This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer (raw, json) Hash identifier: mE5/m3/cvVwlPbni1UQMX5eX8JnTmrUIi6eUWNJAdlE= Subject key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A31F33447A0D6C14FD997F70AAD770 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5631 AS: 31631 AS: 43157 IP: 45.150.140.0/22 IP: 79.99.88.0/22 IP: 79.173.128.0/18 IP: 80.252.120.0/22 IP: 83.143.224.0/21 IP: 103.110.208.0/22 IP: 109.224.248.0/21 IP: 162.255.208.0/21 IP: 185.108.168.0/22 IP: 185.205.172.0/22 IP: 193.178.54.0/23 IP: 193.178.112.0/23 IP: 195.167.128.0/20 IP: 195.167.176.0/20 IP: 209.42.4.0 -- 209.42.15.255 IP: 2a00:5840::/32 IP: 2a02:890::/32 IP: 2a06:e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1f:33:44:7a:0d:6c:14:fd:99:7f:70:aa:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:56:49:52:3f:b6:74:39:59:76:15:71:8b: 5e:34:7f:64:c3:5b:99:86:43:52:18:8d:cb:40:af: 84:6d:02:1b:c2:7e:60:03:25:c1:70:af:a3:79:3a: 46:18:52:62:c5:90:f1:8a:4e:2d:34:f4:82:2b:97: 79:2d:f5:cd:74:9f:a4:1a:37:1b:1b:bb:93:64:01: a6:d9:54:2f:a1:5f:e7:c7:17:b2:64:70:1e:7f:88: 62:1a:c3:fd:aa:58:63:dc:72:8e:ec:46:b7:42:58: 4d:04:75:88:9c:1e:d8:c9:bf:52:f7:2e:6c:f3:17: 80:b1:81:3c:bc:75:1b:1b:ef:5a:56:7d:b5:88:56: 44:ac:9a:2c:21:8b:e2:41:e7:d7:ef:f4:56:73:86: 17:c9:d2:10:e2:3a:08:06:72:ea:ef:77:9c:b4:b7: 7d:00:bb:ac:e9:d3:f9:1b:89:85:68:8e:0c:83:17: 14:2d:e4:ef:0a:92:90:9e:3d:8d:ad:8f:63:d0:41: 9f:ac:16:61:26:94:b3:70:8e:86:48:e2:6a:af:eb: 13:56:3f:84:2e:f0:c2:82:8a:4b:a3:23:1f:c0:bf: 98:94:0b:19:e2:3d:b7:8f:87:b2:da:3f:3f:0b:ac: e6:39:db:51:02:f4:17:23:ea:28:06:31:02:40:0e: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.140.0/22 79.99.88.0/22 79.173.128.0/18 80.252.120.0/22 83.143.224.0/21 103.110.208.0/22 109.224.248.0/21 162.255.208.0/21 185.108.168.0/22 185.205.172.0/22 193.178.54.0/23 193.178.112.0/23 195.167.128.0/20 195.167.176.0/20 209.42.4.0-209.42.15.255 IPv6: 2a00:5840::/32 2a02:890::/32 2a06:e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5631 31631 43157 Signature Algorithm: sha256WithRSAEncryption 86:41:9d:38:a2:aa:d9:a1:e7:33:55:2d:b1:35:0f:26:1c:90: 6f:1e:17:63:7b:94:e7:ae:3a:6d:5d:2f:e9:0d:0f:53:af:2d: 6f:f3:b5:a0:8e:10:6b:d4:70:37:55:3c:72:78:b6:85:99:a4: 88:e8:12:f6:dd:9f:31:51:72:b0:4e:f6:b9:da:23:b3:47:af: 78:af:e0:3a:48:04:af:d6:a1:1f:c7:84:07:24:6f:a5:6a:83: d0:18:76:98:06:97:1b:08:82:83:3f:83:9a:d5:66:33:1a:f8: ad:1c:89:2f:90:ef:8f:85:b7:13:56:00:65:b0:a4:1b:cf:c5: d7:60:89:c1:47:32:88:1e:44:29:cd:7e:bb:37:88:cc:a6:e5: 39:e2:10:3d:3b:3a:34:36:37:aa:f4:9f:17:cc:10:bb:bd:09: 36:21:22:88:53:00:15:16:9a:eb:78:fc:e9:82:6f:65:64:70: d1:89:d3:34:39:8f:85:71:6c:7a:78:93:66:9b:7e:f6:66:04: 5e:5c:79:22:6b:83:46:78:1a:c8:68:e3:72:74:29:7c:bc:7f: e3:78:9c:ed:6b:51:65:83:4c:ec:22:2c:dc:90:af:95:47:0c: b8:5c:d3:29:14:54:8b:fa:1a:24:0b:a6:e9:78:63:c0:98:c2: e7:93:2e:db -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZt4ox8zRHoNbBT9mX9wqtdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmMwZmRiYjY1Y2E0OTFjYjgzY2MwODVhNDNlMDM0MDU5NmFlODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WFWSVI/tnQ5WXYVcYteNH9kw1uZ hkNSGI3LQK+EbQIbwn5gAyXBcK+jeTpGGFJixZDxik4tNPSCK5d5LfXNdJ+kGjcb G7uTZAGm2VQvoV/nxxeyZHAef4hiGsP9qlhj3HKO7Ea3QlhNBHWInB7Yyb9S9y5s 8xeAsYE8vHUbG+9aVn21iFZErJosIYviQefX7/RWc4YXydIQ4joIBnLq73ectLd9 ALus6dP5G4mFaI4MgxcULeTvCpKQnj2NrY9j0EGfrBZhJpSzcI6GSOJqr+sTVj+E LvDCgopLoyMfwL+YlAsZ4j23j4ey2j8/C6zmOdtRAvQXI+ooBjECQA6gQQIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFMbA/btlykkcuDzAhaQ+A0BZauhzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzY2Njli Yi0xZjYyLTQyYTMtOWU4ZC00OWE2NTQ1Nzg2ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNjY2OWJi LTFmNjItNDJhMy05ZThkLTQ5YTY1NDU3ODZlNi8xL3hzRDl1MlhLU1J5NFBNQ0Zw RDREUUZscTZITS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGaBggrBgEF BQcBBwEB/wSBijCBhzBoBAIAATBiAwQCLZaMAwQCT2NYAwQGT62AAwQCUPx4AwQD U4/gAwQCZ27QAwQDbeD4AwQDov/QAwQCuWyoAwQCuc2sAwQBwbI2AwQBwbJwAwQE w6eAAwQEw6ewMAwDBALRKgQDBATRKgAwGwQCAAIwFQMFACoAWEADBQAqAgiQAwUD KgYOQDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgIV/wICe48CAwColTANBgkqhkiG 9w0BAQsFAAOCAQEAhkGdOKKq2aHnM1UtsTUPJhyQbx4XY3uU5646bV0v6Q0PU68t b/O1oI4Qa9RwN1U8cni2hZmkiOgS9t2fMVFysE72udojs0eveK/gOkgEr9ahH8eE ByRvpWqD0Bh2mAaXGwiCgz+DmtVmMxr4rRyJL5Dvj4W3E1YAZbCkG8/F12CJwUcy iB5EKc1+uzeIzKblOeIQPTs6NDY3qvSfF8wQu70JNiEiiFMAFRaa63j86YJvZWRw 0YnTNDmPhXFseniTZpt+9mYEXlx5ImuDRngayGjjcnQpfLx/43ic7WtRZYNM7CIs 3JCvlUcMuFzTKRRUi/oaJAum6XhjwJjC55Mu2w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:52 2026 by rpki-client