This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer File: XJK5qSx-uRPD2lWAAsZz6CONscc.cer (raw, json) Hash identifier: 12Nxbw92cRLjaagdtN/kCq+TLlPdu8ePAxhM1COyB5E= Subject key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2A1A4D0C2BEB6BB5F9D5608F64A9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.35.240.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a1:a4:d0:c2:be:b6:bb:5f:9d:56:08:f6:4a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1f:be:8e:d0:70:89:f0:0b:c6:28:db:d7:b7: c3:6e:98:12:af:9b:70:56:c5:95:8e:98:ec:68:a4: 2f:2e:00:51:6a:0f:dc:1c:e1:b8:64:1c:42:91:d3: 00:4d:66:8f:23:30:71:85:4c:36:d4:18:87:b2:2b: cd:cf:0a:90:cf:7e:63:6c:77:53:ea:d8:52:c7:f6: b5:a9:57:bc:64:1b:a6:f9:77:c3:fe:d4:7f:e2:28: 43:4c:7b:5a:b5:bc:ea:d8:f6:c2:4f:75:a5:2b:6a: 84:a1:e6:3d:fb:3b:16:be:1c:1b:c0:f9:72:05:8b: 20:13:22:ca:46:c0:03:39:ee:26:76:3b:70:ce:bd: 91:bb:a3:59:cc:6b:e7:94:28:70:9b:25:aa:4a:0d: 80:23:10:50:47:36:f5:99:08:9e:1d:2e:ce:00:3c: 2e:2a:24:c1:7e:b6:f3:dd:3d:07:51:24:bc:3a:a0: 22:1d:69:fd:b0:84:13:e9:00:ce:c8:74:b2:d4:bb: 8d:a7:42:ae:07:17:66:61:28:77:c3:c0:63:83:b0: 92:01:56:55:95:7b:72:25:95:a7:f1:44:47:f3:53: f6:8e:ee:6d:56:d4:e9:32:d7:93:62:f0:f3:95:2c: 57:0c:4d:03:43:0c:a5:e9:4e:d1:74:ca:be:09:89: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.240.0/24 Signature Algorithm: sha256WithRSAEncryption 49:9e:d6:e6:66:e9:25:01:d2:98:36:65:8d:51:15:2f:ef:a3: 64:ed:bd:f6:bd:46:be:66:e9:97:fe:ed:f6:11:a5:15:f9:2f: d4:2e:89:63:d3:51:73:e5:0e:fe:e2:e5:46:a4:71:6b:09:03: 32:83:d6:fd:08:bb:22:8c:0a:ce:37:2b:75:13:a0:3b:72:d8: 03:12:90:e3:ba:4d:4e:b2:8c:0d:31:df:64:eb:8f:56:92:08: 4b:4f:5c:bc:48:41:80:1d:7f:2d:2f:57:a4:48:13:b1:9e:6f: 23:77:97:f5:47:e5:09:80:94:6d:c5:87:22:d8:43:bf:a2:f7: 3b:43:d7:b0:a3:7b:b5:89:8d:a6:7f:55:f1:79:33:56:d4:b5: 75:bb:d2:f8:43:47:ba:7b:f9:c6:b5:ec:7e:67:84:cc:36:27: 58:f1:b2:03:49:e0:fc:2e:cb:03:ce:e4:84:a2:30:48:5a:7b: 7d:71:bd:b7:bb:75:6a:44:bd:16:77:9b:7e:2c:48:99:3e:85: b5:20:47:51:e8:e3:0c:98:11:0c:d8:01:91:5d:30:81:44:b8: 73:93:e5:5a:9d:5b:98:ca:c2:a1:e5:4f:c7:88:a3:e5:6f:ef: 2c:20:bf:08:c2:fa:63:1d:ef:dd:92:4b:90:ea:87:67:77:10: 6d:f2:1e:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4oqGk0MK+trtfnVYI9kqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzkyYjlhOTJjN2ViOTEzYzNkYTU1ODAwMmM2NzNlODIzOGRiMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B++jtBwifALxijb17fDbpgSr5tw VsWVjpjsaKQvLgBRag/cHOG4ZBxCkdMATWaPIzBxhUw21BiHsivNzwqQz35jbHdT 6thSx/a1qVe8ZBum+XfD/tR/4ihDTHtatbzq2PbCT3WlK2qEoeY9+zsWvhwbwPly BYsgEyLKRsADOe4mdjtwzr2Ru6NZzGvnlChwmyWqSg2AIxBQRzb1mQieHS7OADwu KiTBfrbz3T0HUSS8OqAiHWn9sIQT6QDOyHSy1LuNp0KuBxdmYSh3w8Bjg7CSAVZV lXtyJZWn8URH81P2ju5tVtTpMteTYvDzlSxXDE0DQwyl6U7RdMq+CYloOQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFySuaksfrkTw9pVgALGc+gjjbHHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzk2OTQ2 My03ZjZhLTQ1MDMtYWJjNC1kNmI1NmFiYTNlYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOTY5NDYz LTdmNmEtNDUwMy1hYmM0LWQ2YjU2YWJhM2ViNy8xL1hKSzVxU3gtdVJQRDJsV0FB c1p6NkNPTnNjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiPwMA0GCSqGSIb3DQEBCwUAA4IBAQBJntbm ZuklAdKYNmWNURUv76Nk7b32vUa+ZumX/u32EaUV+S/ULolj01Fz5Q7+4uVGpHFr CQMyg9b9CLsijArONyt1E6A7ctgDEpDjuk1OsowNMd9k649WkghLT1y8SEGAHX8t L1ekSBOxnm8jd5f1R+UJgJRtxYci2EO/ovc7Q9ewo3u1iY2mf1XxeTNW1LV1u9L4 Q0e6e/nGtex+Z4TMNidY8bIDSeD8LssDzuSEojBIWnt9cb23u3VqRL0Wd5t+LEiZ PoW1IEdR6OMMmBEM2AGRXTCBRLhzk+VanVuYysKh5U/HiKPlb+8sIL8IwvpjHe/d kkuQ6odndxBt8h5z -----END CERTIFICATE-----Generated at Sat Jan 10 07:02:53 2026 by rpki-client