This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer File: x1VwJGd3DtabNnt3u-ZAvG20FT4.cer (raw, json) Hash identifier: njgTrPInMoPZdPcaRu+ef1etNmXFf4VFTPqfZhUTzLk= Subject key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E52EB1745670E9BE04BE68A61B1F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29286 IP: 5.61.192.0/21 IP: 5.175.64.0/20 IP: 84.254.128.0/18 IP: 88.202.0.0/17 IP: 95.210.0.0/16 IP: 176.227.128.0/20 IP: 185.3.88.0/22 IP: 185.28.64.0/22 IP: 213.209.160.0/19 IP: 2a00:ca0::/32 IP: 2a02:49c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:52:eb:17:45:67:0e:9b:e0:4b:e6:8a:61:b1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c755702467770ed69b367b77bbe640bc6db4153e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:bb:b5:6a:22:02:fd:37:4f:d1:af:ac:ff: 2b:aa:7d:6b:c5:ba:2f:45:74:76:64:1b:9f:fd:a3: 74:f9:76:25:5f:a0:8e:01:c3:83:c2:5f:88:4f:10: ea:15:f4:04:b3:da:ff:58:0b:a7:5e:73:ba:73:57: 33:ff:8c:79:9b:13:13:0a:60:13:34:fd:be:db:05: af:51:60:69:61:ed:32:fe:79:9a:b6:56:39:1d:62: 2d:d6:2e:e5:73:e8:b3:79:2f:02:18:64:d4:79:e2: 51:e5:2f:da:02:e2:35:25:84:20:8f:ff:5c:6e:55: d3:c3:80:e0:3a:b2:f3:55:43:26:25:63:1a:0c:45: 20:35:96:d8:86:04:82:f5:70:bf:0c:2f:7e:ce:dc: d4:c1:17:9e:09:78:9d:6b:90:9e:55:77:7b:5c:87: 15:63:1e:4c:b1:68:b4:d0:b0:41:0b:23:a7:67:61: 7d:88:d0:f7:56:c4:96:15:fd:62:a8:f1:28:81:94: 17:52:2e:13:dc:fe:47:31:8e:15:cf:ae:64:65:ea: db:63:b8:5b:c5:61:ae:40:11:63:44:b8:29:87:4a: da:ff:29:d9:c8:7c:9c:6c:7a:7c:be:8b:f4:7b:74: 6a:5c:32:c1:a8:17:5d:c7:46:38:09:30:47:bf:17: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.192.0/21 5.175.64.0/20 84.254.128.0/18 88.202.0.0/17 95.210.0.0/16 176.227.128.0/20 185.3.88.0/22 185.28.64.0/22 213.209.160.0/19 IPv6: 2a00:ca0::/32 2a02:49c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29286 Signature Algorithm: sha256WithRSAEncryption 79:ba:d9:3c:7e:f8:10:83:77:69:45:29:e9:3d:b5:02:e5:ca: a9:d3:fc:4d:e0:b8:7d:a4:70:d6:b7:89:d1:de:94:29:70:48: b9:39:ed:92:52:2d:90:5d:56:52:bd:75:60:12:15:b4:d2:77: a8:47:a3:c4:ed:cc:a4:43:a3:bc:fd:e4:8a:1e:63:b7:ac:71: 00:e0:12:e4:57:ea:62:6f:1a:9d:c3:65:13:a1:0e:c1:de:d0: e3:d3:e6:4b:c3:3d:fa:54:41:61:af:c1:86:f7:cb:9b:0f:2a: f9:2a:ef:ff:f2:e3:20:a5:30:c8:aa:3b:30:06:5c:5c:6a:c4: cd:67:3e:d0:b0:fc:63:be:c2:ce:83:be:ca:1e:25:91:12:1a: d6:34:a9:1c:c1:df:81:49:9b:e4:38:cd:e6:e1:05:d1:03:ed: c8:76:aa:63:a0:5a:1d:99:22:e2:0a:0f:35:23:33:b3:db:9a: 9d:15:bd:48:2b:5f:4e:15:70:6e:65:5a:01:23:c3:23:2c:e0: 0e:c4:bf:a9:db:96:52:94:4c:96:9a:47:2e:47:f3:20:1a:99: 19:98:f6:b3:72:ae:79:e4:1a:c5:9b:b3:66:d2:eb:81:80:3d: c3:34:bb:86:d4:2f:a9:d7:bd:0b:72:92:25:43:6e:a4:67:81: cf:9f:ff:85 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt5flLrF0VnDpvgS+aKYbH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzU1NzAyNDY3NzcwZWQ2OWIzNjdiNzdiYmU2NDBiYzZkYjQxNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqS7tWoiAv03T9GvrP8rqn1rxbov RXR2ZBuf/aN0+XYlX6COAcODwl+ITxDqFfQEs9r/WAunXnO6c1cz/4x5mxMTCmAT NP2+2wWvUWBpYe0y/nmatlY5HWIt1i7lc+izeS8CGGTUeeJR5S/aAuI1JYQgj/9c blXTw4DgOrLzVUMmJWMaDEUgNZbYhgSC9XC/DC9+ztzUwReeCXida5CeVXd7XIcV Yx5MsWi00LBBCyOnZ2F9iND3VsSWFf1iqPEogZQXUi4T3P5HMY4Vz65kZerbY7hb xWGuQBFjRLgph0ra/ynZyHycbHp8vov0e3RqXDLBqBddx0Y4CTBHvxe7xwIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFMdVcCRndw7WmzZ7d7vmQLxttBU+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzI0M2Y5 MS04NzQ3LTQ5ODEtOWNiZi0xZDM3MzQ5OTkyNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQzZjkx LTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8xL3gxVndKR2QzRHRhYk5udDN1 LVpBdkcyMEZUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzA7BAIAATA1AwQDBT3AAwQEBa9AAwQGVP6AAwQHWMoAAwMAX9ID BASw44ADBAK5A1gDBAK5HEADBAXV0aAwFAQCAAIwDgMFACoADKADBQAqAknAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnJmMA0GCSqGSIb3DQEBCwUAA4IBAQB5utk8 fvgQg3dpRSnpPbUC5cqp0/xN4Lh9pHDWt4nR3pQpcEi5Oe2SUi2QXVZSvXVgEhW0 0neoR6PE7cykQ6O8/eSKHmO3rHEA4BLkV+pibxqdw2UToQ7B3tDj0+ZLwz36VEFh r8GG98ubDyr5Ku//8uMgpTDIqjswBlxcasTNZz7QsPxjvsLOg77KHiWREhrWNKkc wd+BSZvkOM3m4QXRA+3IdqpjoFodmSLiCg81IzOz25qdFb1IK19OFXBuZVoBI8Mj LOAOxL+p25ZSlEyWmkcuR/MgGpkZmPazcq555BrFm7Nm0uuBgD3DNLuG1C+p170L cpIlQ26kZ4HPn/+F -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:22 2026 by rpki-client