This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer (raw, json) Hash identifier: i4nE5DHWVSLVO8BkAIEvVopPiSsLbvxEM1Sg+mSJwv0= Subject key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1269DD9479095B0816DDF3F8F4364B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24991 AS: 201237 IP: 81.93.192.0/20 IP: 185.81.20.0/22 IP: 185.198.168.0/22 IP: 2a03:da00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:69:dd:94:79:09:5b:08:16:dd:f3:f8:f4:36:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:eb:4a:c1:cc:01:cd:3c:36:8a:cd:7b:02: 9c:40:fc:37:42:fa:51:5a:17:9f:11:71:3a:db:38: 16:92:aa:dc:a8:ad:3f:c4:68:08:ee:14:9d:cc:c9: a5:d9:7a:27:2a:de:f7:c1:1f:91:ad:e4:fa:aa:32: 96:1c:66:89:84:70:9a:e1:5c:e5:64:62:cd:dc:29: ac:42:0e:7f:7c:66:2b:bb:29:19:f3:35:7a:e3:0a: 86:f1:cc:d5:62:c4:d5:8b:d7:cf:a6:d2:b9:a8:50: 29:0b:81:52:68:fd:a4:27:02:2a:4f:38:28:4a:1c: ef:91:8b:34:cc:89:d1:a1:ad:32:85:3a:ef:4f:e6: c9:db:16:1a:f5:41:e0:b0:21:2c:5e:51:91:f5:41: 36:b3:5e:8c:a8:41:9c:16:73:d2:54:d1:a1:6f:94: 45:1d:23:13:9b:ae:04:f1:49:f4:37:46:e5:3a:c0: c6:f8:82:63:67:c2:2f:43:10:a8:aa:52:e8:9b:97: e0:0d:6f:5e:93:12:04:94:39:31:32:51:83:7d:28: eb:49:cd:25:c2:02:09:10:d1:5e:bd:4b:9e:98:c8: 91:98:a9:9b:04:61:d5:b7:6d:60:ba:0f:db:ee:ed: 30:82:63:2c:f9:f3:bb:33:bb:59:a6:e8:62:b1:4f: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.93.192.0/20 185.81.20.0/22 185.198.168.0/22 IPv6: 2a03:da00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24991 201237 Signature Algorithm: sha256WithRSAEncryption 28:e0:0d:1c:2a:af:7d:95:58:4a:a6:ab:c6:09:b5:57:8d:24: aa:45:bc:c9:da:f3:cd:8b:c9:ab:2d:e2:e7:18:64:94:4a:0d: 91:db:1c:b6:b4:48:9a:43:fa:69:74:12:85:eb:eb:53:8b:ce: 50:ea:d0:2c:1f:e5:97:e1:d5:94:68:be:2d:9a:28:75:9f:b0: 92:47:b7:2b:fd:dc:91:c9:9f:36:0b:b6:fb:8c:5c:75:8f:ad: 2f:c2:83:dc:af:c1:61:b7:70:59:00:59:43:11:ef:91:23:d9: fb:03:e2:70:21:5c:e7:57:7b:46:59:75:21:5d:07:0c:02:8d: a2:28:d7:aa:9b:c1:7c:c8:03:7a:14:af:68:7b:dc:bb:74:31: 00:57:63:c2:4f:d4:95:51:1d:b6:12:4d:84:61:d5:5f:6a:c1: b9:48:39:37:b3:a1:f0:58:94:e8:26:39:82:99:af:f1:ce:fa: 82:8d:1e:a2:4d:e4:35:3f:a8:77:0a:d0:d1:23:5d:73:25:21: 59:5c:1d:a5:41:cb:dd:28:ed:3c:15:8c:c0:8d:4f:4a:15:78: 16:36:b8:6e:0c:97:d3:95:33:fd:36:35:8c:f6:80:be:fb:ff: 84:96:3a:5d:39:7c:cc:c6:09:c9:5d:ec:22:71:6a:42:36:2b: 7f:0c:59:04 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt8EmndlHkJWwgW3fP49DZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM1OGVkMWFmOTY0YTc2NjhlNDQzOTc2MTllZTE5ODVhMjQ5MWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X7rSsHMAc08NorNewKcQPw3QvpR WhefEXE62zgWkqrcqK0/xGgI7hSdzMml2XonKt73wR+RreT6qjKWHGaJhHCa4Vzl ZGLN3CmsQg5/fGYruykZ8zV64wqG8czVYsTVi9fPptK5qFApC4FSaP2kJwIqTzgo ShzvkYs0zInRoa0yhTrvT+bJ2xYa9UHgsCEsXlGR9UE2s16MqEGcFnPSVNGhb5RF HSMTm64E8Un0N0blOsDG+IJjZ8IvQxCoqlLom5fgDW9ekxIElDkxMlGDfSjrSc0l wgIJENFevUuemMiRmKmbBGHVt21gug/b7u0wgmMs+fO7M7tZpuhisU8G/QIDAQAB o4ICvzCCArswHQYDVR0OBBYEFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2ZjMjgx NS1kMjkzLTQwYWYtYmYzYy0xYzhhZmQxOWZkYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZmMyODE1 LWQyOTMtNDBhZi1iZjNjLTFjOGFmZDE5ZmRiYi8xL3hzV08wYS1XU25abzVFT1hZ WjdobUZva2tjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUV3AAwQCuVEUAwQCucaoMA0EAgACMAcDBQMq A9oAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmGfAgMDEhUwDQYJKoZIhvcNAQEL BQADggEBACjgDRwqr32VWEqmq8YJtVeNJKpFvMna882Lyast4ucYZJRKDZHbHLa0 SJpD+ml0EoXr61OLzlDq0Cwf5Zfh1ZRovi2aKHWfsJJHtyv93JHJnzYLtvuMXHWP rS/Cg9yvwWG3cFkAWUMR75Ej2fsD4nAhXOdXe0ZZdSFdBwwCjaIo16qbwXzIA3oU r2h73Lt0MQBXY8JP1JVRHbYSTYRh1V9qwblIOTezofBYlOgmOYKZr/HO+oKNHqJN 5DU/qHcK0NEjXXMlIVlcHaVBy90o7TwVjMCNT0oVeBY2uG4Ml9OVM/02NYz2gL77 /4SWOl05fMzGCcld7CJxakI2K38MWQQ= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:20 2026 by rpki-client