This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer File: xqJJoOrNiry-oNgu9xAW04bo75Q.cer (raw, json) Hash identifier: XP2yw0omzALYVa7ubZxuZHyWt7K0k6Eua61RYD0fJ8A= Subject key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C802C2933E6C41DAA5CD2707CA94EE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44928 IP: 37.148.128.0/21 IP: 45.157.156.0/22 IP: 93.88.144.0/20 IP: 95.155.128.0 -- 95.155.183.255 IP: 152.89.84.0/22 IP: 2a00:c0c0::/32 IP: 2a02:520::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2c:29:33:e6:c4:1d:aa:5c:d2:70:7c:a9:4e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:ec:6d:6f:80:da:47:38:45:82:ad:f1:86: 04:71:0b:25:64:e5:85:90:77:bc:dc:18:fa:a4:e7: 88:23:a8:d8:e7:ab:92:f6:09:6a:50:13:39:6f:a1: 97:53:b9:08:95:c1:b9:26:69:e0:1d:df:7a:ae:f9: bc:f6:bf:64:9b:e4:14:bb:fb:da:0d:06:2d:eb:33: 9d:02:3f:f4:c2:cc:6e:57:f0:bb:ab:ee:4b:5f:7f: 72:a0:68:f4:a1:98:77:88:b5:94:14:17:dc:22:31: 5b:f1:20:51:1c:bb:28:ca:6b:f1:d2:24:61:85:8d: 4c:e1:17:4a:58:af:62:75:5a:16:73:61:9c:3a:05: 5a:8d:89:74:df:32:a1:6c:25:30:86:1d:96:91:14: 34:e9:04:d8:10:1e:50:92:63:a0:af:0f:46:82:cc: dc:67:36:3f:6c:70:1e:2c:bf:68:f8:f1:ac:fb:e3: 5f:a8:16:dc:30:92:b4:f0:91:fa:bc:ca:f2:98:fb: 9e:87:e8:b0:83:c9:ec:27:6b:93:ed:9b:39:0e:8c: fb:e2:fb:12:89:d2:a7:aa:03:cc:bb:8d:93:0f:2e: 52:ce:81:77:ad:43:32:24:b6:2b:ad:30:29:3c:1c: 1a:e9:f9:92:45:e8:af:a5:48:3a:28:a2:4b:81:54: ad:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.128.0/21 45.157.156.0/22 93.88.144.0/20 95.155.128.0-95.155.183.255 152.89.84.0/22 IPv6: 2a00:c0c0::/32 2a02:520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44928 Signature Algorithm: sha256WithRSAEncryption 4b:98:0f:39:c1:23:c9:0d:13:f9:fa:63:25:28:5e:ad:25:76: d7:46:82:30:7d:2a:9e:ce:28:3a:6a:2b:f9:05:c7:a2:d5:f1: 0d:83:41:bc:ec:7d:24:ba:d1:49:db:0a:3d:0f:3a:0b:2d:bb: 98:7c:83:d8:8c:3f:45:fa:95:4d:31:be:3e:5d:6e:55:87:6c: 49:a6:36:84:62:cd:18:f0:78:19:22:cd:6d:e3:c1:07:47:43: b8:da:cb:c6:82:b9:7d:e7:63:04:a7:8e:90:b2:1c:f1:bb:f0: cc:f6:a8:a2:f1:b1:a8:c5:01:ad:68:1a:e1:e8:32:1b:1e:42: 33:f9:18:25:5b:00:5c:04:90:92:55:12:a6:7d:42:ba:6d:7b: 02:33:f5:78:6a:6d:46:7f:98:bf:6e:71:34:38:f4:21:71:94: 4e:70:24:b4:92:51:2f:66:2d:a2:cb:5d:43:3f:94:6a:9e:5c: 88:3f:89:27:c2:a8:91:7c:86:c4:29:65:2b:62:3c:8b:57:13: 1a:b2:1c:94:9e:41:7c:2b:45:dc:db:04:bc:34:0b:72:a3:c4: a1:0f:6b:9d:86:3b:af:0b:3f:39:c9:bd:4e:6e:ac:da:2f:f8: 3d:ec:16:71:ab:a5:a8:65:98:d9:b8:6e:bf:64:7c:cb:39:92: 37:a9:41:2d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt8gCwpM+bEHapc0nB8qU7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmEyNDlhMGVhY2Q4YWJjYmVhMGQ4MmVmNzEwMTZkMzg2ZThlZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDTsbW+A2kc4RYKt8YYEcQslZOWF kHe83Bj6pOeII6jY56uS9glqUBM5b6GXU7kIlcG5JmngHd96rvm89r9km+QUu/va DQYt6zOdAj/0wsxuV/C7q+5LX39yoGj0oZh3iLWUFBfcIjFb8SBRHLsoymvx0iRh hY1M4RdKWK9idVoWc2GcOgVajYl03zKhbCUwhh2WkRQ06QTYEB5QkmOgrw9Ggszc ZzY/bHAeLL9o+PGs++NfqBbcMJK08JH6vMrymPueh+iwg8nsJ2uT7Zs5Doz74vsS idKnqgPMu42TDy5SzoF3rUMyJLYrrTApPBwa6fmSReivpUg6KKJLgVStIQIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFMaiSaDqzYq8vqDYLvcQFtOG6O+UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzMwZjE4 Ni05MGUyLTRjYTYtOTE3ZS0yMTA1N2QyMjhkMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMzBmMTg2 LTkwZTItNGNhNi05MTdlLTIxMDU3ZDIyOGQwNS8xL3hxSkpvT3JOaXJ5LW9OZ3U5 eEFXMDRibzc1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAsBAIAATAmAwQDJZSAAwQCLZ2cAwQEXViQMAwDBAdfm4ADBANf m7ADBAKYWVQwFAQCAAIwDgMFACoAwMADBQAqAgUgMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCvgDANBgkqhkiG9w0BAQsFAAOCAQEAS5gPOcEjyQ0T+fpjJSherSV2 10aCMH0qns4oOmor+QXHotXxDYNBvOx9JLrRSdsKPQ86Cy27mHyD2Iw/RfqVTTG+ Pl1uVYdsSaY2hGLNGPB4GSLNbePBB0dDuNrLxoK5fedjBKeOkLIc8bvwzPaoovGx qMUBrWga4egyGx5CM/kYJVsAXASQklUSpn1Cum17AjP1eGptRn+Yv25xNDj0IXGU TnAktJJRL2YtostdQz+Uap5ciD+JJ8KokXyGxCllK2I8i1cTGrIclJ5BfCtF3NsE vDQLcqPEoQ9rnYY7rws/Ocm9Tm6s2i/4PewWcaulqGWY2bhuv2R8yzmSN6lBLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:44:11 2026 by rpki-client