This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer (raw, json) Hash identifier: /5SIHN/9BPhaEO/udshFE9gHZ8DMOUwa+e+suGJe3ck= Subject key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11A863A5532A476B79911EBCEC84BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13037 IP: 51.148.0.0/16 IP: 51.155.0.0/16 IP: 62.3.64.0/18 IP: 77.104.128.0/18 IP: 82.68.0.0/15 IP: 82.71.0.0/16 IP: 88.97.0.0 -- 88.98.18.255 IP: 88.98.21.0 -- 88.98.95.255 IP: 88.98.128.0 -- 88.98.167.255 IP: 88.98.170.0 -- 88.98.191.255 IP: 146.66.64.0/18 IP: 212.23.0.0/19 IP: 217.155.0.0/16 IP: 2a02:8010::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a8:63:a5:53:2a:47:6b:79:91:1e:bc:ec:84:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:12:6b:b6:b4:73:15:e1:e2:e2:c4:2e:4b: b9:39:82:d4:42:20:aa:53:e3:52:05:76:ff:3a:1b: 0a:c0:1d:a4:00:61:ff:bc:c9:df:82:61:57:50:62: 29:30:60:ba:db:84:13:30:eb:50:18:e1:d9:1e:be: 31:c5:28:a9:5a:d7:4c:d2:6e:8e:bb:6c:34:f5:9b: 64:2c:37:07:bd:4e:dd:0f:ba:4c:22:31:f1:07:ed: 6a:d9:79:66:5c:bb:57:2f:1e:20:c1:e3:5f:3c:c5: c3:18:8b:51:a9:cf:73:30:04:e2:66:41:40:0a:b8: 78:61:b6:d9:08:68:77:f7:93:27:76:30:32:67:42: e6:25:ac:5e:e4:82:59:50:f4:d2:f1:43:10:1e:bb: 40:57:6e:0b:20:48:da:0c:b3:03:43:8c:5c:29:f8: 20:0b:fb:20:7b:64:19:ed:20:e2:05:ff:48:c6:99: 88:fd:63:2d:6e:87:46:44:c3:2d:cd:8b:fe:d9:5e: db:d7:9d:da:2b:c3:09:39:55:38:0a:e8:ed:15:29: d3:4a:d3:1b:f2:7b:2d:bf:2f:59:4c:26:3a:ca:15: 59:7e:85:85:db:8e:5b:23:2e:e2:8a:e8:6c:2e:ba: bd:f5:3c:ed:80:02:20:fa:eb:21:83:45:1a:4b:e2: 1f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.148.0.0/16 51.155.0.0/16 62.3.64.0/18 77.104.128.0/18 82.68.0.0/15 82.71.0.0/16 88.97.0.0-88.98.18.255 88.98.21.0-88.98.95.255 88.98.128.0-88.98.167.255 88.98.170.0-88.98.191.255 146.66.64.0/18 212.23.0.0/19 217.155.0.0/16 IPv6: 2a02:8010::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13037 Signature Algorithm: sha256WithRSAEncryption 91:19:e3:8f:a7:9d:20:84:c5:dc:f8:f0:09:56:02:1d:eb:df: 75:fa:a7:8f:87:f1:3a:a2:6c:15:4a:f9:4b:26:b6:47:f8:82: d4:fb:b6:ac:46:ba:05:e3:d4:24:0a:87:fd:e7:d3:a8:bf:94: a6:27:38:a0:90:31:ef:cc:76:14:02:75:b7:80:72:e3:1a:ce: 7b:08:31:14:2e:78:58:d0:cc:f9:1e:9c:84:f3:96:d1:80:5a: 3a:2a:42:f9:a6:4e:b2:39:a6:8e:5b:64:dd:f8:6b:5a:a5:04: 79:82:93:af:68:e2:d6:42:3f:67:6b:fc:c2:6c:1c:0e:6a:18: 0b:27:13:41:eb:7d:c7:93:42:e8:2c:22:e4:fd:a8:d3:45:7b: 81:00:cb:f6:b7:50:1b:14:a5:8d:3b:a5:36:3d:bf:9c:f3:5a: bd:dc:49:39:22:87:ef:37:21:71:31:98:84:7e:23:bb:e9:f1: de:02:81:11:fb:ae:31:d8:2f:af:4d:2f:05:7a:d1:8b:4f:c8: 32:bc:7c:16:aa:11:e0:1b:3f:c2:6d:d1:b0:3e:aa:8a:d1:6b: fd:2b:cb:3f:5b:95:78:ff:c8:77:6a:b9:8a:fd:bd:83:49:09: 60:4e:c1:63:90:17:dc:9a:07:1c:1e:11:1e:d1:46:3a:00:87: fb:d3:64:ef -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISAZt8EahjpVMqR2t5kR687IS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Y0NTAxYjc1NTAwMmQ5MTQzZThmYTY3MzY4MTVlOWYwZjkzNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQMSa7a0cxXh4uLELku5OYLUQiCq U+NSBXb/OhsKwB2kAGH/vMnfgmFXUGIpMGC624QTMOtQGOHZHr4xxSipWtdM0m6O u2w09ZtkLDcHvU7dD7pMIjHxB+1q2XlmXLtXLx4gweNfPMXDGItRqc9zMATiZkFA Crh4YbbZCGh395MndjAyZ0LmJaxe5IJZUPTS8UMQHrtAV24LIEjaDLMDQ4xcKfgg C/sge2QZ7SDiBf9IxpmI/WMtbodGRMMtzYv+2V7b153aK8MJOVU4CujtFSnTStMb 8nstvy9ZTCY6yhVZfoWF245bIy7iiuhsLrq99TztgAIg+ushg0UaS+IfaQIDAQAB o4IDEjCCAw4wHQYDVR0OBBYEFFz0UBt1UALZFD6PpnNoFenw+TaVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2MxY2Ew Ny05NjU4LTQ0NDYtOGNiNS02MGNmOWFiMWIxM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvYzFjYTA3 LTk2NTgtNDQ0Ni04Y2I1LTYwY2Y5YWIxYjEzZS8xL1hQUlFHM1ZRQXRrVVBvLW1j MmdWNmZENU5wVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGRBggrBgEF BQcBBwEB/wSBgTB/MG4EAgABMGgDAwAzlAMDADObAwQGPgNAAwQGTWiAAwMBUkQD AwBSRzALAwMAWGEDBABYYhIwDAMEAFhiFQMEBVhiQDAMAwQHWGKAAwQDWGKgMAwD BAFYYqoDBAZYYoADBAaSQkADBAXUFwADAwDZmzANBAIAAjAHAwUDKgKAEDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgIy7TANBgkqhkiG9w0BAQsFAAOCAQEAkRnjj6ed IITF3PjwCVYCHevfdfqnj4fxOqJsFUr5Sya2R/iC1Pu2rEa6BePUJAqH/efTqL+U pic4oJAx78x2FAJ1t4By4xrOewgxFC54WNDM+R6chPOW0YBaOipC+aZOsjmmjltk 3fhrWqUEeYKTr2ji1kI/Z2v8wmwcDmoYCycTQet9x5NC6Cwi5P2o00V7gQDL9rdQ GxSljTulNj2/nPNavdxJOSKH7zchcTGYhH4ju+nx3gKBEfuuMdgvr00vBXrRi0/I Mrx8FqoR4Bs/wm3RsD6qitFr/SvLP1uVeP/Id2q5iv29g0kJYE7BY5AX3JoHHB4R HtFGOgCH+9Nk7w== -----END CERTIFICATE-----Generated at Sun Jan 25 01:32:01 2026 by rpki-client