This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer File: xLejOGcjuooupILHtoAxpUEirE8.cer (raw, json) Hash identifier: KvidugdVICLVyNYO3dXO2QJhlmjMsx1XG8lCqkiz3iM= Subject key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36DBE0EBEB7ADF8F1E5B367539C79D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215487 AS: 215598 IP: 77.83.59.0/24 IP: 194.117.52.192/26 IP: 217.65.78.0/24 IP: 2001:7f8:165::/48 IP: 2a14:340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:db:e0:eb:eb:7a:df:8f:1e:5b:36:75:39:c7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:c0:28:62:77:b7:d8:5a:47:85:21:f1:63: e9:ee:80:ba:b6:88:4d:6e:a4:eb:ca:95:4c:b2:0b: 38:80:f3:2c:9b:9d:e0:d1:29:ab:98:f9:d9:3d:94: db:fc:b2:8e:cb:49:d9:07:27:33:fc:4d:ea:47:28: 08:0c:c6:d2:f2:c9:e4:47:1e:22:7e:4b:2a:27:65: 64:e8:4b:83:51:bf:2e:38:70:90:71:15:27:4f:08: 51:c3:64:20:13:52:1e:3b:57:99:b3:2c:3a:54:94: 52:a5:06:64:35:99:a4:89:2a:7c:7d:04:ae:96:0a: 37:15:4f:24:33:20:a2:72:b1:2e:b4:5e:29:ea:6f: 66:d0:0a:18:c5:a1:ba:f8:bc:9e:61:c4:5a:9d:3c: 2d:81:8d:a7:b7:93:23:17:e9:e9:a0:f7:cb:a9:5e: bb:4d:fc:ff:c5:f2:85:c0:53:35:db:3f:a0:0c:97: c1:a0:fd:a7:c1:40:d3:15:c3:b8:95:72:3d:f8:eb: 31:4b:da:4c:a8:0e:36:7a:1c:d4:62:ae:63:24:93: f1:7e:50:7a:c2:47:5d:f8:c6:50:7b:9f:5d:c1:b1: 51:c7:37:4d:39:46:51:48:97:fb:2a:17:4b:80:04: cc:33:f4:b9:64:2e:aa:17:52:1b:9b:9a:2a:b2:d8: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.59.0/24 194.117.52.192/26 217.65.78.0/24 IPv6: 2001:7f8:165::/48 2a14:340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215487 215598 Signature Algorithm: sha256WithRSAEncryption 42:39:48:30:36:71:c9:b9:98:03:91:ce:63:da:eb:7e:49:f1: d9:5e:c1:fb:09:bb:62:40:7b:a3:22:7a:48:45:a8:29:91:2d: 8a:5d:29:6a:f6:c6:fa:86:6f:51:5e:76:77:4d:43:f2:d4:64: 10:ff:f5:5d:31:62:86:a5:ce:57:36:68:3f:ee:d1:9e:cc:65: de:36:b0:67:4e:8b:98:ac:b7:33:bc:cc:2d:cd:34:bf:38:51: 6c:65:07:fb:e5:4a:60:50:49:86:dd:58:9f:83:b6:bc:25:d7: d3:a2:3b:b0:4a:f9:11:9c:00:68:2b:d0:06:9c:25:53:20:f3: 99:d2:96:3e:83:28:7d:47:16:f6:c8:c4:d8:ec:83:f3:a7:d1: f9:54:d3:82:d1:30:7e:3b:59:37:04:1d:97:19:cf:34:2f:f3: 5d:23:6f:3b:d9:0f:b6:53:2a:d8:c5:cd:4a:08:37:97:d3:a7: ad:65:38:05:a0:ff:6a:d0:42:47:b3:1e:8f:16:d7:a3:bc:b2: 92:3a:91:a3:4f:06:ca:67:a2:aa:45:f7:a2:99:42:dc:35:52: 74:e9:59:f2:3f:56:dd:55:71:ab:4f:f7:b1:2a:6d:46:6a:b5: a6:f2:13:55:10:bc:a6:2f:57:d0:9e:91:77:5f:b0:d5:9f:b7: 88:30:55:ec -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZt7Ntvg6+t6348eWzZ1OcedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGI3YTMzODY3MjNiYThhMmVhNDgyYzdiNjgwMzFhNTQxMjJhYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzTAKGJ3t9haR4Uh8WPp7oC6tohN bqTrypVMsgs4gPMsm53g0SmrmPnZPZTb/LKOy0nZBycz/E3qRygIDMbS8snkRx4i fksqJ2Vk6EuDUb8uOHCQcRUnTwhRw2QgE1IeO1eZsyw6VJRSpQZkNZmkiSp8fQSu lgo3FU8kMyCicrEutF4p6m9m0AoYxaG6+LyeYcRanTwtgY2nt5MjF+npoPfLqV67 Tfz/xfKFwFM12z+gDJfBoP2nwUDTFcO4lXI9+OsxS9pMqA42ehzUYq5jJJPxflB6 wkdd+MZQe59dwbFRxzdNOUZRSJf7KhdLgATMM/S5ZC6qF1Ibm5oqsthimQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFMS3ozhnI7qKLqSCx7aAMaVBIqxPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2FhN2Jm Ni02NTI1LTQzOTQtODBiYS1iZDQwZGZhZTc4ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYWE3YmY2 LTY1MjUtNDM5NC04MGJhLWJkNDBkZmFlNzg4Ni8xL3hMZWpPR2NqdW9vdXBJTEh0 b0F4cFVFaXJFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEQGCCsGAQUF BwEHAQH/BDUwMzAZBAIAATATAwQATVM7AwUGwnU0wAMEANlBTjAWBAIAAjAQAwcA IAEH+AFlAwUDKhQDQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDSb8CAwNKLjAN BgkqhkiG9w0BAQsFAAOCAQEAQjlIMDZxybmYA5HOY9rrfknx2V7B+wm7YkB7oyJ6 SEWoKZEtil0pavbG+oZvUV52d01D8tRkEP/1XTFihqXOVzZoP+7Rnsxl3jawZ06L mKy3M7zMLc00vzhRbGUH++VKYFBJht1Yn4O2vCXX06I7sEr5EZwAaCvQBpwlUyDz mdKWPoMofUcW9sjE2OyD86fR+VTTgtEwfjtZNwQdlxnPNC/zXSNvO9kPtlMq2MXN Sgg3l9OnrWU4BaD/atBCR7MejxbXo7yykjqRo08GymeiqkX3oplC3DVSdOlZ8j9W 3VVxq0/3sSptRmq1pvITVRC8pi9X0J6Rd1+w1Z+3iDBV7A== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:16 2026 by rpki-client