This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer File: xlodocsckgri-bdIJw_e2HN6kYQ.cer (raw, json) Hash identifier: xST01PdnzJrexl6k/fMUahCttbljzBeOTjd1cWfG/io= Subject key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD6FCBEC3FA1B1C4F610D8DC0CE8739FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 16:00:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48780 AS: 56434 AS: 64494 IP: 37.44.199.0/24 IP: 45.67.215.0/24 IP: 45.129.79.0/24 IP: 45.136.144.0/23 IP: 46.150.240.0/20 IP: 77.83.84.0/24 IP: 85.235.80.0/23 IP: 91.188.244.0/24 IP: 91.214.117.0 -- 91.214.119.255 IP: 91.227.155.0/24 IP: 91.235.158.0/24 IP: 91.241.180.0/23 IP: 91.243.188.0/23 IP: 94.158.20.0/23 IP: 135.106.0.0/16 IP: 136.234.0.0/16 IP: 153.80.0.0/16 IP: 176.103.80.0/20 IP: 176.119.140.0/24 IP: 176.119.142.0/24 IP: 192.109.97.0/24 IP: 194.69.253.0/24 IP: 194.113.150.0 -- 194.113.152.255 IP: 194.187.100.0/22 IP: 195.3.181.0/24 IP: 195.95.216.0/23 IP: 195.245.238.0/24 IP: 2a0f:4040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:fc:be:c3:fa:1b:1c:4f:61:0d:8d:c0:ce:87:39:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 16:00:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:81:ba:89:8a:07:f4:34:f4:ba:14:fb:b6: 92:f8:52:d1:18:a0:53:35:1c:b6:d5:9c:22:90:45: bb:03:5c:b9:10:77:d6:20:64:22:ba:4b:b2:b1:b4: 6b:8b:61:65:67:15:c8:85:34:25:20:10:37:0a:d3: d3:66:44:54:c9:6b:0c:e7:04:c8:a0:2d:12:12:43: a9:d8:d3:bf:49:61:f4:b6:ea:85:5b:cb:0d:9c:a6: 16:4a:af:4d:3b:85:f8:e3:83:9d:2c:64:4e:0a:b5: f3:2f:60:92:89:cc:4f:ab:a8:4a:ca:4a:13:c3:63: ed:3f:bc:92:de:9f:9a:fc:7e:84:5a:46:e5:71:07: 0f:c9:72:22:3e:bc:05:95:b7:f6:18:f0:71:ee:48: 47:8f:01:3c:6e:a5:b4:40:3d:10:18:c6:77:fe:14: 0e:a8:b9:34:b5:9a:de:c8:64:ec:3a:5a:a1:fa:e1: bf:54:49:62:c7:b3:3e:1d:5b:ca:75:e4:02:e0:35: 8d:f2:96:9a:44:ca:f9:6e:6d:d8:bd:d4:2f:ca:6f: ae:87:37:97:6f:ee:3b:28:ab:9c:5a:c9:d4:6b:d4: 8e:cb:dc:8e:28:cd:80:b4:60:b2:37:a5:f3:4d:82: 37:41:ad:08:67:98:54:46:6f:08:1a:6e:a8:be:f9: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.199.0/24 45.67.215.0/24 45.129.79.0/24 45.136.144.0/23 46.150.240.0/20 77.83.84.0/24 85.235.80.0/23 91.188.244.0/24 91.214.117.0-91.214.119.255 91.227.155.0/24 91.235.158.0/24 91.241.180.0/23 91.243.188.0/23 94.158.20.0/23 135.106.0.0/16 136.234.0.0/16 153.80.0.0/16 176.103.80.0/20 176.119.140.0/24 176.119.142.0/24 192.109.97.0/24 194.69.253.0/24 194.113.150.0-194.113.152.255 194.187.100.0/22 195.3.181.0/24 195.95.216.0/23 195.245.238.0/24 IPv6: 2a0f:4040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48780 56434 64494 Signature Algorithm: sha256WithRSAEncryption 5b:34:9e:5f:a6:27:bb:e2:93:d8:9c:bd:51:eb:d6:dd:98:69: 18:e4:d1:60:e2:ca:0e:ac:6f:06:ab:89:48:6a:ad:ca:17:b3: f2:42:86:ae:53:ab:2b:f4:1c:c8:c9:a2:df:bd:5a:91:a2:cd: ad:28:9f:38:fa:87:ef:ce:4b:c4:7d:f7:ee:83:4b:7a:3d:79: 00:cc:38:08:5d:62:4a:2e:7c:fd:c2:03:03:7f:91:44:e6:2c: ae:ec:e7:7d:fc:9e:77:54:24:d6:45:4b:8e:db:42:4c:69:60: 85:eb:77:eb:be:19:1f:56:bf:5e:03:f9:51:0b:4f:76:45:2c: 8a:e7:6e:15:b6:8e:d3:c8:78:37:16:dc:d7:a0:ed:8b:13:d9: 96:d2:16:9e:ff:aa:1c:26:9f:a4:25:9f:53:d5:71:13:b1:9d: e8:ad:89:77:0f:93:ec:a8:73:de:41:51:86:d9:cf:3a:e8:cf: 7d:b9:6b:1d:1b:8b:6b:1d:49:12:0d:b1:87:62:5e:d9:07:ab: 85:1b:d1:a3:29:fb:fa:5c:b7:93:79:ff:41:83:8f:73:99:c3: 00:09:cf:e7:c4:c1:8a:a6:ca:5e:ed:a0:8c:cb:28:db:d0:e1: c7:c4:6c:14:61:6c:09:eb:4c:15:bd:48:96:08:37:3f:3f:2d: df:0e:de:b9 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISAZvW/L7D+hscT2ENjcDOhzn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTYwMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjVhMWRhMWNiMWM5MjBhZTJmOWI3NDgyNzBmZGVkODczN2E5MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiBuomKB/Q09LoU+7aS+FLRGKBT NRy21ZwikEW7A1y5EHfWIGQiukuysbRri2FlZxXIhTQlIBA3CtPTZkRUyWsM5wTI oC0SEkOp2NO/SWH0tuqFW8sNnKYWSq9NO4X444OdLGROCrXzL2CSicxPq6hKykoT w2PtP7yS3p+a/H6EWkblcQcPyXIiPrwFlbf2GPBx7khHjwE8bqW0QD0QGMZ3/hQO qLk0tZreyGTsOlqh+uG/VElix7M+HVvKdeQC4DWN8paaRMr5bm3YvdQvym+uhzeX b+47KKucWsnUa9SOy9yOKM2AtGCyN6XzTYI3Qa0IZ5hURm8IGm6ovvmprQIDAQAB o4IDZzCCA2MwHQYDVR0OBBYEFMZaHaHLHJIK4vm3SCcP3thzepGEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzRmNTRi NC0wMDlmLTQ2Y2UtOWFjMC0zNmJhYzhkOTFlMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNGY1NGI0 LTAwOWYtNDZjZS05YWMwLTM2YmFjOGQ5MWUyZS8xL3hsb2RvY3Nja2dyaS1iZElK d19lMkhONmtZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHbBggrBgEF BQcBBwEB/wSByzCByDCBtgQCAAEwga8DBAAlLMcDBAAtQ9cDBAAtgU8DBAEtiJAD BAQulvADBABNU1QDBAFV61ADBABbvPQwDAMEAFvWdQMEA1vWcAMEAFvjmwMEAFvr ngMEAVvxtAMEAVvzvAMEAV6eFAMDAIdqAwMAiOoDAwCZUAMEBLBnUAMEALB3jAME ALB3jgMEAMBtYQMEAMJF/TAMAwQBwnGWAwQAwnGYAwQCwrtkAwQAwwO1AwQBw1/Y AwQAw/XuMA0EAgACMAcDBQMqD0BAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwC+ jAIDANxyAgMA++4wDQYJKoZIhvcNAQELBQADggEBAFs0nl+mJ7vik9icvVHr1t2Y aRjk0WDiyg6sbwariUhqrcoXs/JChq5Tqyv0HMjJot+9WpGiza0onzj6h+/OS8R9 9+6DS3o9eQDMOAhdYkoufP3CAwN/kUTmLK7s5338nndUJNZFS47bQkxpYIXrd+u+ GR9Wv14D+VELT3ZFLIrnbhW2jtPIeDcW3Neg7YsT2ZbSFp7/qhwmn6Qln1PVcROx neitiXcPk+yoc95BUYbZzzroz325ax0bi2sdSRINsYdiXtkHq4Ub0aMp+/pct5N5 /0GDj3OZwwAJz+fEwYqmyl7toIzLKNvQ4cfEbBRhbAnrTBW9SJYINz8/Ld8O3rk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:32 2026 by rpki-client