This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer (raw, json) Hash identifier: 7pzGT8h4O8wGgnYj2YtrNCwcxLwvDzjdclARrgMwMw8= Subject key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783511A06CA137A74C10DF23968E8FC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.165.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:11:a0:6c:a1:37:a7:4c:10:df:23:96:8e:8f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:60:11:be:ec:49:af:53:2c:79:8b:0f:9e: c9:9d:68:4e:29:66:ba:90:e1:c4:c4:32:33:11:72: 9b:40:94:3c:88:4d:bc:67:a2:4b:77:54:6d:36:0d: 11:04:8a:b0:5d:d8:5b:27:18:dc:2b:e2:3d:0a:ee: a9:c1:a3:36:26:9d:22:2b:44:a0:ea:a2:e4:c9:5f: 43:ed:40:94:c0:82:41:ff:e1:d3:2b:b3:09:e8:a7: d3:3e:a3:ca:03:3c:4a:d6:ba:7a:b6:eb:98:73:7f: d9:21:f6:55:41:97:fa:dd:6c:0b:b0:fe:38:b3:9b: fb:ab:d4:15:0e:5e:93:3b:12:31:2f:c2:77:df:1b: 37:fe:ff:f5:e1:14:d9:0d:8a:ba:36:c7:d3:72:ac: c1:3f:f7:6e:01:66:ed:84:d7:ae:30:87:6d:dd:4b: 04:87:0a:4d:33:60:80:be:4f:8b:73:1b:78:65:af: aa:74:83:2b:8e:bc:2d:dc:df:8c:8d:ab:c4:a6:36: 2e:78:5c:75:20:25:e7:0b:dc:f0:10:b7:94:d0:52: d1:aa:9a:19:d9:35:74:3c:c0:01:45:3a:78:b4:ed: 9c:1a:c7:78:08:0b:b9:f3:2f:7f:b0:ae:b3:d5:e9: af:c2:cd:94:b3:c1:b8:5a:5c:17:a3:ed:16:03:cd: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.193.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:58:f9:9b:31:96:cd:0f:16:92:bd:9e:b7:dc:10:89:04:7c: 2b:29:e2:e8:11:3e:96:0e:03:d3:a5:58:22:8c:f1:a4:3b:a5: 0f:c4:80:6e:c1:69:dc:e0:c2:13:99:83:ca:b5:dc:28:70:d8: ff:6d:82:2a:53:d2:e2:12:c6:54:b6:02:98:e5:87:80:db:17: 7f:15:45:fd:49:de:eb:39:d7:95:35:7c:5d:d3:4b:3e:37:31: 06:9f:2f:73:c4:30:4b:c6:c5:d0:fe:10:21:bd:4e:e2:5a:a6: f9:b5:5b:01:2d:89:13:7a:4c:b8:46:df:d6:4c:23:d1:25:96: 4f:34:90:da:39:5a:d7:bb:7e:6f:e9:71:4f:ad:09:b5:1d:73: 1c:5d:3f:7d:f6:da:45:8a:0b:41:f4:be:b3:0a:bc:99:48:0a: ce:3e:11:9e:67:c1:7d:36:76:96:34:3e:21:01:24:7b:77:7b: 04:c3:65:c9:6e:78:8b:b0:98:47:4e:3c:9b:41:70:d0:68:c3: bc:ca:f8:41:13:7f:ca:f5:f2:9f:24:33:d9:68:90:70:e3:0a: bc:9c:46:0b:33:dd:1d:dc:5e:32:83:2a:7c:75:10:44:2a:5a: 89:4a:f7:1a:89:3c:7c:ee:69:99:45:8d:fc:13:33:6b:a0:f1: fa:94:78:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NRGgbKE3p0wQ3yOWjo/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTcwZDI4ZmM0OWFhMGFlODA4YzM4M2Y1ODdmM2VhNGNmZWIwNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx9gEb7sSa9TLHmLD57JnWhOKWa6 kOHExDIzEXKbQJQ8iE28Z6JLd1RtNg0RBIqwXdhbJxjcK+I9Cu6pwaM2Jp0iK0Sg 6qLkyV9D7UCUwIJB/+HTK7MJ6KfTPqPKAzxK1rp6tuuYc3/ZIfZVQZf63WwLsP44 s5v7q9QVDl6TOxIxL8J33xs3/v/14RTZDYq6NsfTcqzBP/duAWbthNeuMIdt3UsE hwpNM2CAvk+Lcxt4Za+qdIMrjrwt3N+MjavEpjYueFx1ICXnC9zwELeU0FLRqpoZ 2TV0PMABRTp4tO2cGsd4CAu58y9/sK6z1emvws2Us8G4WlwXo+0WA81DqQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEVw0o/EmqCugIw4P1h/PqTP6wSdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzMyYTM1 My02NjU5LTQ4MGItYWJmNy1lYjA3Mzc5N2FjNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMzJhMzUz LTY2NTktNDgwYi1hYmY3LWViMDczNzk3YWM2Ni8xL1JYRFNqOFNhb0s2QWpEZ19X SDgtcE1fckJKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuaXBMA0GCSqGSIb3DQEBCwUAA4IBAQBfWPmb MZbNDxaSvZ633BCJBHwrKeLoET6WDgPTpVgijPGkO6UPxIBuwWnc4MITmYPKtdwo cNj/bYIqU9LiEsZUtgKY5YeA2xd/FUX9Sd7rOdeVNXxd00s+NzEGny9zxDBLxsXQ /hAhvU7iWqb5tVsBLYkTeky4Rt/WTCPRJZZPNJDaOVrXu35v6XFPrQm1HXMcXT99 9tpFigtB9L6zCryZSArOPhGeZ8F9NnaWND4hASR7d3sEw2XJbniLsJhHTjybQXDQ aMO8yvhBE3/K9fKfJDPZaJBw4wq8nEYLM90d3F4ygyp8dRBEKlqJSvcaiTx87mmZ RY38EzNroPH6lHhL -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:00 2026 by rpki-client