This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer File: XDodlz-bM5HorayqZk0bI9d48Ag.cer (raw, json) Hash identifier: TlEtJo1Ouw7Y8cxgp/tIvzc5v5sI4lNL/+DdakMHRi4= Subject key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FBFCB1BF605D7FBB4D58995622C2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13004 IP: 91.245.214.0/24 IP: 185.1.27.0/24 IP: 193.105.163.0/24 IP: 2001:7f8:1e::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bf:cb:1b:f6:05:d7:fb:b4:d5:89:95:62:2c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:01:c1:ba:e4:1f:9e:60:ca:ed:11:41:9e: 9b:f5:2d:7d:f0:1f:35:2a:21:b4:25:8e:33:17:02: a5:d6:f0:e4:23:c4:65:19:79:62:a8:b3:cd:fc:4c: 78:41:a0:52:d8:50:f1:df:9f:14:b8:be:25:e6:81: 8f:da:73:82:e5:57:db:60:9b:a5:d4:f4:c8:ef:77: 1b:90:67:31:cd:3c:4e:d9:57:b5:f7:0a:4a:55:f0: a7:bb:61:bd:33:e4:0d:63:d1:ba:3e:7b:63:61:26: b4:76:7e:fa:2c:8a:1a:32:4c:49:38:dd:89:60:f4: 06:90:81:eb:b1:97:51:68:cb:f2:70:12:ba:c7:58: f9:06:5d:cf:08:b9:c5:a3:f9:b4:ae:61:bb:b1:6e: 66:e8:8b:af:47:04:3b:28:da:bb:ee:fa:4b:f0:cb: fe:7e:12:45:7c:bc:6c:fa:ac:b3:c9:4e:9a:f4:7b: 89:9e:58:fb:e3:a7:dd:b3:d4:e2:7e:e8:f2:fb:50: 1c:59:58:45:b9:33:3b:19:06:10:e4:f5:ce:51:ce: 82:c0:91:2a:b0:7f:54:b0:f5:b4:4e:37:09:bd:8b: 9f:cc:b8:c5:fd:7e:00:f3:14:33:bd:b0:8f:73:30: cd:75:ff:84:e5:da:94:a8:a3:a3:30:45:b4:a7:a3: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.214.0/24 185.1.27.0/24 193.105.163.0/24 IPv6: 2001:7f8:1e::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13004 Signature Algorithm: sha256WithRSAEncryption 18:d9:77:64:c2:e0:1d:9a:c5:2c:1a:9d:cb:ee:3a:a4:df:2a: 18:b4:31:57:c6:1b:0e:ca:dc:1d:94:06:cb:95:19:86:df:60: dc:7f:e2:6f:ba:b0:f4:25:84:d2:59:6f:33:5d:04:63:54:3d: 4d:89:76:f3:e9:b9:37:c7:53:60:c3:56:1f:77:4e:38:85:f1: 8f:3a:c8:b2:88:57:ca:72:a8:ce:5c:bd:95:2c:0d:75:0f:7f: 6e:a2:37:2e:8d:5d:f6:e6:ae:a3:c6:6f:de:5d:fe:06:f4:d5: 7a:14:f8:68:15:30:9c:9d:01:30:5e:6a:0b:38:a9:16:78:33: be:d8:55:9a:7a:b6:9b:8b:26:2d:96:3f:6a:3d:ae:93:b1:ec: 56:bf:5b:a5:ed:74:f0:66:e7:77:a4:01:be:51:a6:4a:0c:11: e7:3b:d5:f5:8f:30:7c:07:e9:8b:6b:83:98:08:11:c5:7e:4c: ba:89:2c:db:69:b5:7b:05:e4:82:2d:19:ef:ad:21:09:77:1d: 5e:88:f1:ef:4e:cb:7a:81:20:4b:a8:35:0f:ac:7c:30:33:4c: fb:f1:fb:9a:fb:4f:1f:b8:79:48:d0:8d:8b:4a:e8:d3:6a:f1: 3e:09:62:0c:29:f0:07:e8:4c:bc:0a:ad:a0:3b:37:f9:ae:cf: 2a:4e:d4:b9 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8f7/LG/YF1/u01YmVYiwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzNhMWQ5NzNmOWIzMzkxZThhZGFjYWE2NjRkMWIyM2Q3NzhmMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKABwbrkH55gyu0RQZ6b9S198B81 KiG0JY4zFwKl1vDkI8RlGXliqLPN/Ex4QaBS2FDx358UuL4l5oGP2nOC5VfbYJul 1PTI73cbkGcxzTxO2Ve19wpKVfCnu2G9M+QNY9G6PntjYSa0dn76LIoaMkxJON2J YPQGkIHrsZdRaMvycBK6x1j5Bl3PCLnFo/m0rmG7sW5m6IuvRwQ7KNq77vpL8Mv+ fhJFfLxs+qyzyU6a9HuJnlj746fds9Tifujy+1AcWVhFuTM7GQYQ5PXOUc6CwJEq sH9UsPW0TjcJvYufzLjF/X4A8xQzvbCPczDNdf+E5dqUqKOjMEW0p6PEDQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFFw6HZc/mzOR6K2sqmZNGyPXePAIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2E1ZmNm NS03ODYzLTQzYzEtYTFjMS0xOTRjYzk5MDJhYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvYTVmY2Y1 LTc4NjMtNDNjMS1hMWMxLTE5NGNjOTkwMmFiZi8xL1hEb2Rsei1iTTVIb3JheXFa azBiSTlkNDhBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAW/XWAwQAuQEbAwQAwWmjMA8EAgACMAkDBwAg AQf4AB4wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICMswwDQYJKoZIhvcNAQELBQAD ggEBABjZd2TC4B2axSwancvuOqTfKhi0MVfGGw7K3B2UBsuVGYbfYNx/4m+6sPQl hNJZbzNdBGNUPU2JdvPpuTfHU2DDVh93TjiF8Y86yLKIV8pyqM5cvZUsDXUPf26i Ny6NXfbmrqPGb95d/gb01XoU+GgVMJydATBeags4qRZ4M77YVZp6tpuLJi2WP2o9 rpOx7Fa/W6XtdPBm53ekAb5RpkoMEec71fWPMHwH6Ytrg5gIEcV+TLqJLNtptXsF 5IItGe+tIQl3HV6I8e9Oy3qBIEuoNQ+sfDAzTPvx+5r7Tx+4eUjQjYtK6NNq8T4J Ygwp8AfoTLwKraA7N/muzypO1Lk= -----END CERTIFICATE-----Generated at Sat Jan 10 06:55:57 2026 by rpki-client