This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer File: xdzY0KKrrowlOR8jBRzD8PJHk6o.cer (raw, json) Hash identifier: Jv8Ns5+S/SLslK62mGl7BoJZXZwf6L0e+Jw/vo+qx58= Subject key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE567DFF6A0593D4B92883CCA7D6AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.239.25.0/24 IP: 2001:67c:520::/48 IP: 2001:67c:2a90::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:7d:ff:6a:05:93:d4:b9:28:83:cc:a7:d6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:9f:c5:9a:82:f5:ed:f8:ff:c9:3a:2f:82: 53:42:86:d2:ad:d9:a9:82:fe:3d:a7:3b:fc:5b:cc: 10:00:bd:55:4d:87:47:86:69:62:cf:1e:85:73:2c: c4:59:c0:8c:9a:ce:7a:57:70:0c:3c:09:87:13:26: 79:d6:3c:15:ac:33:87:91:f9:c4:95:7c:f3:87:4e: a9:05:33:b2:a1:ef:b9:b6:8a:1a:24:2e:0f:55:aa: 0c:9b:9d:e2:59:d4:a9:88:9d:1f:e9:b8:d8:d3:71: 85:68:a8:56:89:b9:24:c1:5a:cd:6c:c3:4f:5b:56: 16:f7:b6:87:61:24:af:e0:dd:7b:b3:e9:67:06:0e: 27:be:49:1b:59:86:ea:48:3d:61:88:0f:50:c9:ad: 81:c3:a9:12:9f:90:c3:3a:e6:47:aa:1a:00:15:f1: ca:de:35:06:3d:83:c7:d4:51:83:de:4d:47:b4:de: 44:84:79:8d:08:f0:2e:26:68:6d:17:f8:d8:ad:70: 4a:43:33:74:0f:9e:89:1f:4b:38:8c:23:29:bf:05: fc:67:53:14:98:d0:9a:96:5a:89:56:3c:7c:77:8e: 1b:cc:5e:4e:81:1d:6e:b4:0c:13:9d:34:de:9f:78: 18:6e:1d:a2:be:83:4f:dc:93:c2:1d:f2:8d:fa:6d: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.25.0/24 IPv6: 2001:67c:520::/48 2001:67c:2a90::/48 Signature Algorithm: sha256WithRSAEncryption 91:d1:66:54:07:88:41:c7:77:33:3e:34:10:03:e9:50:ad:ad: 85:0b:07:8a:ab:87:e8:53:f8:ee:70:78:b5:32:db:53:02:ad: 84:44:c0:85:3c:2f:62:bf:aa:37:96:0a:2f:8a:0c:c7:ad:1d: 5b:38:0d:f2:2d:94:f9:47:3a:e6:8f:5e:cb:b3:e7:20:64:9b: bc:6c:5a:7f:05:42:21:e7:4a:ae:e2:c4:4f:99:fc:36:9f:88: 30:22:b8:89:76:05:a0:47:6b:89:84:d2:f8:e4:99:0f:9e:42: c0:72:e6:4a:bd:8e:35:74:08:94:02:75:c2:74:2d:6c:02:2e: 4a:16:3b:be:bb:73:6e:b5:b6:b3:f3:12:33:fa:84:f8:63:99: fe:3e:04:fb:ac:ac:76:e0:e2:b6:da:2e:41:dd:39:61:b0:ce: 0f:33:6c:2e:ae:65:e4:b4:78:e3:3b:38:31:77:ec:54:9c:0b: 5c:da:95:e1:2d:5a:84:6b:fd:1f:ec:70:fa:da:25:02:b2:df: dc:d3:87:5f:e4:e9:9a:fe:47:ba:8e:c4:8f:61:4c:e6:d5:85: ab:66:6a:e5:d3:70:9a:ba:dc:e9:34:1c:2a:73:f8:b3:c7:0b: a7:dd:41:13:92:a3:60:e4:be:92:ae:5e:88:fa:c0:62:14:44: 34:35:9f:75 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt87lZ9/2oFk9S5KIPMp9aqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWRjZDhkMGEyYWJhZThjMjUzOTFmMjMwNTFjYzNmMGYyNDc5M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP6fxZqC9e34/8k6L4JTQobSrdmp gv49pzv8W8wQAL1VTYdHhmlizx6FcyzEWcCMms56V3AMPAmHEyZ51jwVrDOHkfnE lXzzh06pBTOyoe+5tooaJC4PVaoMm53iWdSpiJ0f6bjY03GFaKhWibkkwVrNbMNP W1YW97aHYSSv4N17s+lnBg4nvkkbWYbqSD1hiA9Qya2Bw6kSn5DDOuZHqhoAFfHK 3jUGPYPH1FGD3k1HtN5EhHmNCPAuJmhtF/jYrXBKQzN0D56JH0s4jCMpvwX8Z1MU mNCallqJVjx8d44bzF5OgR1utAwTnTTen3gYbh2ivoNP3JPCHfKN+m0KLQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFMXc2NCiq66MJTkfIwUcw/DyR5OqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2YzMGM0 ZC1iNDIyLTQ1ODEtYmYwNC1jNzlkNDZhOTIzOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZjMwYzRk LWI0MjItNDU4MS1iZjA0LWM3OWQ0NmE5MjM5Yi8xL3hkelkwS0tycm93bE9SOGpC UnpEOFBKSGs2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQAW+8ZMBgEAgACMBIDBwAgAQZ8BSADBwAgAQZ8 KpAwDQYJKoZIhvcNAQELBQADggEBAJHRZlQHiEHHdzM+NBAD6VCtrYULB4qrh+hT +O5weLUy21MCrYREwIU8L2K/qjeWCi+KDMetHVs4DfItlPlHOuaPXsuz5yBkm7xs Wn8FQiHnSq7ixE+Z/DafiDAiuIl2BaBHa4mE0vjkmQ+eQsBy5kq9jjV0CJQCdcJ0 LWwCLkoWO767c261trPzEjP6hPhjmf4+BPusrHbg4rbaLkHdOWGwzg8zbC6uZeS0 eOM7ODF37FScC1zaleEtWoRr/R/scPraJQKy39zTh1/k6Zr+R7qOxI9hTObVhatm auXTcJq63Ok0HCpz+LPHC6fdQROSo2DkvpKuXoj6wGIURDQ1n3U= -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:43 2026 by rpki-client