This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer File: x5g7OpdY_L54cz2RVa7SZsiCojw.cer (raw, json) Hash identifier: Tn/K9dtlnxbnmRCWJCPhuRYT5cKj7PXW1peOoz2q6To= Subject key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3A397E48F3D5A275D53B3A8C4DD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16342 AS: 29553 AS: 30782 AS: 42084 AS: 51353 AS: 51619 IP: 31.182.0.0/15 IP: 77.237.0.0/19 IP: 85.89.160.0/19 IP: 91.189.0.0/21 IP: 130.255.152.0/21 IP: 176.107.40.0/21 IP: 185.67.216.0/22 IP: 185.91.212.0/22 IP: 188.246.128.0/19 IP: 195.210.60.0/23 IP: 195.234.20.0/23 IP: 217.76.112.0/20 IP: 217.113.224.0/20 IP: 2a03:af80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3a:39:7e:48:f3:d5:a2:75:d5:3b:3a:8c:4d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:e1:13:7e:50:1b:75:1f:9a:e3:90:f4:47: a6:e7:30:47:f6:3c:52:64:8c:49:39:6d:f8:69:8b: 3f:bc:5e:42:a6:57:67:29:97:87:6b:4b:f7:14:3d: d8:a9:e7:68:d1:9b:05:8e:4e:b6:54:9d:cc:4a:e2: 91:cb:60:11:11:2f:8e:9b:5b:e5:c6:15:57:06:8f: a6:15:a1:0f:28:b2:69:10:60:6f:e8:6d:c1:61:e6: ff:97:79:eb:c2:4d:0b:8c:b0:db:e7:48:42:54:f7: 7e:99:5b:2b:64:c1:c2:ac:fa:d3:ab:7c:83:b8:e8: d1:56:54:bd:ac:f9:ac:06:81:ce:95:4d:2b:8f:f0: 32:80:a4:72:73:b7:e4:07:63:ea:94:e7:ad:be:b3: 8c:6b:d9:ca:92:03:2a:15:09:8f:90:d3:e7:fc:92: eb:13:b9:75:b5:4e:8f:fa:a0:db:4c:fa:77:e8:06: 54:3e:8c:b1:d0:f1:cf:db:45:68:91:b2:a5:97:3c: a0:0e:8d:c2:bd:5f:95:87:83:ea:96:6c:97:ce:41: c6:28:64:fa:ca:4b:6a:29:d0:34:04:15:ec:37:de: 9f:72:92:5e:74:c4:a9:2c:1b:f5:25:5e:b5:f4:b3: 05:98:c3:6f:08:04:86:76:3a:9c:76:1c:ba:27:7a: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.182.0.0/15 77.237.0.0/19 85.89.160.0/19 91.189.0.0/21 130.255.152.0/21 176.107.40.0/21 185.67.216.0/22 185.91.212.0/22 188.246.128.0/19 195.210.60.0/23 195.234.20.0/23 217.76.112.0/20 217.113.224.0/20 IPv6: 2a03:af80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16342 29553 30782 42084 51353 51619 Signature Algorithm: sha256WithRSAEncryption 6f:90:67:e5:15:bc:c1:ad:90:cb:4c:a4:77:9f:9b:c9:06:4a: 21:e6:4e:3f:f9:19:88:6c:90:ab:64:fe:3b:2c:b9:e2:06:5b: 0c:eb:b8:ac:59:94:96:13:5e:6a:ac:ae:a4:1f:48:b7:c6:d6: 23:9d:b2:40:54:e6:da:d8:04:f2:95:46:3f:e5:18:76:8a:e6: d0:81:11:95:62:c3:83:52:ce:dc:51:f9:81:87:5c:5f:e6:b2: 81:34:e1:56:77:63:3b:d6:a9:6c:a9:a9:09:58:bf:52:f2:02: 5f:1e:db:86:57:af:33:33:74:ac:13:42:c8:bc:b7:cb:cb:e6: f1:d2:3f:b8:0a:55:3b:27:1e:f6:40:be:e3:00:25:ef:4c:f5: 16:51:21:77:2c:ee:05:c6:86:79:57:f5:af:45:60:3a:51:5b: d0:c7:51:df:82:3b:a4:d5:7c:b2:7a:c6:47:04:62:e5:aa:b6: 8b:9c:51:8b:ee:59:a5:89:03:d0:05:24:1a:6c:ca:f0:c6:d9: 8b:19:16:f2:65:9b:0d:a2:2e:4b:8f:16:9e:f6:0d:58:45:0e: ec:0f:5b:8b:3b:85:e7:aa:ff:bf:84:1a:1e:69:a3:9f:0e:e5: ed:57:c5:9e:47:8a:9a:5c:6c:2a:39:60:50:b5:9d:94:5d:4b: 82:f6:c9:11 -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZt26zo5fkjz1aJ11Ts6jE3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk4M2IzYTk3NThmY2JlNzg3MzNkOTE1NWFlZDI2NmM4ODJhMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYvhE35QG3UfmuOQ9Eem5zBH9jxS ZIxJOW34aYs/vF5CpldnKZeHa0v3FD3Yqedo0ZsFjk62VJ3MSuKRy2ARES+Om1vl xhVXBo+mFaEPKLJpEGBv6G3BYeb/l3nrwk0LjLDb50hCVPd+mVsrZMHCrPrTq3yD uOjRVlS9rPmsBoHOlU0rj/AygKRyc7fkB2PqlOetvrOMa9nKkgMqFQmPkNPn/JLr E7l1tU6P+qDbTPp36AZUPoyx0PHP20VokbKllzygDo3CvV+Vh4PqlmyXzkHGKGT6 yktqKdA0BBXsN96fcpJedMSpLBv1JV619LMFmMNvCASGdjqcdhy6J3o6DwIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFMeYOzqXWPy+eHM9kVWu0mbIgqI8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzgxMWQx Ni1iNTEzLTQ3ZWQtOWU3MS0yMzg0MDVmMmNkZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvODExZDE2 LWI1MTMtNDdlZC05ZTcxLTIzODQwNWYyY2RlOS8xL3g1ZzdPcGRZX0w1NGN6MlJW YTdTWnNpQ29qdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHUGCCsGAQUF BwEHAQH/BGYwZDBTBAIAATBNAwMBH7YDBAVN7QADBAVVWaADBANbvQADBAOC/5gD BAOwaygDBAK5Q9gDBAK5W9QDBAW89oADBAHD0jwDBAHD6hQDBATZTHADBATZceAw DQQCAAIwBwMFAyoDr4AwMAYIKwYBBQUHAQgBAf8EITAfoB0wGwICP9YCAnNxAgJ4 PgIDAKRkAgMAyJkCAwDJozANBgkqhkiG9w0BAQsFAAOCAQEAb5Bn5RW8wa2Qy0yk d5+byQZKIeZOP/kZiGyQq2T+Oyy54gZbDOu4rFmUlhNeaqyupB9It8bWI52yQFTm 2tgE8pVGP+UYdorm0IERlWLDg1LO3FH5gYdcX+aygTThVndjO9apbKmpCVi/UvIC Xx7bhlevMzN0rBNCyLy3y8vm8dI/uApVOyce9kC+4wAl70z1FlEhdyzuBcaGeVf1 r0VgOlFb0MdR34I7pNV8snrGRwRi5aq2i5xRi+5ZpYkD0AUkGmzK8MbZixkW8mWb DaIuS48WnvYNWEUO7A9bizuF56r/v4QaHmmjnw7l7VfFnkeKmlxsKjlgULWdlF1L gvbJEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:54 2026 by rpki-client