This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer File: tXZXfSAIXEwi_IARyNGpP2MhHA8.cer (raw, json) Hash identifier: GS/jhqxyOv1XSpK2bA32zXkCtclUrNl7lN7Omj6WGzc= Subject key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC74C8A6937C548C5B6D0B996FCBC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.101.36.0/24 IP: 2a0e:96c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:74:c8:a6:93:7c:54:8c:5b:6d:0b:99:6f:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:79:92:55:c1:4b:eb:8c:19:c0:4a:30:bd: 05:5f:b0:cb:0e:35:91:00:69:ef:77:72:c9:61:34: c7:27:a1:f2:a1:d2:7b:78:7b:a7:f4:98:da:1c:3d: f6:c5:52:23:7a:c1:88:ec:02:73:f1:dc:c4:de:54: c4:a4:4a:c7:8f:77:fa:3e:ae:f7:51:a3:44:0b:00: 1b:0a:d6:42:ab:cf:f2:62:a7:e2:9b:3b:ab:fd:01: 3e:c7:64:b5:19:0a:f5:37:4f:dd:a2:d5:71:f0:e6: ef:8c:53:3a:1a:46:e3:ce:96:d9:25:d1:20:56:18: 4b:65:d2:6e:09:f4:67:76:75:67:d1:57:c3:31:90: c8:3d:35:1f:b3:72:9c:5d:ab:1e:35:c1:42:12:34: f5:e8:1b:11:80:b0:6e:32:89:1b:1d:78:2b:3d:26: 21:e6:59:b3:ea:9e:7e:7a:0b:2e:b9:f1:0e:d6:b2: 49:78:0e:74:88:ff:0a:31:6b:9e:6a:a9:9d:0d:2f: e5:c9:8b:a3:cf:b4:ee:85:07:95:ee:83:87:8e:60: 04:ea:6b:43:6c:85:f6:f1:43:6f:10:d9:95:cd:00: 44:68:c2:2d:fa:a7:5d:c8:74:2b:1f:24:a4:ec:04: 71:17:7a:26:b0:fb:9f:06:63:d2:01:95:6b:c3:95: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.36.0/24 IPv6: 2a0e:96c0::/29 Signature Algorithm: sha256WithRSAEncryption 38:10:fb:e6:f8:a0:a3:d1:b4:7f:f6:4d:b1:fd:2c:57:d7:6b: 06:25:ff:3e:d7:20:35:ca:6b:73:9e:db:c3:78:5d:37:10:77: 1a:f6:b8:3a:66:91:8d:2a:97:ce:d3:0a:bb:df:19:d7:5d:b0: ce:04:bd:0e:33:2f:2d:b2:95:96:d9:26:da:06:df:32:79:7b: 79:87:8b:69:e9:2b:3d:bd:5f:2a:6b:83:fb:dc:04:3e:be:3e: 3b:a1:40:ee:b2:7c:48:d4:a6:ff:66:95:b1:66:96:f8:8f:61: a8:9a:79:30:3d:30:05:51:82:71:59:a8:b4:c0:7a:4a:2a:fb: c7:27:0c:e1:e5:42:71:2d:f7:53:3d:16:51:40:0a:69:91:4a: ed:39:89:36:1a:e3:1c:7a:a6:1a:92:02:67:21:a5:64:8e:90: 8a:ee:ea:6b:47:b4:c9:03:1a:28:18:56:e0:a8:8b:cc:cc:ee: 47:b8:11:3d:ba:9e:82:b5:dc:df:92:7e:04:40:50:45:a9:cc: de:63:6b:19:92:83:4a:84:a2:0b:2f:11:fb:a0:17:95:48:70: ee:49:27:d2:3a:62:98:3d:4c:09:6c:94:56:ea:4c:3a:92:99: c7:3e:3a:4a:cd:61:44:11:31:cf:1f:05:14:6e:ea:24:08:db: 36:f5:0d:7f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57HTIppN8VIxbbQuZb8vAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc2NTc3ZDIwMDg1YzRjMjJmYzgwMTFjOGQxYTkzZjYzMjExYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd55klXBS+uMGcBKML0FX7DLDjWR AGnvd3LJYTTHJ6HyodJ7eHun9JjaHD32xVIjesGI7AJz8dzE3lTEpErHj3f6Pq73 UaNECwAbCtZCq8/yYqfimzur/QE+x2S1GQr1N0/dotVx8ObvjFM6GkbjzpbZJdEg VhhLZdJuCfRndnVn0VfDMZDIPTUfs3KcXaseNcFCEjT16BsRgLBuMokbHXgrPSYh 5lmz6p5+egsuufEO1rJJeA50iP8KMWueaqmdDS/lyYujz7TuhQeV7oOHjmAE6mtD bIX28UNvENmVzQBEaMIt+qddyHQrHySk7ARxF3omsPufBmPSAZVrw5UwhQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLV2V30gCFxMIvyAEcjRqT9jIRwPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzE1MTcw NS0wYjBjLTQ4YmYtYTQwZS1iN2NhMWZlNmMxODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMTUxNzA1 LTBiMGMtNDhiZi1hNDBlLWI3Y2ExZmU2YzE4NC8xL3RYWlhmU0FJWEV3aV9JQVJ5 TkdwUDJNaEhBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuWUkMA0EAgACMAcDBQMqDpbAMA0GCSqGSIb3 DQEBCwUAA4IBAQA4EPvm+KCj0bR/9k2x/SxX12sGJf8+1yA1ymtzntvDeF03EHca 9rg6ZpGNKpfO0wq73xnXXbDOBL0OMy8tspWW2SbaBt8yeXt5h4tp6Ss9vV8qa4P7 3AQ+vj47oUDusnxI1Kb/ZpWxZpb4j2GomnkwPTAFUYJxWai0wHpKKvvHJwzh5UJx LfdTPRZRQAppkUrtOYk2GuMceqYakgJnIaVkjpCK7uprR7TJAxooGFbgqIvMzO5H uBE9up6Ctdzfkn4EQFBFqczeY2sZkoNKhKILLxH7oBeVSHDuSSfSOmKYPUwJbJRW 6kw6kpnHPjpKzWFEETHPHwUUbuokCNs29Q1/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:35 2026 by rpki-client