This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer File: xpHzRaUDy4yKneQn6IEu__IbIrU.cer (raw, json) Hash identifier: 4xLr4voYuASZkukn4QoTLEE/9NvCyACD1CB4Pbd1XC8= Subject key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA473D2D8C705ADB485832FA3077518 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61354 IP: 146.19.204.0/24 IP: 176.126.123.0/24 IP: 185.9.40.0/22 IP: 185.254.192.0/22 IP: 188.93.119.0/24 IP: 193.107.21.0/24 IP: 2a02:dcc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:73:d2:d8:c7:05:ad:b4:85:83:2f:a3:07:75:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:e5:4a:8b:16:e2:63:08:12:25:9f:2a:61: 9e:bd:7d:c2:d1:79:98:90:a0:66:19:7b:4f:e1:98: 93:c7:8b:f9:5c:58:7d:34:58:74:3b:41:3d:86:2e: a0:bb:a5:2b:11:f0:f3:66:6c:a2:44:be:8a:4b:4b: 21:cc:e9:1b:7b:ce:78:be:00:6f:57:08:78:7e:23: 2a:62:15:19:78:0d:cb:fc:73:68:a1:ce:5e:c9:89: e3:ba:0c:94:46:e6:81:89:36:48:db:e8:f5:86:ad: 03:ea:e8:9f:1c:1d:7b:a1:07:6a:51:a0:8c:90:0b: 6b:25:a5:5b:61:72:b2:ec:87:81:a9:3d:e8:2d:38: 7b:b5:88:69:43:93:47:10:94:13:0b:3f:de:d6:d7: d4:6f:f3:a5:c1:28:3a:79:fe:c0:2b:15:34:81:31: 89:fc:46:8d:33:45:5c:6f:d6:fb:b1:32:ec:39:2e: 58:51:1f:2f:c7:f5:bd:0d:8c:5e:ed:d0:f2:fd:c5: 30:ec:b3:f3:e6:1d:69:18:ce:56:4c:cf:db:ca:7a: 45:8f:1e:0c:b6:fc:fd:d8:40:bf:95:9d:36:8e:6a: 0e:36:ae:1f:5d:11:ce:93:8c:7e:12:7f:ae:da:36: e1:54:27:b8:a4:d8:ac:2e:ed:08:51:fd:d9:62:7c: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.204.0/24 176.126.123.0/24 185.9.40.0/22 185.254.192.0/22 188.93.119.0/24 193.107.21.0/24 IPv6: 2a02:dcc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61354 Signature Algorithm: sha256WithRSAEncryption ac:ac:74:f5:dc:3b:09:fc:a9:a6:5c:dd:e0:5c:fd:78:97:74: 52:bb:ed:db:ab:c2:13:3c:71:ac:b3:2f:ed:f4:78:5a:60:77: 17:68:ad:e4:9c:38:ae:c6:06:f0:a7:a3:47:13:6e:1f:69:07: 88:cd:de:2a:f1:c0:59:9b:89:8a:14:de:f6:85:7a:58:59:51: 45:f4:0f:de:b9:3f:a6:e4:6c:5a:83:d5:77:a2:a6:b9:78:f6: d8:3d:ab:c2:ec:e3:e2:a7:28:e8:30:a7:97:3e:71:cf:b8:4b: 96:48:65:53:51:cf:d8:ff:0c:74:8b:f1:87:37:29:79:b6:ec: bf:7c:d6:d1:17:70:16:41:88:41:c7:96:df:87:b8:32:85:2f: 4d:32:54:39:f0:76:42:10:63:ec:04:ba:23:25:e8:17:07:6d: e7:1d:8d:14:2b:2c:6c:17:48:57:22:ce:d4:ca:19:4e:58:c3: 18:30:e3:53:ce:4b:99:c6:f2:da:14:36:a8:bd:fa:66:07:d7: fc:40:84:35:d4:cd:86:0f:56:f3:63:91:e2:02:2b:d3:05:c3: 84:d3:cd:6e:4a:ca:16:92:cc:70:7f:1f:e5:56:27:39:cc:83: e4:7a:c3:06:1b:af:ab:fa:f6:9f:5c:a3:7e:56:e5:d8:7d:bc: 7b:4a:54:6f -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt+pHPS2McFrbSFgy+jB3UYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjkxZjM0NWE1MDNjYjhjOGE5ZGU0MjdlODgxMmVmZmYyMWIyMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWLlSosW4mMIEiWfKmGevX3C0XmY kKBmGXtP4ZiTx4v5XFh9NFh0O0E9hi6gu6UrEfDzZmyiRL6KS0shzOkbe854vgBv Vwh4fiMqYhUZeA3L/HNooc5eyYnjugyURuaBiTZI2+j1hq0D6uifHB17oQdqUaCM kAtrJaVbYXKy7IeBqT3oLTh7tYhpQ5NHEJQTCz/e1tfUb/OlwSg6ef7AKxU0gTGJ /EaNM0Vcb9b7sTLsOS5YUR8vx/W9DYxe7dDy/cUw7LPz5h1pGM5WTM/bynpFjx4M tvz92EC/lZ02jmoONq4fXRHOk4x+En+u2jbhVCe4pNisLu0IUf3ZYnyLOwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFMaR80WlA8uMip3kJ+iBLv/yGyK1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzE5ZTZl Mi1jMmExLTRlYmMtYmE1YS1lN2NhZjVlNWJjYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMTllNmUy LWMyYTEtNGViYy1iYTVhLWU3Y2FmNWU1YmNiYS8xL3hwSHpSYVVEeTR5S25lUW42 SUV1X19JYklyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAkhPMAwQAsH57AwQCuQkoAwQCuf7AAwQAvF13 AwQAwWsVMA0EAgACMAcDBQMqAtzAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDv qjANBgkqhkiG9w0BAQsFAAOCAQEArKx09dw7Cfypplzd4Fz9eJd0Urvt26vCEzxx rLMv7fR4WmB3F2it5Jw4rsYG8KejRxNuH2kHiM3eKvHAWZuJihTe9oV6WFlRRfQP 3rk/puRsWoPVd6KmuXj22D2rwuzj4qco6DCnlz5xz7hLlkhlU1HP2P8MdIvxhzcp ebbsv3zW0RdwFkGIQceW34e4MoUvTTJUOfB2QhBj7AS6IyXoFwdt5x2NFCssbBdI VyLO1MoZTljDGDDjU85Lmcby2hQ2qL36ZgfX/ECENdTNhg9W82OR4gIr0wXDhNPN bkrKFpLMcH8f5VYnOcyD5HrDBhuvq/r2n1yjflbl2H28e0pUbw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:16 2026 by rpki-client