This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer (raw, json) Hash identifier: U2b3s9sRjk0JWceGv0Lm4nIslhviB+byz/LDxnYxdVA= Subject key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154100CCBB795D10BD2F0342052092 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29300 AS: 57522 AS: 201165 IP: 81.88.72.0/21 IP: 82.148.160.0/21 IP: 93.184.120.0/21 IP: 109.169.96.0/20 IP: 185.77.116.0/22 IP: 2a01:460::/32 IP: 2a02:2828::/32 IP: 2a05:6380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:41:00:cc:bb:79:5d:10:bd:2f:03:42:05:20:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:e3:d5:39:f6:0b:84:1e:c3:92:12:39:ec: 39:d4:9a:c4:b7:d9:96:a8:9c:59:3a:10:8a:1f:73: 2c:b6:26:f8:e9:2b:a3:e9:2b:3a:45:a3:33:d6:f6: 6f:19:d8:63:cd:9b:61:8b:33:51:ec:0f:65:5c:4b: a5:58:86:11:9d:d6:83:5e:72:65:87:d4:cc:49:16: 33:23:09:5f:e6:2c:e5:68:8a:2e:ee:80:9b:a1:e6: 41:86:c6:f8:2f:92:b4:7e:19:e3:b9:17:20:36:6c: 9a:85:7f:fe:71:07:27:90:43:87:15:af:4a:d5:77: 97:54:25:62:89:e5:bf:7c:e6:ef:12:92:c7:36:2a: f4:13:63:e2:13:c0:0d:d4:e5:b5:d1:7a:b1:3e:78: 92:4f:52:7f:32:b5:74:34:2c:ad:71:fd:a4:00:2e: 6d:92:ec:71:c8:72:cc:d2:b3:40:9d:bf:48:b5:3a: 86:e0:b4:7b:06:96:71:43:13:16:b6:8b:e4:c6:ca: cb:d1:27:32:67:ca:cf:19:08:4c:0d:46:bc:83:2c: d6:3b:f1:1b:99:17:e3:76:ea:e3:43:3e:82:01:b8: 37:fe:29:a9:45:09:f0:a8:11:bb:a1:43:f2:16:65: 5b:0e:21:b5:73:87:89:fd:ad:2c:91:ae:e5:55:19: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.72.0/21 82.148.160.0/21 93.184.120.0/21 109.169.96.0/20 185.77.116.0/22 IPv6: 2a01:460::/32 2a02:2828::/32 2a05:6380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29300 57522 201165 Signature Algorithm: sha256WithRSAEncryption 69:28:18:a6:1b:31:4b:7d:78:ad:73:af:25:a1:1d:d1:69:fb: 87:ad:92:0b:27:00:c3:b7:ce:70:66:e6:43:9c:e1:09:93:1b: 63:61:31:9f:30:67:7a:d9:e5:5a:e2:79:c8:40:8f:03:be:69: 4a:69:2a:52:04:fb:b9:e4:70:67:9d:5b:29:45:38:0c:f1:de: 44:2f:17:a0:16:42:7a:fb:0e:3a:c2:56:be:22:51:31:58:4d: 0e:5b:47:8f:35:83:1b:d0:6b:9b:1d:a7:67:f1:70:e4:bb:5c: 62:d6:64:14:ab:ff:bf:40:bf:7f:fc:d3:cc:91:b0:e5:15:56: 04:85:6b:50:6e:e9:4d:a7:10:f7:aa:3a:0a:2e:5a:c2:d5:84: b3:8d:c1:76:39:2e:f0:10:fd:a8:67:d0:1c:51:7f:c2:dc:f6: e9:e0:47:28:43:95:3c:2d:89:86:e0:a0:00:b3:be:d1:25:1e: 0a:c4:01:7a:f1:a3:88:ea:40:64:8a:ec:11:e7:cd:41:11:e6: 56:7d:63:c5:6d:52:4a:a9:b8:0b:34:fe:7d:15:8a:70:43:e7: 6b:76:03:cd:44:87:4b:ea:e8:54:23:e3:2c:df:d8:42:f0:88: d8:90:58:6f:5e:9a:43:3a:9d:bb:f3:b1:32:91:a8:64:2c:fb: d6:f5:ae:df -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt/FUEAzLt5XRC9LwNCBSCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTkyNzg2Y2VkNmNlNTk3NTg1NDY4YmI0ZjM2YjMxY2Y2YWNlYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGrj1Tn2C4Qew5ISOew51JrEt9mW qJxZOhCKH3Mstib46Suj6Ss6RaMz1vZvGdhjzZthizNR7A9lXEulWIYRndaDXnJl h9TMSRYzIwlf5izlaIou7oCboeZBhsb4L5K0fhnjuRcgNmyahX/+cQcnkEOHFa9K 1XeXVCViieW/fObvEpLHNir0E2PiE8AN1OW10XqxPniST1J/MrV0NCytcf2kAC5t kuxxyHLM0rNAnb9ItTqG4LR7BpZxQxMWtovkxsrL0ScyZ8rPGQhMDUa8gyzWO/Eb mRfjdurjQz6CAbg3/impRQnwqBG7oUPyFmVbDiG1c4eJ/a0ska7lVRnHuQIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFMWSeGztbOWXWFRou082sxz2rOxuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2E5YzBi Ny1hMjNhLTQ1OGYtOGY2NC1iYTM3NTExNDA0YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYTljMGI3 LWEyM2EtNDU4Zi04ZjY0LWJhMzc1MTE0MDRjMi8xL3haSjRiTzFzNVpkWVZHaTdU emF6SFBhczdHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQDUVhIAwQDUpSgAwQDXbh4AwQEbalgAwQCuU10 MBsEAgACMBUDBQAqAQRgAwUAKgIoKAMFAyoFY4AwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICcnQCAwDgsgIDAxHNMA0GCSqGSIb3DQEBCwUAA4IBAQBpKBimGzFLfXit c68loR3RafuHrZILJwDDt85wZuZDnOEJkxtjYTGfMGd62eVa4nnIQI8DvmlKaSpS BPu55HBnnVspRTgM8d5ELxegFkJ6+w46wla+IlExWE0OW0ePNYMb0GubHadn8XDk u1xi1mQUq/+/QL9//NPMkbDlFVYEhWtQbulNpxD3qjoKLlrC1YSzjcF2OS7wEP2o Z9AcUX/C3Pbp4EcoQ5U8LYmG4KAAs77RJR4KxAF68aOI6kBkiuwR581BEeZWfWPF bVJKqbgLNP59FYpwQ+drdgPNRIdL6uhUI+Ms39hC8IjYkFhvXppDOp2787Eykahk LPvW9a7f -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:04 2026 by rpki-client