This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer File: XjmfupqunS1v_lKujHSuOPxsGvE.cer (raw, json) Hash identifier: cN+eYbes7AA5bqxNISXUy4Xryl7MWrlUz6Fiw8NZny8= Subject key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910FA544DF1F9626E5AFFD5F1D5F1FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211083 IP: 185.198.70.0/24 IP: 2a11:6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fa:54:4d:f1:f9:62:6e:5a:ff:d5:f1:d5:f1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:1e:e3:55:4e:18:73:b7:03:d5:48:29:27: a6:71:bc:24:c5:f5:00:9a:9c:c3:46:d4:64:bd:28: 05:ac:a0:ab:55:ec:0f:68:19:bc:e2:f8:ff:66:8b: a3:14:d2:61:46:6f:fd:c7:27:cd:69:e4:bb:fe:91: 2a:8d:22:6b:98:22:4d:f1:84:8a:ff:ed:b0:6a:5b: d2:3a:e6:6e:6d:77:4d:73:c7:49:bc:1f:7c:16:2d: 8c:f8:d5:90:1c:56:1b:60:47:8b:a7:e9:00:b1:7d: 40:23:06:d8:e4:f2:bc:58:10:c9:03:f4:ff:20:be: b4:ea:19:38:fe:a6:48:14:68:f3:a8:75:c2:2f:d9: c7:be:39:0e:d8:77:94:99:2d:66:4b:96:63:1f:41: db:7c:0a:4b:38:5e:18:c0:7e:a0:55:b6:8a:94:a2: d0:e9:d1:e9:d7:28:7c:fe:9d:89:18:cb:73:06:8e: ba:44:46:0a:b0:b9:ef:cc:be:6a:b0:3d:20:28:7a: 66:05:e0:bf:85:59:6d:93:ef:12:0f:13:08:77:5d: 72:a7:4d:94:da:c1:d3:85:7b:ea:a9:77:89:1d:7c: 78:27:6b:b3:46:54:03:e0:f4:ac:f1:69:e1:e3:89: a2:42:ba:9c:48:46:b8:ea:b9:dd:04:04:32:e7:b6: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.70.0/24 IPv6: 2a11:6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211083 Signature Algorithm: sha256WithRSAEncryption 2f:1b:81:1d:17:8c:a4:16:7d:c8:cc:06:cd:f6:b5:1e:dd:fa: 1e:63:d8:56:25:82:ac:64:67:f7:45:ad:d6:7f:e1:78:2a:84: 82:f2:bb:2c:0a:88:53:f3:f5:17:8a:2a:cd:4a:89:c8:6a:d9: a3:dd:d2:b1:1d:3f:f2:c5:00:e6:32:05:90:80:05:3a:44:ba: c0:eb:01:b2:1c:ad:a6:1f:b8:4c:26:2d:11:74:b6:21:7c:9a: 89:cd:90:cc:99:bb:63:7d:8e:3e:76:93:7a:31:00:f3:14:7e: f8:d3:7b:60:d4:77:ea:18:d3:c1:d7:f2:4a:80:5b:18:64:8a: d6:ba:87:81:d0:7b:b9:1c:b7:a4:b6:b4:48:de:7c:21:aa:99: bf:f8:df:da:5b:d2:45:64:2c:89:6a:0e:e3:b3:60:a1:b1:f1: f3:e7:e3:5f:8a:c3:ea:98:8d:6e:91:6a:10:53:be:2d:30:5d: 1b:73:af:af:6f:fd:95:97:29:3e:57:0e:36:b2:b3:e6:99:05: 8f:e9:e0:59:4d:81:f2:05:5e:e7:33:a2:29:7c:5b:b6:9c:f4: aa:49:be:ca:a5:f1:72:f5:6c:36:58:07:32:b3:ef:6f:40:22: 35:b2:6b:3e:d2:e0:1c:3e:ce:94:03:f3:cc:96:43:de:b8:df: 02:26:48:24 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EPpUTfH5Ym5a/9Xx1fH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTM5OWZiYTlhYWU5ZDJkNmZmZTUyYWU4Yzc0YWUzOGZjNmMxYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9se41VOGHO3A9VIKSemcbwkxfUA mpzDRtRkvSgFrKCrVewPaBm84vj/ZoujFNJhRm/9xyfNaeS7/pEqjSJrmCJN8YSK /+2walvSOuZubXdNc8dJvB98Fi2M+NWQHFYbYEeLp+kAsX1AIwbY5PK8WBDJA/T/ IL606hk4/qZIFGjzqHXCL9nHvjkO2HeUmS1mS5ZjH0HbfApLOF4YwH6gVbaKlKLQ 6dHp1yh8/p2JGMtzBo66REYKsLnvzL5qsD0gKHpmBeC/hVltk+8SDxMId11yp02U 2sHThXvqqXeJHXx4J2uzRlQD4PSs8Wnh44miQrqcSEa46rndBAQy57YOPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF45n7qarp0tb/5Srox0rjj8bBrxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2I5MWQw NS02YTAzLTQwZWQtYTk4My1iZDgwOWQ5ZGVkYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvYjkxZDA1 LTZhMDMtNDBlZC1hOTgzLWJkODA5ZDlkZWRiOS8xL1hqbWZ1cHF1blMxdl9sS3Vq SFN1T1B4c0d2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAucZGMA0EAgACMAcDBQMqEQbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4izANBgkqhkiG9w0BAQsFAAOCAQEALxuBHReMpBZ9 yMwGzfa1Ht36HmPYViWCrGRn90Wt1n/heCqEgvK7LAqIU/P1F4oqzUqJyGrZo93S sR0/8sUA5jIFkIAFOkS6wOsBshytph+4TCYtEXS2IXyaic2QzJm7Y32OPnaTejEA 8xR++NN7YNR36hjTwdfySoBbGGSK1rqHgdB7uRy3pLa0SN58IaqZv/jf2lvSRWQs iWoO47NgobHx8+fjX4rD6piNbpFqEFO+LTBdG3Ovr2/9lZcpPlcONrKz5pkFj+ng WU2B8gVe5zOiKXxbtpz0qkm+yqXxcvVsNlgHMrPvb0AiNbJrPtLgHD7OlAPzzJZD 3rjfAiZIJA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:57 2026 by rpki-client