This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer File: X-WOcyoPcfTwEwLWIWcXO9mxfME.cer (raw, json) Hash identifier: 5W4TVzpdDeYsFyIhceDonbJGu0T7MzqAL5lm0fM4KGM= Subject key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834378F81757F9209C14FC88BBAFB08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1624 AS: 11868 IP: 57.0.0.0/16 IP: 57.2.0.0/15 IP: 57.8.0.0 -- 57.12.255.255 IP: 57.14.0.0/15 IP: 57.20.0.0/16 IP: 57.22.0.0 -- 57.26.255.255 IP: 57.28.0.0/15 IP: 57.32.0.0/16 IP: 57.34.0.0/16 IP: 57.37.0.0/16 IP: 57.39.0.0 -- 57.40.255.255 IP: 57.48.0.0/16 IP: 57.51.0.0/16 IP: 57.53.0.0/16 IP: 57.56.0.0 -- 57.60.255.255 IP: 57.186.0.0/15 IP: 57.189.0.0/16 IP: 57.206.2.0 -- 57.206.255.255 IP: 57.224.0.0/15 IP: 57.227.0.0 -- 57.229.255.255 IP: 57.231.0.0 -- 57.232.255.255 IP: 57.235.0.0/16 IP: 57.237.0.0/16 IP: 57.245.0.0/16 IP: 57.247.0.0/16 IP: 57.249.0.0/16 IP: 57.252.0.0/15 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:37:8f:81:75:7f:92:09:c1:4f:c8:8b:ba:fb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:ab:c0:4b:aa:a1:32:51:01:be:86:12:20: 18:0e:a2:71:e8:d3:b4:e9:ab:f6:4d:dc:d0:45:29: 24:d8:bc:bb:78:3d:cd:4a:45:c7:ac:12:d5:a9:54: 61:63:96:cc:28:81:8e:67:45:42:a7:30:90:70:b9: 14:3d:da:53:8c:d5:57:12:0a:f4:2e:86:8c:29:5b: ed:0a:ef:2f:46:6a:07:9d:8a:55:85:c5:23:05:05: 45:db:9e:0d:b4:80:75:62:a6:c4:98:de:29:90:f7: a9:6b:d1:a6:0f:64:5e:fb:08:e4:72:e2:8e:f5:b5: 55:fe:4d:58:22:10:d1:9e:a2:76:a2:dc:3c:ad:f6: 40:49:a3:69:35:aa:70:55:0e:93:ab:41:46:dc:29: 40:c6:56:ca:fb:66:bc:30:23:d8:cb:cd:65:52:45: 21:f3:af:9a:04:bf:58:7e:54:03:07:b0:de:ab:fd: d4:db:6c:2e:91:f4:b6:d7:c4:19:60:fc:4e:f8:1e: 04:56:2e:87:fd:38:ae:04:ea:c1:0e:39:b2:0f:0b: 61:44:fd:00:a8:1d:b7:2e:f5:6b:43:21:43:a6:f0: f8:7d:ad:9f:2e:13:85:fe:42:dd:0f:50:84:85:82: 5a:12:ea:2a:bb:5a:7c:a4:41:c9:96:84:92:3c:ae: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.0.0.0/16 57.2.0.0/15 57.8.0.0-57.12.255.255 57.14.0.0/15 57.20.0.0/16 57.22.0.0-57.26.255.255 57.28.0.0/15 57.32.0.0/16 57.34.0.0/16 57.37.0.0/16 57.39.0.0-57.40.255.255 57.48.0.0/16 57.51.0.0/16 57.53.0.0/16 57.56.0.0-57.60.255.255 57.186.0.0/15 57.189.0.0/16 57.206.2.0-57.206.255.255 57.224.0.0/15 57.227.0.0-57.229.255.255 57.231.0.0-57.232.255.255 57.235.0.0/16 57.237.0.0/16 57.245.0.0/16 57.247.0.0/16 57.249.0.0/16 57.252.0.0/15 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1624 11868 Signature Algorithm: sha256WithRSAEncryption 95:98:b1:e3:88:a4:dd:12:67:99:a1:b9:f6:99:74:7a:88:31: 73:61:c7:8a:25:73:96:42:03:0f:e0:b4:32:03:50:f8:9a:01: 82:89:a5:ff:9d:7d:95:26:0e:b0:86:c6:6d:73:68:70:f3:37: ed:7e:2f:ab:ac:2d:dc:62:1f:55:21:02:3a:8a:1a:fa:6f:fc: a7:26:c5:1a:23:7a:8e:e2:da:de:b9:27:3f:49:48:b9:66:07: a4:55:b5:62:0f:02:9b:94:52:7d:e1:38:18:08:66:11:44:b4: bf:86:5a:1b:bd:dc:97:f0:ac:13:a6:57:72:d8:b1:87:10:3e: d3:d9:c2:e4:a6:ed:66:08:29:05:bf:8b:04:98:86:1f:ef:b5: 0d:67:c9:bd:76:38:de:31:1f:9f:e7:77:12:34:b2:d8:14:f1: 64:24:46:ac:ac:49:35:4c:62:71:6b:4d:4f:1f:a9:0f:8c:a8: a3:95:d0:ae:ad:a4:5d:28:7b:eb:4c:b0:ff:be:dc:c2:4c:38: fc:32:c3:11:94:95:6c:ff:04:af:79:1a:2e:45:b7:61:ad:ae: 23:22:f4:8c:26:1a:f7:de:3a:d9:de:fa:86:75:d2:39:2a:ca: 85:dc:ce:90:59:be:0c:67:21:ad:f3:e6:69:90:29:c0:9d:e3: 21:d9:8b:4a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAZt4NDePgXV/kgnBT8iLuvsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmU1OGU3MzJhMGY3MWY0ZjAxMzAyZDYyMTY3MTczYmQ5YjE3Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaqrwEuqoTJRAb6GEiAYDqJx6NO0 6av2TdzQRSkk2Ly7eD3NSkXHrBLVqVRhY5bMKIGOZ0VCpzCQcLkUPdpTjNVXEgr0 LoaMKVvtCu8vRmoHnYpVhcUjBQVF254NtIB1YqbEmN4pkPepa9GmD2Re+wjkcuKO 9bVV/k1YIhDRnqJ2otw8rfZASaNpNapwVQ6Tq0FG3ClAxlbK+2a8MCPYy81lUkUh 86+aBL9YflQDB7Deq/3U22wukfS218QZYPxO+B4EVi6H/TiuBOrBDjmyDwthRP0A qB23LvVrQyFDpvD4fa2fLhOF/kLdD1CEhYJaEuoqu1p8pEHJloSSPK5jOQIDAQAB o4IDWzCCA1cwHQYDVR0OBBYEFF/ljnMqD3H08BMC1iFnFzvZsXzBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzBkODQw Yy05NTJkLTQ3MDItYWJhMy1iNmU1OGY5YzgyZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMGQ4NDBj LTk1MmQtNDcwMi1hYmEzLWI2ZTU4ZjljODJlMS8xL1gtV09jeW9QY2ZUd0V3TFdJ V2NYTzlteGZNRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHWBggrBgEF BQcBBwEB/wSBxjCBwzCBwAQCAAEwgbkDAwA5AAMDATkCMAoDAwM5CAMDADkMAwMB OQ4DAwA5FDAKAwMBORYDAwA5GgMDATkcAwMAOSADAwA5IgMDADklMAoDAwA5JwMD ADkoAwMAOTADAwA5MwMDADk1MAoDAwM5OAMDADk8AwMBOboDAwA5vTALAwQBOc4C AwMAOc4DAwE54DAKAwMAOeMDAwE55DAKAwMAOecDAwA56AMDADnrAwMAOe0DAwA5 9QMDADn3AwMAOfkDAwE5/DAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIGWAICLlww DQYJKoZIhvcNAQELBQADggEBAJWYseOIpN0SZ5mhufaZdHqIMXNhx4olc5ZCAw/g tDIDUPiaAYKJpf+dfZUmDrCGxm1zaHDzN+1+L6usLdxiH1UhAjqKGvpv/KcmxRoj eo7i2t65Jz9JSLlmB6RVtWIPApuUUn3hOBgIZhFEtL+GWhu93JfwrBOmV3LYsYcQ PtPZwuSm7WYIKQW/iwSYhh/vtQ1nyb12ON4xH5/ndxI0stgU8WQkRqysSTVMYnFr TU8fqQ+MqKOV0K6tpF0oe+tMsP++3MJMOPwywxGUlWz/BK95Gi5Ft2GtriMi9Iwm GvfeOtne+oZ10jkqyoXczpBZvgxnIa3z5mmQKcCd4yHZi0o= -----END CERTIFICATE-----Generated at Tue Jan 27 00:35:03 2026 by rpki-client