This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer File: xJsfdrtbrG0MeWukcTDHaLHHOxw.cer (raw, json) Hash identifier: 1l9aASZ8Sx+8ckUR0PNVv+MVmOX4Tj4GFNVNNMlRuOw= Subject key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12979F1535D5F064F47E4E531FBE3B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202405 IP: 194.147.196.0 -- 194.147.207.255 IP: 2001:67c:2ec0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:97:9f:15:35:d5:f0:64:f4:7e:4e:53:1f:be:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:c3:79:8a:4d:5f:20:bd:5a:83:c9:8a:b8: 0e:cd:c5:3a:ea:53:95:c4:d3:1c:60:e2:e8:eb:de: 7b:b4:25:a3:e6:3c:17:be:93:34:91:dd:54:ea:f0: b0:3a:e9:72:7e:41:b5:f6:29:a9:82:6f:75:b5:76: 9f:19:49:31:71:65:f4:0d:57:50:bf:ae:c9:52:86: 0b:b7:9e:dd:14:d9:9f:95:86:b1:ff:08:ff:24:d9: f4:ab:d1:ae:4e:c5:b6:8b:aa:94:42:0d:58:03:a1: c0:78:45:2e:b1:3b:f0:0e:05:82:0c:b6:72:40:e1: ce:27:60:a2:a4:c4:f6:a8:36:9e:aa:a4:80:45:44: 90:99:4c:bd:fa:d9:31:f1:63:bc:1e:cf:68:74:f7: 67:37:d8:8f:9d:b9:ea:35:9c:23:8b:39:54:c4:1d: 9c:a3:c0:10:c0:e0:03:69:1e:1e:40:7d:c4:03:66: cf:f9:68:f8:65:6f:e3:19:bb:67:24:5c:0d:52:ce: 58:56:89:2b:1f:c0:a5:92:de:3e:7b:01:04:59:0a: 4e:81:d9:c6:f1:2e:41:7d:3b:18:56:a2:c1:d1:78: 2e:1e:83:e6:28:2a:25:12:4c:dd:d1:ac:63:35:55: e2:23:fa:bb:4f:a7:e5:f4:2f:28:da:7a:c3:56:c1: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.196.0-194.147.207.255 IPv6: 2001:67c:2ec0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202405 Signature Algorithm: sha256WithRSAEncryption 71:0e:0d:b7:21:c9:b3:37:e7:39:4d:06:3c:78:57:31:42:90: c9:65:39:4f:2c:4c:6a:49:27:7c:e6:bc:90:ba:f1:56:60:5b: 24:43:2b:38:b2:f0:11:00:66:7f:0e:6c:6f:9e:6e:15:29:81: 45:46:13:c9:1a:c8:05:2c:92:d4:7c:68:52:8a:4d:c3:8e:19: 07:3f:7f:9e:5d:ab:e6:fe:22:2c:c1:d4:de:6a:bb:a1:31:38: 99:9a:e1:23:37:0e:f6:23:21:4b:31:9b:72:36:b0:c1:9c:c3: b0:48:bc:c1:a3:60:5d:71:5d:9c:5a:cb:31:d1:cf:65:9c:49: f8:d0:dd:8e:7e:7c:e7:2d:cb:15:d8:9d:47:00:da:16:ab:c4: ce:f8:d0:5a:82:a9:67:91:f4:d9:cc:a0:18:91:2c:b3:10:9d: 00:8d:37:0a:b3:7d:6d:32:6a:3c:7b:9e:1c:06:d7:37:23:37: cd:13:52:eb:c8:35:6a:b0:30:c5:29:98:3d:20:bc:61:08:b6: 4d:07:9a:86:77:3a:92:ab:88:e2:b8:4e:df:93:dc:eb:db:54: 98:64:64:86:e8:a7:88:0f:79:2f:43:ad:67:1a:b8:b8:b1:ae: 64:45:1b:8d:8e:22:72:5a:91:61:ad:7a:03:d3:f8:c0:76:3c: b8:cd:2a:20 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt8EpefFTXV8GT0fk5TH747MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDliMWY3NmJiNWJhYzZkMGM3OTZiYTQ3MTMwYzc2OGIxYzczYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteXDeYpNXyC9WoPJirgOzcU66lOV xNMcYOLo6957tCWj5jwXvpM0kd1U6vCwOulyfkG19impgm91tXafGUkxcWX0DVdQ v67JUoYLt57dFNmflYax/wj/JNn0q9GuTsW2i6qUQg1YA6HAeEUusTvwDgWCDLZy QOHOJ2CipMT2qDaeqqSARUSQmUy9+tkx8WO8Hs9odPdnN9iPnbnqNZwjizlUxB2c o8AQwOADaR4eQH3EA2bP+Wj4ZW/jGbtnJFwNUs5YVokrH8Clkt4+ewEEWQpOgdnG 8S5BfTsYVqLB0XguHoPmKColEkzd0axjNVXiI/q7T6fl9C8o2nrDVsHMfwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFMSbH3a7W6xtDHlrpHEwx2ixxzscMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzg2ODZj ZC0xZjFjLTQ4NDUtODEyZC00YWQ0MDM1ZmFlN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvODY4NmNk LTFmMWMtNDg0NS04MTJkLTRhZDQwMzVmYWU3Yi8xL3hKc2ZkcnRickcwTWVXdWtj VERIYUxISE94dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzAUBAIAATAOMAwDBALCk8QDBATCk8AwDwQCAAIwCQMHACABBnwu wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFqUwDQYJKoZIhvcNAQELBQADggEB AHEODbchybM35zlNBjx4VzFCkMllOU8sTGpJJ3zmvJC68VZgWyRDKziy8BEAZn8O bG+ebhUpgUVGE8kayAUsktR8aFKKTcOOGQc/f55dq+b+IizB1N5qu6ExOJma4SM3 DvYjIUsxm3I2sMGcw7BIvMGjYF1xXZxayzHRz2WcSfjQ3Y5+fOctyxXYnUcA2har xM740FqCqWeR9NnMoBiRLLMQnQCNNwqzfW0yajx7nhwG1zcjN80TUuvINWqwMMUp mD0gvGEItk0HmoZ3OpKriOK4Tt+T3OvbVJhkZIbop4gPeS9DrWcauLixrmRFG42O InJakWGtegPT+MB2PLjNKiA= -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:14 2026 by rpki-client