfP7I98i+FiHq AnJFGwYzr7olURRN1iM/0ZKw4QanLsCw01Md/uF3yTFFrpxsJK9SIu1uuYvCu9eF DLZDMe/mJ1+t46VUA0cG5mkbyZ0oREHCmmXY0kwnp5jYhfLgs1c6tqkxBecK4pld q/7PUKHdaVwUSPZUJpQth8cbYdViis6kxCmsGe6mz+D+dPWnAa3Wwf/uPRWRYMLQ I2cR3CCsL3j6H2Y86/i11WfrFphvUw5HGkm3Mjv/OM2v7dkPW+NaaSBeoYqfIRuq /8mIoBB0TjHvaZvIQuix1DaF6e0q0vgO2NT00tlq5DcoRP3ftIBzOnGOkQIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFKV9TP5g+KMKTQ/5S5TrrfyIyawRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzQ4YzA3 Mi0yMmRlLTQ0ZDctYmVkOC1lODBmMzIwNzNmM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNDhjMDcy LTIyZGUtNDRkNy1iZWQ4LWU4MGYzMjA3M2YzZC8xL3BYMU1fbUQ0b3dwTkRfbExs T3V0X0lqSnJCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQFHwMgAwQEJToAAwQFJZhgAwQFLiLgAwQEl+zg MA0GCSqGSIb3DQEBCwUAA4IBAQBKpyswQ7ajib1nP6MGIj1H0Lt+YDjxNjzXYuyu 1H+HTwnIzsrfdjxkdBejfX2TfW1ewVpaOqt59gakmLXZ/VZwzfoOtmt9wEEe+YMn N4vrsMnUoXkZ6YYxexNhBAzRbbVC4pjgUxIRgGEF7dEvn7rAgJE1vjJ1oGmBwvr5 g0JyBs+SNEmlquMpCgsGqm+X4P1VkY9Y5pAidnOly/9mcUkrmEIZHLr70SXBhe5o nyAEpeL72wb4r1rL3UgCIAmBp4L5zKrmGRj62gKlVJKIHJUwSh1S+djE6qSEFLx7 glmSHVsx8nnmgm0W7DdlFq5YZ2zWCwNU4PsAf4s3kV92ZHjM -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client