This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer File: X_n07MXQUHYsVWmEQPheqW9zMPI.cer (raw, json) Hash identifier: ByqH1UmvOsXB3KFxQiBSMSUhsoF1yXojjnor9KlMBoI= Subject key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F827D0AE562E7096CEA881A24841D7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60989 IP: 5.181.192.0/22 IP: 185.21.248.0/22 IP: 2a04:1d80::/29 IP: 2a0e:1000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:7d:0a:e5:62:e7:09:6c:ea:88:1a:24:84:1d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:c7:89:8e:b8:83:51:8b:09:5f:fd:61:2c: 45:c3:00:38:4b:d7:b7:b4:f7:d6:88:35:f3:21:b2: 3f:3d:29:1b:d6:c3:eb:47:dd:15:99:c9:08:bd:bb: 16:da:de:9d:da:36:d0:b2:35:98:38:74:08:ec:ad: 5c:56:b9:1b:cf:3f:5f:62:4e:dd:92:9b:a3:b1:b3: 9c:d2:85:d4:61:d7:1f:cf:76:60:15:2a:b8:27:86: dc:42:95:23:1f:ea:3b:14:03:0d:c5:45:86:2c:fd: 03:b1:10:2d:4e:c1:0a:81:ab:fb:20:17:57:62:a5: 45:6a:8d:8c:db:04:51:e8:91:1d:99:be:70:c1:32: f1:9d:38:c4:03:c7:69:7c:90:6f:11:ab:70:8f:d2: 97:8c:be:1a:35:49:f7:97:27:ed:bf:b0:ca:2d:95: 27:81:a7:c6:a8:c3:96:83:e3:b9:ef:3b:78:e8:5b: de:e9:19:83:9b:9e:be:9f:bc:4d:4c:9d:e7:7c:bd: 40:87:c7:7c:21:51:6b:17:51:79:04:99:c8:be:6b: 86:c7:54:17:81:ee:1e:e8:6b:a5:aa:fe:13:41:8c: a8:61:29:1a:10:c2:7c:3a:f4:46:03:7f:b4:14:5a: b0:d0:c9:74:3c:dd:f5:67:cc:f3:a5:36:37:48:56: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.192.0/22 185.21.248.0/22 IPv6: 2a04:1d80::/29 2a0e:1000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60989 Signature Algorithm: sha256WithRSAEncryption 04:77:a9:45:e2:87:9d:2b:bc:d3:03:24:bd:03:34:3a:77:fa: eb:0e:bc:6f:cd:10:92:55:d5:d3:2e:de:ad:12:7f:c0:c0:48: 08:f2:46:17:2a:cf:19:6e:19:d0:2c:dc:86:35:52:41:e1:60: fc:c8:67:83:b0:85:68:ad:b1:2e:5f:ac:33:56:9b:8a:05:db: d9:d2:20:7b:41:7e:f4:4d:55:6a:df:68:26:ee:12:aa:d7:f0: 12:89:1c:9e:4f:97:9d:c4:99:12:41:72:95:70:db:40:1d:a0: 7d:fe:b5:97:74:fc:bf:52:d3:2e:06:e4:01:64:dc:27:56:99: 21:9c:10:a4:65:31:33:11:39:c4:32:c3:4a:e1:84:f7:b6:65: 36:a4:79:f3:97:27:4a:bd:c8:1f:19:2c:c7:18:de:81:6c:b5: bd:57:f5:f6:a0:84:e3:6b:7a:80:47:ec:cf:bd:e1:77:9c:33: cd:54:41:f7:00:27:f5:93:b1:ee:39:40:62:22:50:36:c8:43: bf:fa:09:c6:17:1f:9e:dc:80:6c:73:42:08:56:d6:09:96:9b: 00:be:6a:f2:14:1b:02:b3:af:d0:36:84:47:7a:0e:d0:d8:5e: 0f:76:62:76:fc:dc:01:c4:74:4e:b9:7a:db:a0:2e:1d:75:8c: 8d:96:61:07 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt/gn0K5WLnCWzqiBokhB1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY5ZjRlY2M1ZDA1MDc2MmM1NTY5ODQ0MGY4NWVhOTZmNzMzMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDnHiY64g1GLCV/9YSxFwwA4S9e3 tPfWiDXzIbI/PSkb1sPrR90VmckIvbsW2t6d2jbQsjWYOHQI7K1cVrkbzz9fYk7d kpujsbOc0oXUYdcfz3ZgFSq4J4bcQpUjH+o7FAMNxUWGLP0DsRAtTsEKgav7IBdX YqVFao2M2wRR6JEdmb5wwTLxnTjEA8dpfJBvEatwj9KXjL4aNUn3lyftv7DKLZUn gafGqMOWg+O57zt46Fve6RmDm56+n7xNTJ3nfL1Ah8d8IVFrF1F5BJnIvmuGx1QX ge4e6Gulqv4TQYyoYSkaEMJ8OvRGA3+0FFqw0Ml0PN31Z8zzpTY3SFaRzwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFF/59OzF0FB2LFVphED4XqlvczDyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzc3YzY2 MC1mODJjLTQxMDYtYWJjOS00YzFlNDllYzhmMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNzdjNjYw LWY4MmMtNDEwNi1hYmM5LTRjMWU0OWVjOGYxNi8xL1hfbjA3TVhRVUhZc1ZXbUVR UGhlcVc5ek1QSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCBbXAAwQCuRX4MBQEAgACMA4DBQMqBB2AAwUD Kg4QADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7j0wDQYJKoZIhvcNAQELBQAD ggEBAAR3qUXih50rvNMDJL0DNDp3+usOvG/NEJJV1dMu3q0Sf8DASAjyRhcqzxlu GdAs3IY1UkHhYPzIZ4OwhWitsS5frDNWm4oF29nSIHtBfvRNVWrfaCbuEqrX8BKJ HJ5Pl53EmRJBcpVw20AdoH3+tZd0/L9S0y4G5AFk3CdWmSGcEKRlMTMROcQyw0rh hPe2ZTakefOXJ0q9yB8ZLMcY3oFstb1X9faghONreoBH7M+94XecM81UQfcAJ/WT se45QGIiUDbIQ7/6CcYXH57cgGxzQghW1gmWmwC+avIUGwKzr9A2hEd6DtDYXg92 Ynb83AHEdE65etugLh11jI2WYQc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:14 2026 by rpki-client