This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer File: XM3soXHkIseck4wnMqkNSKjFPAY.cer (raw, json) Hash identifier: 5TaLZ6hLjHJ42+fM3bJYiu1ZzWYxNoeZ8TbsA0JNH14= Subject key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37CDAE3AE2510E1A670F40BCE3BE05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12524 AS: 24731 AS: 34397 IP: 79.172.128.0/18 IP: 85.129.128.0/17 IP: 88.213.0.0/17 IP: 89.4.0.0/15 IP: 93.98.0.0/16 IP: 95.140.160.0/20 IP: 212.38.128.0/19 IP: 212.71.32.0/19 IP: 212.107.96.0/19 IP: 212.118.96.0/19 IP: 212.119.64.0/19 IP: 213.181.160.0/19 IP: 213.210.192.0/18 IP: 2a00:1918::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cd:ae:3a:e2:51:0e:1a:67:0f:40:bc:e3:be:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:c2:14:db:32:05:1f:15:b2:0e:40:98:e8: e9:85:9e:73:cb:6e:ac:74:8c:1e:e1:f6:cc:88:1f: 17:57:43:04:53:50:16:71:35:05:48:ce:34:ea:55: 1d:4a:09:6a:62:43:69:20:e7:9e:6a:cd:e5:19:e5: bd:50:fa:bb:72:9b:8c:2d:10:eb:d9:3a:33:43:f1: 1e:c7:6c:2c:eb:ac:85:e3:e2:5c:04:3f:27:0b:8d: 45:b0:b8:ff:17:43:c3:fd:b2:0b:3d:5d:a0:ab:72: 9d:54:b1:27:fc:cc:8f:a2:2a:9f:61:1a:37:3f:2e: fd:c3:89:a5:22:33:2d:59:38:e8:ec:bc:d3:1b:58: ab:09:33:20:be:7a:0b:67:a0:ac:60:71:50:ee:dd: 6a:91:b7:1e:8d:8b:11:da:6a:24:10:2b:71:47:9e: b4:a2:43:6c:51:eb:c6:c8:a5:5d:80:50:fe:c4:0d: 37:b2:38:04:a3:54:b6:d7:b4:88:9c:f4:b6:07:19: ca:67:2b:8b:9d:ce:10:df:77:b1:52:59:a8:50:3e: 8c:5d:bc:41:cc:f5:67:d6:d6:2d:04:63:ee:82:9c: f6:25:36:e8:60:c5:b7:36:e2:fd:28:ff:cc:23:4f: aa:93:53:1c:7a:2d:76:24:0c:30:a4:d4:68:d3:4e: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.128.0/18 85.129.128.0/17 88.213.0.0/17 89.4.0.0/15 93.98.0.0/16 95.140.160.0/20 212.38.128.0/19 212.71.32.0/19 212.107.96.0/19 212.118.96.0/19 212.119.64.0/19 213.181.160.0/19 213.210.192.0/18 IPv6: 2a00:1918::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12524 24731 34397 Signature Algorithm: sha256WithRSAEncryption 19:9e:93:fa:4a:9d:74:a7:23:9b:e3:f7:72:b4:a1:cd:96:e7: 7e:46:b1:2e:cd:b8:dc:6f:f1:6b:e6:07:82:21:05:f7:0e:d7: 4b:9d:66:34:79:6b:09:96:7c:a7:2b:6d:5d:83:17:b8:ad:24: f5:62:da:c2:98:bb:b0:a7:d8:97:4f:a7:8b:7d:cf:46:e4:00: 59:e4:ae:d4:33:58:8b:94:c1:e2:76:0f:07:44:05:73:42:86: a2:89:d3:88:2e:58:a6:88:92:7a:d7:93:6f:d3:9c:07:27:e9: b1:a6:71:d7:81:10:dd:9d:44:87:49:3a:9c:a1:d7:fa:59:76: 85:30:ec:13:e7:d6:f4:86:6e:09:de:7e:8d:14:bc:43:f0:40: 33:34:bb:a1:8e:cd:11:27:95:a8:8d:9c:8c:d7:b8:28:53:02: e8:8e:20:a7:a6:61:28:9a:00:3f:c2:44:39:99:31:45:be:d0: 7e:db:db:19:61:f4:14:ca:56:5d:a1:3c:12:06:06:57:2a:98: 7d:30:5d:ef:1b:6c:ca:12:5e:01:60:3b:da:88:8d:3c:e4:da: 30:5d:51:49:6c:84:51:68:a5:95:81:cf:8d:76:10:28:71:cf: 52:55:ac:34:72:bc:b4:4a:e2:13:bd:c9:03:cf:99:73:97:df: bf:12:a4:bd -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt+N82uOuJRDhpnD0C8474FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2NkZWNhMTcxZTQyMmM3OWM5MzhjMjczMmE5MGQ0OGE4YzUzYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEzCFNsyBR8Vsg5AmOjphZ5zy26s dIwe4fbMiB8XV0MEU1AWcTUFSM406lUdSglqYkNpIOeeas3lGeW9UPq7cpuMLRDr 2TozQ/Eex2ws66yF4+JcBD8nC41FsLj/F0PD/bILPV2gq3KdVLEn/MyPoiqfYRo3 Py79w4mlIjMtWTjo7LzTG1irCTMgvnoLZ6CsYHFQ7t1qkbcejYsR2mokECtxR560 okNsUevGyKVdgFD+xA03sjgEo1S217SInPS2BxnKZyuLnc4Q33exUlmoUD6MXbxB zPVn1tYtBGPugpz2JTboYMW3NuL9KP/MI0+qk1Mcei12JAwwpNRo006gywIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFFzN7KFx5CLHnJOMJzKpDUioxTwGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2I4ZjVl Ni1jOTUxLTRkZGItYjRmNS1hODgxZWM4MjI4YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvYjhmNWU2 LWM5NTEtNGRkYi1iNGY1LWE4ODFlYzgyMjhiNS8xL1hNM3NvWEhrSXNlY2s0d25N cWtOU0tqRlBBWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHQGCCsGAQUF BwEHAQH/BGUwYzBSBAIAATBMAwQGT6yAAwQHVYGAAwQHWNUAAwMBWQQDAwBdYgME BF+MoAMEBdQmgAMEBdRHIAMEBdRrYAMEBdR2YAMEBdR3QAMEBdW1oAMEBtXSwDAN BAIAAjAHAwUDKgAZGDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgIw7AICYJsCAwCG XTANBgkqhkiG9w0BAQsFAAOCAQEAGZ6T+kqddKcjm+P3crShzZbnfkaxLs243G/x a+YHgiEF9w7XS51mNHlrCZZ8pyttXYMXuK0k9WLawpi7sKfYl0+ni33PRuQAWeSu 1DNYi5TB4nYPB0QFc0KGoonTiC5YpoiSeteTb9OcByfpsaZx14EQ3Z1Eh0k6nKHX +ll2hTDsE+fW9IZuCd5+jRS8Q/BAMzS7oY7NESeVqI2cjNe4KFMC6I4gp6ZhKJoA P8JEOZkxRb7QftvbGWH0FMpWXaE8EgYGVyqYfTBd7xtsyhJeAWA72oiNPOTaMF1R SWyEUWillYHPjXYQKHHPUlWsNHK8tEriE73JA8+Zc5ffvxKkvQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:32 2026 by rpki-client