This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer (raw, json) Hash identifier: r3Bh7cX3Ux3201wRBh2+ImApPKvJPGSsKZccDXCeHe0= Subject key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37EA5B0219CA2F3F981AB6CA1A9663 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56654 AS: 60088 IP: 77.81.68.0/22 IP: 85.204.164.0/22 IP: 89.39.176.0/22 IP: 94.24.111.0/24 IP: 185.85.176.0/21 IP: 188.208.128.0/22 IP: 188.214.244.0 -- 188.214.255.255 IP: 2a04:f980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ea:5b:02:19:ca:2f:3f:98:1a:b6:ca:1a:96:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:fe:c8:6f:99:7b:4a:88:1d:b6:12:c7:06: 82:76:91:18:50:bc:34:f8:67:17:e5:9f:93:29:60: 5b:fd:f1:f3:b7:f1:01:78:46:02:dc:a3:42:54:23: bd:48:da:84:19:02:97:bc:bb:df:ed:64:41:fc:85: 9f:46:fb:96:1d:c5:14:85:2c:93:dd:83:a8:cc:3b: d5:f8:f1:df:6f:6f:e0:50:4f:3b:db:fe:20:8c:dc: 8c:df:fd:9d:63:aa:32:14:26:32:cc:b6:7e:1a:a8: 30:55:ce:51:2f:ef:7e:57:ab:10:ba:a4:6e:00:48: ba:a9:98:32:af:52:92:73:9c:66:99:8c:53:ff:6c: 50:c4:14:37:53:36:45:b5:74:f5:a0:7e:0c:e6:98: 32:58:c6:51:20:e6:56:9c:a6:1c:84:1c:05:50:71: 5b:8e:69:e7:02:68:0e:eb:a3:31:38:57:72:70:c8: 27:6f:8f:44:60:c2:56:30:67:b8:a8:15:3f:64:49: f5:e1:24:85:c5:34:55:df:22:c0:22:bc:dd:81:ad: c7:d9:b6:52:d9:87:37:93:65:aa:75:68:10:e4:d4: 6b:5e:6b:91:78:d5:81:7b:1f:bf:af:5b:40:5e:10: de:3d:c1:d7:dc:fa:d5:2c:f3:61:d7:2e:2b:4d:ca: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.68.0/22 85.204.164.0/22 89.39.176.0/22 94.24.111.0/24 185.85.176.0/21 188.208.128.0/22 188.214.244.0-188.214.255.255 IPv6: 2a04:f980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56654 60088 Signature Algorithm: sha256WithRSAEncryption 2c:ad:43:a5:b1:47:b7:5c:d2:b2:54:17:0b:3f:76:2f:0f:a3: 63:60:b7:ab:bf:68:3c:d3:d6:08:e4:c3:d5:59:0d:bc:01:36: 4e:1a:ad:93:16:bc:fb:56:28:00:3b:47:6c:f8:ba:1a:ad:17: 31:15:6a:a6:d5:fe:ee:3c:01:f3:4e:6d:36:21:87:fa:0c:32: 08:a9:a6:60:d2:92:4f:7f:cb:07:ac:3e:79:98:b8:a7:2d:e5: ec:c2:99:1d:5b:eb:26:4c:41:1a:ad:6a:0e:b6:22:91:7d:a3: 6d:b8:3b:9e:1f:f6:cb:51:37:58:f5:81:de:37:96:a9:16:5f: 87:af:87:d5:8f:ec:95:3b:23:a5:a4:5b:49:52:11:5f:4a:72: 6f:e8:ca:6f:ae:a7:7e:58:ec:17:a8:6d:62:f4:f8:64:47:c9: 1c:e6:02:3e:09:d5:98:63:71:86:39:3a:e0:a5:2e:92:c4:b5: fa:3c:ee:eb:4d:7b:e5:50:e9:de:65:58:fc:fb:33:33:47:00: 03:04:47:05:25:95:b2:2f:15:db:9b:72:1c:81:a9:42:45:a9: 32:de:8b:b5:c9:31:f1:56:1c:3a:d5:96:ee:1c:e0:be:f2:2f: f1:14:10:80:0a:0f:6f:c4:aa:34:14:78:3b:b5:8d:af:da:16: fc:ab:4b:0e -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt+N+pbAhnKLz+YGrbKGpZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjNkOTZhZWZjNTQ4MDI0ZmEzNmZhNWNlODA0YTQ4YmY3Y2EzYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlML+yG+Ze0qIHbYSxwaCdpEYULw0 +GcX5Z+TKWBb/fHzt/EBeEYC3KNCVCO9SNqEGQKXvLvf7WRB/IWfRvuWHcUUhSyT 3YOozDvV+PHfb2/gUE872/4gjNyM3/2dY6oyFCYyzLZ+GqgwVc5RL+9+V6sQuqRu AEi6qZgyr1KSc5xmmYxT/2xQxBQ3UzZFtXT1oH4M5pgyWMZRIOZWnKYchBwFUHFb jmnnAmgO66MxOFdycMgnb49EYMJWMGe4qBU/ZEn14SSFxTRV3yLAIrzdga3H2bZS 2Yc3k2WqdWgQ5NRrXmuReNWBex+/r1tAXhDePcHX3PrVLPNh1y4rTcrGQQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFMY9lq78VIAk+jb6XOgEpIv3yjpAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2VkZDZi OC1hYmJkLTRiODEtOTcwNy05NzFkMjhkNDNjMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZWRkNmI4 LWFiYmQtNGI4MS05NzA3LTk3MWQyOGQ0M2MxNC8xL3hqMldydnhVZ0NUNk52cGM2 QVNraV9mS09rQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDA3BAIAATAxAwQCTVFEAwQCVcykAwQCWSewAwQAXhhvAwQDuVWw AwQCvNCAMAsDBAK81vQDAwC81jANBAIAAjAHAwUDKgT5gDAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMA3U4CAwDquDANBgkqhkiG9w0BAQsFAAOCAQEALK1DpbFHt1zS slQXCz92Lw+jY2C3q79oPNPWCOTD1VkNvAE2Thqtkxa8+1YoADtHbPi6Gq0XMRVq ptX+7jwB805tNiGH+gwyCKmmYNKST3/LB6w+eZi4py3l7MKZHVvrJkxBGq1qDrYi kX2jbbg7nh/2y1E3WPWB3jeWqRZfh6+H1Y/slTsjpaRbSVIRX0pyb+jKb66nfljs F6htYvT4ZEfJHOYCPgnVmGNxhjk64KUuksS1+jzu60175VDp3mVY/PszM0cAAwRH BSWVsi8V25tyHIGpQkWpMt6Ltckx8VYcOtWW7hzgvvIv8RQQgAoPb8SqNBR4O7WN r9oW/KtLDg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:24 2026 by rpki-client