This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer File: XTcKSLWfuBFJXxHElzRILyKxo5I.cer (raw, json) Hash identifier: sSk8lPQ4I9zyA1P+y01m3KvAsjnP0XGDfyi6lXp9JLs= Subject key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA87D5226769701CD001EEEE64373 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56388 IP: 91.226.97.0/24 IP: 185.156.200.0/22 IP: 2a07:a0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a8:7d:52:26:76:97:01:cd:00:1e:ee:e6:43:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d370a48b59fb811495f11c49734482f22b1a392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:78:7f:82:a5:5f:7a:10:81:6b:d4:42:62: 4e:75:a6:13:7f:3f:57:14:25:1e:e3:f7:d7:eb:80: 4c:eb:52:ca:2b:f0:29:2c:14:27:85:b0:9d:16:d7: 58:ea:9b:14:7e:3a:45:32:02:40:2f:e0:23:5c:ce: 71:9b:58:a4:df:41:bf:56:74:85:25:1e:9a:8a:92: 3d:44:6e:63:1d:48:d9:db:b8:54:86:24:be:fb:b5: 6b:3e:2e:d5:2f:1e:2f:8c:e7:80:a7:14:5a:56:26: 6f:3e:d6:e2:1a:14:40:b1:27:13:cc:0b:8c:e8:4e: 33:90:9c:fb:58:64:c4:25:b8:79:ff:80:e4:c9:e8: fb:9d:f4:99:cf:78:13:73:66:93:21:04:7e:1b:7a: 51:6e:6d:e2:8d:94:30:69:e1:25:37:0b:35:c2:fb: 77:9b:34:bc:cb:b0:ea:ca:b5:e4:45:ad:f8:aa:3b: 3d:8a:7e:3a:ad:d9:d6:e3:53:f3:e1:12:f9:de:8a: d0:9f:53:ed:17:07:d1:ba:58:6f:ce:94:d9:ce:e9: c6:58:c5:a2:15:94:e5:4c:76:ee:bc:f9:a9:98:c5: 40:34:ee:e8:af:1a:d5:a0:e2:5b:5e:31:d7:2a:3a: 7c:6e:c3:84:0d:6f:8f:70:3b:68:53:8f:bf:ac:f6: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.97.0/24 185.156.200.0/22 IPv6: 2a07:a0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56388 Signature Algorithm: sha256WithRSAEncryption 9d:d3:78:b2:22:88:d4:ae:53:f1:57:b8:d8:a9:35:c7:6b:ad: da:5e:ef:9e:69:e1:6f:d5:24:43:2f:0b:cd:e4:99:c6:c8:29: 12:ec:1c:e1:57:2d:a5:fe:7c:02:90:c5:d6:d2:bc:36:4f:f4: 62:49:11:b6:d5:d3:8b:ba:32:9a:2d:70:8b:1f:21:0d:a7:6d: 5c:b5:77:b6:94:d9:94:b2:ba:0e:80:17:bd:35:7a:75:d6:35: ba:2a:4d:00:c3:cf:b3:4b:1a:d4:1c:0e:9f:d3:d3:46:c9:0e: a1:c3:90:58:fc:0d:ab:bc:be:71:be:6c:bf:56:13:94:54:35: 16:f0:e0:d2:11:55:72:cc:7b:e0:02:36:ac:02:67:2e:2d:61: b0:6a:8b:65:c4:d6:d9:b3:75:31:49:5e:b9:cf:f3:78:76:3c: 27:43:ab:86:11:1c:d6:09:22:81:b2:b9:14:79:1c:b5:9a:dc: 9e:99:a4:35:b6:55:45:7c:bf:03:bb:ae:24:0a:6d:69:b8:b0: b4:dc:cf:85:af:77:8d:fb:8c:ee:aa:4e:68:e8:ea:ab:47:47: e3:d7:02:cf:f5:34:9b:29:bb:2e:24:17:ae:58:2d:26:0e:4f: f9:38:f4:79:72:27:81:a4:f7:67:b8:0d:c7:65:b4:94:51:54: 06:5d:25:07 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57Kh9UiZ2lwHNAB7u5kNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDM3MGE0OGI1OWZiODExNDk1ZjExYzQ5NzM0NDgyZjIyYjFhMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh654f4KlX3oQgWvUQmJOdaYTfz9X FCUe4/fX64BM61LKK/ApLBQnhbCdFtdY6psUfjpFMgJAL+AjXM5xm1ik30G/VnSF JR6aipI9RG5jHUjZ27hUhiS++7VrPi7VLx4vjOeApxRaViZvPtbiGhRAsScTzAuM 6E4zkJz7WGTEJbh5/4Dkyej7nfSZz3gTc2aTIQR+G3pRbm3ijZQwaeElNws1wvt3 mzS8y7DqyrXkRa34qjs9in46rdnW41Pz4RL53orQn1PtFwfRulhvzpTZzunGWMWi FZTlTHbuvPmpmMVANO7orxrVoOJbXjHXKjp8bsOEDW+PcDtoU4+/rPa9jwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFF03Cki1n7gRSV8RxJc0SC8isaOSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzcwODU4 YS02Mzk1LTQwMmQtOWFjZS1lMjcyMDEzMDI2YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNzA4NThh LTYzOTUtNDAyZC05YWNlLWUyNzIwMTMwMjZiNC8xL1hUY0tTTFdmdUJGSlh4SEVs elJJTHlLeG81SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW+JhAwQCuZzIMA0EAgACMAcDBQMqB6DAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcRDANBgkqhkiG9w0BAQsFAAOCAQEAndN4 siKI1K5T8Ve42Kk1x2ut2l7vnmnhb9UkQy8LzeSZxsgpEuwc4Vctpf58ApDF1tK8 Nk/0YkkRttXTi7oymi1wix8hDadtXLV3tpTZlLK6DoAXvTV6ddY1uipNAMPPs0sa 1BwOn9PTRskOocOQWPwNq7y+cb5sv1YTlFQ1FvDg0hFVcsx74AI2rAJnLi1hsGqL ZcTW2bN1MUleuc/zeHY8J0OrhhEc1gkigbK5FHkctZrcnpmkNbZVRXy/A7uuJApt abiwtNzPha93jfuM7qpOaOjqq0dH49cCz/U0mym7LiQXrlgtJg5P+Tj0eXIngaT3 Z7gNx2W0lFFUBl0lBw== -----END CERTIFICATE-----Generated at Thu Jan 22 00:22:09 2026 by rpki-client