This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer File: xU9qEXeCbFq2S9OvATiptXpLkeU.cer (raw, json) Hash identifier: WMoS35gS7l4LynWTA/6MkfO8oTk+1fxYqwnT8MPNAk4= Subject key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D829DE8DDD1A4EED5F96C8FCB9B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214132 IP: 2001:67c:f24::/48 IP: 2a12:e00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d8:29:de:8d:dd:1a:4e:ed:5f:96:c8:fc:b9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:c6:6f:d5:10:a4:18:c2:7f:ee:37:ed:80: 88:b2:fb:f4:19:0c:e9:62:25:3d:c8:9c:77:bb:cc: 59:ff:3e:96:48:ee:dc:18:bd:60:55:b9:e8:4f:3c: bf:6e:c8:82:22:4c:8a:60:73:a4:3f:7c:ef:6d:2c: ee:8d:98:0e:e2:24:84:2b:55:2c:d4:3e:01:1e:f8: 09:14:26:ff:af:7b:75:94:cf:ab:cd:a8:3b:d4:f3: 2e:ae:68:e0:33:28:42:4b:43:20:57:26:4b:07:56: 43:3c:76:09:9c:01:c8:7e:c1:42:2d:89:2b:46:49: 81:58:be:42:61:54:8c:d7:57:de:c0:d7:0a:95:10: 33:26:f1:be:8d:8e:92:93:24:48:f7:53:c8:07:68: d4:57:f1:fc:ad:fa:2a:28:f4:9b:40:1e:a5:ea:7e: 51:7c:12:ee:fa:b5:b1:d6:71:d4:7d:eb:35:0b:52: 4c:23:91:56:2f:6b:f9:ce:0b:05:dc:6f:94:af:e7: 84:c0:7d:64:7b:28:cf:d6:86:97:2e:d8:e6:eb:b3: 20:78:3f:a2:88:7e:08:f6:d8:c4:45:9f:e8:be:c8: d9:6f:cb:16:af:7d:60:ae:77:b4:d1:fe:f9:c5:be: bd:66:f7:53:31:aa:1c:9d:43:64:d8:c5:b0:7f:76: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f24::/48 2a12:e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214132 Signature Algorithm: sha256WithRSAEncryption 4e:ef:da:02:1b:dc:7f:80:7e:bc:ee:cc:0f:3b:91:3b:8f:04: 89:86:21:af:07:15:94:ae:49:98:43:fd:28:5f:27:58:c9:41: 07:b8:cf:e8:ae:60:60:5a:cf:6b:17:89:ce:a6:43:c5:a1:6b: 01:e0:0e:77:83:9d:79:47:1e:4a:b4:b9:b2:f1:41:24:bb:8e: b7:10:bd:0d:11:eb:c0:ae:db:48:f3:ea:7f:6a:34:11:01:13: 41:5f:2b:93:a9:4a:47:85:94:39:41:1f:60:16:ec:ae:16:5d: c7:ec:c2:db:1b:ed:80:ec:f5:ab:85:9a:2b:c5:ec:a4:43:bc: 7b:df:f3:c5:8b:fe:af:5d:97:be:d8:2a:c2:9f:42:6c:14:cd: a4:d3:c8:f8:01:2f:38:79:c4:fb:ae:d2:f1:bd:70:79:f9:e7: 72:fb:aa:6d:35:2c:ca:05:58:07:dd:54:30:0f:6f:58:4e:8d: 75:ea:86:02:f5:f9:69:3d:64:07:b2:db:f3:41:76:f5:be:c4: f2:f0:b3:76:a5:2f:49:68:64:1a:34:25:19:27:9a:2d:29:f3: b7:79:66:d5:f5:15:6d:ea:42:2b:bc:ce:22:37:ca:e1:3e:e0: f3:ae:84:07:ef:97:42:e7:29:5b:b2:cc:c0:ed:e5:49:10:4e: 27:39:3d:e7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt3WNgp3o3dGk7tX5bI/Lm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTRmNmExMTc3ODI2YzVhYjY0YmQzYWYwMTM4YTliNTdhNGI5MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhvGb9UQpBjCf+437YCIsvv0GQzp YiU9yJx3u8xZ/z6WSO7cGL1gVbnoTzy/bsiCIkyKYHOkP3zvbSzujZgO4iSEK1Us 1D4BHvgJFCb/r3t1lM+rzag71PMurmjgMyhCS0MgVyZLB1ZDPHYJnAHIfsFCLYkr RkmBWL5CYVSM11fewNcKlRAzJvG+jY6SkyRI91PIB2jUV/H8rfoqKPSbQB6l6n5R fBLu+rWx1nHUfes1C1JMI5FWL2v5zgsF3G+Ur+eEwH1keyjP1oaXLtjm67MgeD+i iH4I9tjERZ/ovsjZb8sWr31grne00f75xb69ZvdTMaocnUNk2MWwf3YunwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFMVPahF3gmxatkvTrwE4qbV6S5HlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzE0ZjM2 Ny0zYjllLTQ5ZDQtOTY4Ni0yZWE4YWNlNWI5NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMTRmMzY3 LTNiOWUtNDlkNC05Njg2LTJlYThhY2U1Yjk1ZS8xL3hVOXFFWGVDYkZxMlM5T3ZB VGlwdFhwTGtlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGfA8kAwUAKhIOADAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMDRHQwDQYJKoZIhvcNAQELBQADggEBAE7v2gIb3H+AfrzuzA87 kTuPBImGIa8HFZSuSZhD/ShfJ1jJQQe4z+iuYGBaz2sXic6mQ8WhawHgDneDnXlH Hkq0ubLxQSS7jrcQvQ0R68Cu20jz6n9qNBEBE0FfK5OpSkeFlDlBH2AW7K4WXcfs wtsb7YDs9auFmivF7KRDvHvf88WL/q9dl77YKsKfQmwUzaTTyPgBLzh5xPuu0vG9 cHn553L7qm01LMoFWAfdVDAPb1hOjXXqhgL1+Wk9ZAey2/NBdvW+xPLws3alL0lo ZBo0JRknmi0p87d5ZtX1FW3qQiu8ziI3yuE+4POuhAfvl0LnKVuyzMDt5UkQTic5 Pec= -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:17 2026 by rpki-client