This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer File: 1XgxwfXmACVCvOut7yQSithG6vk.cer (raw, json) Hash identifier: GPZ6tF3M6LiwoiPbwdVEKMrU5UQtQ0ziYHcL5fY3K90= Subject key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80A08CDC7BE18C0F1BB409FA7D3E18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.216.13.0/24 IP: 2a13:6300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:a0:8c:dc:7b:e1:8c:0f:1b:b4:09:fa:7d:3e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d57831c1f5e6002542bcebadef24128ad846eaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:77:65:36:5b:19:d7:57:ce:03:a3:be:36: a2:aa:3f:94:2d:c1:56:86:a2:11:56:41:49:32:3c: f8:d1:0e:94:fc:52:5e:b7:09:03:b8:8f:f0:3a:4b: a4:b5:ef:f3:31:cb:fc:4d:e7:7b:e8:cd:f3:d0:9d: 94:50:3a:ed:8e:e8:9e:86:42:8e:0f:51:04:aa:99: 3f:93:3a:80:27:7a:b1:c8:9f:50:30:87:6d:d9:9f: e3:98:ed:94:e9:10:0d:95:6e:bd:d4:8d:32:68:52: c0:7a:03:0c:90:9b:70:37:79:42:c2:99:20:a2:7c: 7e:92:87:1a:ac:d9:64:85:fb:ea:92:9a:9b:64:d3: 5d:21:22:b3:9b:9f:da:77:1b:cb:1a:f5:da:e9:95: 6b:6f:56:2c:e6:38:e2:6f:8a:fe:99:63:70:35:9b: fa:2c:c0:07:bd:5b:28:b6:32:34:a3:f1:62:52:11: df:50:cc:28:21:97:f1:b1:b4:ad:51:a6:3f:4b:20: d5:6c:85:1f:93:2c:00:4a:3c:41:b3:30:6d:00:9c: 5c:5d:7e:ed:a4:4d:78:fe:26:ea:e3:f9:e4:ed:52: 9f:ff:a9:15:f7:dc:d5:5b:e6:0b:0d:95:09:ef:f8: 44:94:af:2a:e7:1a:1a:03:4c:f2:1a:9a:90:3d:62: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.13.0/24 IPv6: 2a13:6300::/29 Signature Algorithm: sha256WithRSAEncryption 8f:28:4f:a8:7a:be:31:4e:b5:c9:cd:af:a7:b2:b4:7a:8c:85: 92:6a:fb:36:d5:60:d7:f4:f5:d1:2d:20:78:8e:3a:39:fe:60: 77:70:b5:69:8b:e4:4c:fd:60:63:a8:8f:eb:93:c4:6f:b4:26: 66:ae:d5:a6:34:0a:c6:80:e2:b9:68:8f:f1:9a:37:2f:81:e4: 93:d3:f5:de:0e:40:a3:06:a0:c3:6a:d6:ff:19:02:18:ef:37: 7a:43:41:a5:63:18:ca:74:70:9c:84:46:2c:53:48:4f:13:c3: 52:98:df:7f:48:af:35:37:11:0f:6f:42:b2:4c:8f:27:c9:18: dc:87:de:6f:7b:b7:32:ec:03:17:85:64:c7:5f:fc:1e:53:3e: 9e:21:ba:64:9b:80:72:2e:62:f0:82:89:2a:76:a7:e5:07:10: d3:11:fa:d8:12:91:bd:ce:6c:f6:49:64:63:b9:6e:79:9a:2a: 35:6f:6d:4b:be:70:69:ab:cd:e5:1f:c6:1e:b8:36:65:01:e9: 2b:df:8e:e0:53:a7:c0:f9:c0:9b:21:e4:34:a4:a5:83:6c:86: 7c:53:39:10:cc:62:9a:2a:35:1d:a6:29:8a:b5:d2:08:3f:ca: 91:29:7f:61:55:78:4c:ac:c3:6a:b2:db:40:1a:d5:07:81:52: dd:80:f2:54 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/gKCM3HvhjA8btAn6fT4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTc4MzFjMWY1ZTYwMDI1NDJiY2ViYWRlZjI0MTI4YWQ4NDZlYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrx3ZTZbGddXzgOjvjaiqj+ULcFW hqIRVkFJMjz40Q6U/FJetwkDuI/wOkukte/zMcv8Ted76M3z0J2UUDrtjuiehkKO D1EEqpk/kzqAJ3qxyJ9QMIdt2Z/jmO2U6RANlW691I0yaFLAegMMkJtwN3lCwpkg onx+kocarNlkhfvqkpqbZNNdISKzm5/adxvLGvXa6ZVrb1Ys5jjib4r+mWNwNZv6 LMAHvVsotjI0o/FiUhHfUMwoIZfxsbStUaY/SyDVbIUfkywASjxBszBtAJxcXX7t pE14/ibq4/nk7VKf/6kV99zVW+YLDZUJ7/hElK8q5xoaA0zyGpqQPWIOvQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNV4McH15gAlQrzrre8kEorYRur5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2IxOTY0 YS0zMGFlLTQ0ODItODQ1ZC03NDYzNjVkYmE1YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYjE5NjRh LTMwYWUtNDQ4Mi04NDVkLTc0NjM2NWRiYTViYi8xLzFYZ3h3ZlhtQUNWQ3ZPdXQ3 eVFTaXRoRzZ2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudgNMA0EAgACMAcDBQMqE2MAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPKE+oer4xTrXJza+nsrR6jIWSavs21WDX9PXRLSB4jjo5/mB3 cLVpi+RM/WBjqI/rk8RvtCZmrtWmNArGgOK5aI/xmjcvgeST0/XeDkCjBqDDatb/ GQIY7zd6Q0GlYxjKdHCchEYsU0hPE8NSmN9/SK81NxEPb0KyTI8nyRjch95ve7cy 7AMXhWTHX/weUz6eIbpkm4ByLmLwgokqdqflBxDTEfrYEpG9zmz2SWRjuW55mio1 b21LvnBpq83lH8YeuDZlAekr347gU6fA+cCbIeQ0pKWDbIZ8UzkQzGKaKjUdpimK tdIIP8qRKX9hVXhMrMNqsttAGtUHgVLdgPJU -----END CERTIFICATE-----Generated at Wed Jan 21 11:26:01 2026 by rpki-client