This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer (raw, json) Hash identifier: +IGxUFKpgUiQ0byqHmVjr6NV6DkPt9JyzFNaEvuTFVM= Subject key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD15634BA8341498CDB43B40C8153 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215492 IP: 2001:67c:df8::/48 IP: 2a14:8100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d1:56:34:ba:83:41:49:8c:db:43:b4:0c:81:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65613d5999f3632985ed89a02efaabd1890ba09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:56:15:59:d2:ec:60:df:f3:25:30:b4:ae:72: 56:8c:60:17:8b:4a:7e:4f:a5:66:24:55:1d:78:46: 8f:7c:57:57:6e:94:3f:03:93:50:4b:2c:93:c4:d2: 4c:59:c7:3f:9e:b4:95:47:5b:1e:a6:f4:41:a6:cf: fe:12:78:03:1f:3e:34:50:ef:c2:c3:88:35:f2:0c: 03:13:a3:02:9f:9f:e4:be:c0:ba:59:ca:1b:b2:c1: 8e:33:03:b9:d2:5a:87:7e:98:05:f3:0c:7e:c6:76: 1f:28:9f:c8:a7:41:6e:5d:5b:99:c6:da:6c:1d:d4: 28:0e:4e:71:3e:7c:ca:bf:4b:02:4d:cb:04:c6:8c: 80:62:24:38:e2:b6:4e:77:b1:eb:af:22:72:8d:ad: e3:0a:51:bb:07:d8:1f:69:e6:20:9a:65:eb:c4:04: 87:fb:e2:25:18:c2:1a:23:85:02:3d:30:f3:cf:a7: bd:d0:6b:f0:f3:90:cd:bf:1e:3b:31:f4:4f:d0:00: a1:a0:2b:e1:0d:02:e4:68:b5:a1:30:d4:15:44:f8: 95:7d:2e:18:dc:a8:42:b0:7c:a2:a5:14:f8:8c:24: f0:26:0c:22:c4:a5:f1:92:f9:b9:d0:7d:86:3f:a4: a6:78:07:59:68:dc:7c:75:58:2b:41:0c:cf:b2:18: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:df8::/48 2a14:8100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215492 Signature Algorithm: sha256WithRSAEncryption 87:77:2e:ff:bb:a0:b8:76:64:44:3c:e3:2e:b0:ba:7e:04:ee: 8a:8c:ee:c0:5b:6b:96:0e:13:03:58:f3:83:c0:eb:e3:a8:c6: e9:bc:bd:e0:85:be:c3:97:aa:55:7a:ed:46:c4:02:6f:2d:c0: d7:cc:60:ed:b2:36:60:62:83:69:b5:e0:41:9d:9f:8d:f8:7a: 2a:3c:4d:44:f1:1e:68:aa:5f:bb:7e:64:5b:30:56:35:77:ec: 3c:57:09:e9:5a:66:a6:1e:59:b5:d7:25:ea:ea:31:ab:91:a0: 46:cf:00:eb:38:24:20:cd:77:21:02:c1:e3:18:05:c9:a7:54: ea:ef:b3:9c:c3:21:ac:5c:73:b9:b9:f7:f7:ae:71:e5:37:08: 2e:97:9d:f8:f0:a7:9e:a3:f6:49:86:e2:f0:a0:bf:07:28:44: 31:b9:a0:c3:49:6e:0c:af:89:aa:93:ba:43:a8:02:ce:06:ae: 32:a2:c7:dd:1f:81:17:09:93:a9:b2:3f:9e:a2:bc:94:71:9e: a1:88:0e:75:78:92:ee:eb:71:5e:ad:42:52:26:e0:90:41:6d: 5e:b7:02:9e:12:9b:27:61:2e:3e:07:e0:86:22:70:bc:a4:62: a1:ad:0a:76:99:2d:18:6b:e8:3f:a7:33:60:16:fc:19:7a:1e: d1:48:29:37 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt57NFWNLqDQUmM20O0DIFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjU2MTNkNTk5OWYzNjMyOTg1ZWQ4OWEwMmVmYWFiZDE4OTBiYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1YVWdLsYN/zJTC0rnJWjGAXi0p+ T6VmJFUdeEaPfFdXbpQ/A5NQSyyTxNJMWcc/nrSVR1sepvRBps/+EngDHz40UO/C w4g18gwDE6MCn5/kvsC6WcobssGOMwO50lqHfpgF8wx+xnYfKJ/Ip0FuXVuZxtps HdQoDk5xPnzKv0sCTcsExoyAYiQ44rZOd7HrryJyja3jClG7B9gfaeYgmmXrxASH ++IlGMIaI4UCPTDzz6e90Gvw85DNvx47MfRP0AChoCvhDQLkaLWhMNQVRPiVfS4Y 3KhCsHyipRT4jCTwJgwixKXxkvm50H2GP6SmeAdZaNx8dVgrQQzPshiUfQIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFMZWE9WZnzYymF7YmgLvqr0YkLoJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzNkOGFh Yy1kMzk4LTQzYWItOWMzZS02NTA5OTJmMmExNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvM2Q4YWFj LWQzOTgtNDNhYi05YzNlLTY1MDk5MmYyYTE3NC8xL3hsWVQxWm1mTmpLWVh0aWFB dS1xdlJpUXVnay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGfA34AwUDKhSBADAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMDScQwDQYJKoZIhvcNAQELBQADggEBAId3Lv+7oLh2ZEQ84y6w un4E7oqM7sBba5YOEwNY84PA6+Ooxum8veCFvsOXqlV67UbEAm8twNfMYO2yNmBi g2m14EGdn434eio8TUTxHmiqX7t+ZFswVjV37DxXCelaZqYeWbXXJerqMauRoEbP AOs4JCDNdyECweMYBcmnVOrvs5zDIaxcc7m59/euceU3CC6Xnfjwp56j9kmG4vCg vwcoRDG5oMNJbgyviaqTukOoAs4GrjKix90fgRcJk6myP56ivJRxnqGIDnV4ku7r cV6tQlIm4JBBbV63Ap4SmydhLj4H4IYicLykYqGtCnaZLRhr6D+nM2AW/Bl6HtFI KTc= -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:43 2026 by rpki-client