This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer File: xK3VunZitzHdCLz4c48TXZOu1FE.cer (raw, json) Hash identifier: O1qAjHsF+lFIUpTEOBOwWspkUr1YwZZ7XYmjOwKO1rU= Subject key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37470C96B9405CA710898F9B166BBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.149.108.0/22 IP: 2a0f:4600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:47:0c:96:b9:40:5c:a7:10:89:8f:9b:16:6b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:17:ad:48:ef:c8:4d:4a:2c:c1:89:97:30: 27:9f:d2:55:ec:62:3d:a8:0f:29:bd:11:41:26:5b: d2:19:d5:35:95:1a:cb:c5:15:7a:54:35:5d:a2:b5: 9d:ef:82:b4:30:61:06:e9:1e:00:0d:b8:73:cb:d1: 5b:bd:0a:f0:bd:cf:43:69:1c:d2:15:59:c5:1a:97: f8:08:8d:d4:70:61:76:b3:64:32:f8:f4:11:f1:6a: ec:55:76:da:05:f9:40:31:c8:eb:ef:ad:87:cf:f8: b6:2e:72:a7:0a:75:b6:7a:38:a1:a3:3b:a8:1f:6c: dd:ff:03:a3:c7:38:7c:07:c7:f6:49:66:3e:ee:01: 35:38:a3:57:ed:f0:24:d2:f0:36:2b:a8:48:a4:0d: 38:9d:a2:52:67:03:23:6c:d2:08:70:1b:f4:55:43: f6:18:b8:7e:e4:c7:8b:dd:ec:64:a1:57:50:4f:92: 98:d5:28:06:91:b3:f7:af:10:7c:55:c9:fa:e8:74: 8a:d1:c5:ab:14:84:ed:96:e5:01:8d:e6:c4:8d:77: be:7a:15:83:ed:5c:fb:64:4f:fd:81:c3:80:db:9c: 1f:bb:63:fb:ae:91:40:25:24:8e:3a:33:40:70:13: 72:ee:fe:e7:db:e3:3d:8a:21:65:de:64:5c:fb:03: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.108.0/22 IPv6: 2a0f:4600::/29 Signature Algorithm: sha256WithRSAEncryption 1b:fb:f6:23:8b:8e:e7:7e:5e:4c:cd:6e:97:94:20:8e:34:71: 28:da:66:96:2d:7a:de:45:8f:48:fe:2f:28:2b:c4:8b:50:82: 8e:20:50:44:49:f3:6f:92:06:f2:71:8c:f5:2f:9d:0e:02:fa: 46:a6:20:3b:6a:c0:7b:1d:bd:1c:ab:cc:e8:19:45:49:ae:ab: 41:00:45:36:14:8b:1a:28:fb:e3:81:c3:26:47:08:d6:ec:11: e0:3c:ce:d3:2a:45:23:e2:46:d0:f2:fd:4a:37:2c:09:8e:4b: 37:cc:1e:aa:ba:9c:35:ad:f0:17:5f:a1:b9:aa:e5:49:78:fe: 7d:20:a6:94:4d:02:e8:53:ef:86:fd:ad:d8:28:f6:24:dd:9d: dc:5b:66:c1:9d:91:0b:fe:d7:2e:d9:81:48:07:88:a8:36:cc: 46:4e:14:25:98:f1:9b:10:6d:1f:47:7b:a8:56:1f:0b:2a:a3: d5:3d:38:a3:89:cb:19:6c:80:d6:31:91:48:a0:53:b2:9d:fd: 8b:69:d4:bc:f3:87:48:01:c0:f7:02:70:02:6d:46:c4:be:94: 6b:6e:01:14:66:48:37:57:36:48:df:46:08:35:99:88:b2:de: 8e:c1:d0:ce:67:b5:c8:aa:4b:d8:66:94:e0:68:dc:f8:8f:07: 56:bc:8c:e5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+N0cMlrlAXKcQiY+bFmu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGFkZDViYTc2NjJiNzMxZGQwOGJjZjg3MzhmMTM1ZDkzYWVkNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/4XrUjvyE1KLMGJlzAnn9JV7GI9 qA8pvRFBJlvSGdU1lRrLxRV6VDVdorWd74K0MGEG6R4ADbhzy9FbvQrwvc9DaRzS FVnFGpf4CI3UcGF2s2Qy+PQR8WrsVXbaBflAMcjr762Hz/i2LnKnCnW2ejihozuo H2zd/wOjxzh8B8f2SWY+7gE1OKNX7fAk0vA2K6hIpA04naJSZwMjbNIIcBv0VUP2 GLh+5MeL3exkoVdQT5KY1SgGkbP3rxB8Vcn66HSK0cWrFITtluUBjebEjXe+ehWD 7Vz7ZE/9gcOA25wfu2P7rpFAJSSOOjNAcBNy7v7n2+M9iiFl3mRc+wMKEwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzM0NmEy My0xMTgxLTRhODAtOWY1NS1kZDdkNDdjZjVjMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvMzQ2YTIz LTExODEtNGE4MC05ZjU1LWRkN2Q0N2NmNWMxOC8xL3hLM1Z1blppdHpIZENMejRj NDhUWFpPdTFGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZVsMA0EAgACMAcDBQMqD0YAMA0GCSqGSIb3 DQEBCwUAA4IBAQAb+/Yji47nfl5MzW6XlCCONHEo2maWLXreRY9I/i8oK8SLUIKO IFBESfNvkgbycYz1L50OAvpGpiA7asB7Hb0cq8zoGUVJrqtBAEU2FIsaKPvjgcMm RwjW7BHgPM7TKkUj4kbQ8v1KNywJjks3zB6qupw1rfAXX6G5quVJeP59IKaUTQLo U++G/a3YKPYk3Z3cW2bBnZEL/tcu2YFIB4ioNsxGThQlmPGbEG0fR3uoVh8LKqPV PTijicsZbIDWMZFIoFOynf2LadS884dIAcD3AnACbUbEvpRrbgEUZkg3VzZI30YI NZmIst6OwdDOZ7XIqkvYZpTgaNz4jwdWvIzl -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:30 2026 by rpki-client