This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer File: Xo0HtF99gxJMn4wPrAO-wCRos34.cer (raw, json) Hash identifier: tVBJPYlM5FFCFA0B2kV4sKJSqHgPgBpxZeLYFSTD6DI= Subject key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B39BAF5085359D1F9294F030B5F7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8330 AS: 8550 IP: 5.57.80.0/20 IP: 45.15.104.0/22 IP: 91.198.81.0/24 IP: 193.203.5.0/24 IP: 195.35.120.0/24 IP: 2001:7f8:17::/48 IP: 2a00:eb20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:39:ba:f5:08:53:59:d1:f9:29:4f:03:0b:5f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:ea:58:df:77:2a:4f:f6:bd:f6:6f:57:25: a3:7f:9e:07:d5:01:9c:3f:0b:a5:4c:ec:d9:a8:e9: 6b:c4:7c:3f:27:b7:af:e8:2c:92:3b:ad:1e:f3:00: a1:a9:1b:f4:03:07:02:29:fe:5f:f9:70:46:39:6c: 84:c1:fd:da:07:0b:33:a3:2c:84:0b:dc:a1:0e:1c: 40:a1:73:59:84:69:c8:ab:5b:ed:44:47:13:ab:01: 7b:f7:f4:c3:a5:5e:72:bc:1c:15:e1:2c:28:99:bd: 08:89:45:1c:d6:e4:28:0b:65:ed:91:88:f6:08:2a: 91:3d:64:0a:ef:70:1a:f9:bf:f2:89:80:bf:5e:fc: f1:2b:3a:b7:a4:f6:72:33:a9:b0:86:c1:24:37:18: 28:5c:1c:75:1b:fa:17:c1:58:ea:00:3b:8d:82:d3: 8f:fe:17:46:dd:e0:3f:58:fd:ec:9a:c2:d5:a9:31: 80:9f:4f:22:0f:8e:a8:46:df:36:08:9c:7b:05:c9: 47:47:df:52:52:a9:b4:00:cf:fb:95:e6:13:a9:c6: d4:7f:6c:25:ad:eb:80:67:54:53:cb:45:b5:90:82: 56:73:0a:3c:c4:12:3d:2a:90:a7:75:da:89:22:a0: 7a:40:88:4c:e5:32:0b:e6:04:04:9e:1c:ea:ed:c2: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.80.0/20 45.15.104.0/22 91.198.81.0/24 193.203.5.0/24 195.35.120.0/24 IPv6: 2001:7f8:17::/48 2a00:eb20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8330 8550 Signature Algorithm: sha256WithRSAEncryption 13:d9:14:dc:20:76:ed:9f:a8:d4:af:97:ea:77:1a:bb:04:45: 9a:26:78:64:68:5e:a4:55:2e:ca:f7:8a:60:98:4f:c6:04:89: 9a:24:f1:c1:61:cf:d6:b6:45:a0:35:b2:5f:cf:74:b5:b6:48: 69:e3:10:70:7d:3a:24:d5:42:21:4a:c5:f5:ec:e7:39:6a:99: b1:bd:74:62:d5:78:fe:91:30:c3:ed:bc:49:3a:25:d1:88:cd: 59:33:e9:e6:2b:77:ce:d3:ec:8e:e8:0f:29:a2:79:bd:60:04: 55:84:47:8e:b0:8d:1c:32:ec:03:7d:6b:b1:5b:48:31:98:00: f3:8a:6a:a0:74:67:4e:5a:35:3d:84:dc:cd:11:c2:64:ad:38: 88:c5:d9:ab:95:9f:1d:c3:18:49:0f:34:40:01:91:34:13:47: be:0f:34:e9:63:f0:e2:35:96:12:2e:99:6f:42:bd:22:7d:24: 18:12:e2:7a:ee:9d:cd:a1:b8:d5:ee:a9:08:dc:2d:d7:d6:56: 13:bc:cd:f5:ca:c8:20:6d:da:1b:56:2d:5b:67:4f:59:91:8b: 79:4d:18:c3:00:f8:ae:76:f3:4b:f0:34:be:b2:08:56:d3:53: 77:44:3c:31:84:e1:53:a5:51:f2:ac:a5:4d:d2:22:20:e1:f6: 01:39:94:fd -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt6Wzm69QhTWdH5KU8DC19+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZThkMDdiNDVmN2Q4MzEyNGM5ZjhjMGZhYzAzYmVjMDI0NjhiMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoHqWN93Kk/2vfZvVyWjf54H1QGc PwulTOzZqOlrxHw/J7ev6CySO60e8wChqRv0AwcCKf5f+XBGOWyEwf3aBwszoyyE C9yhDhxAoXNZhGnIq1vtREcTqwF79/TDpV5yvBwV4Swomb0IiUUc1uQoC2XtkYj2 CCqRPWQK73Aa+b/yiYC/XvzxKzq3pPZyM6mwhsEkNxgoXBx1G/oXwVjqADuNgtOP /hdG3eA/WP3smsLVqTGAn08iD46oRt82CJx7BclHR99SUqm0AM/7leYTqcbUf2wl reuAZ1RTy0W1kIJWcwo8xBI9KpCnddqJIqB6QIhM5TIL5gQEnhzq7cLBGwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFF6NB7RffYMSTJ+MD6wDvsAkaLN+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2ExNjhl OS1kMDcwLTQ0ZTAtOTRhNC02YzhmZDg0YmI1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYTE2OGU5 LWQwNzAtNDRlMC05NGE0LTZjOGZkODRiYjVmNS8xL1hvMEh0Rjk5Z3hKTW40d1By QU8td0NSb3MzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAkBAIAATAeAwQEBTlQAwQCLQ9oAwQAW8ZRAwQAwcsFAwQAwyN4 MBYEAgACMBADBwAgAQf4ABcDBQAqAOsgMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgC AiCKAgIhZjANBgkqhkiG9w0BAQsFAAOCAQEAE9kU3CB27Z+o1K+X6ncauwRFmiZ4 ZGhepFUuyveKYJhPxgSJmiTxwWHP1rZFoDWyX890tbZIaeMQcH06JNVCIUrF9ezn OWqZsb10YtV4/pEww+28STol0YjNWTPp5it3ztPsjugPKaJ5vWAEVYRHjrCNHDLs A31rsVtIMZgA84pqoHRnTlo1PYTczRHCZK04iMXZq5WfHcMYSQ80QAGRNBNHvg80 6WPw4jWWEi6Zb0K9In0kGBLieu6dzaG41e6pCNwt19ZWE7zN9crIIG3aG1YtW2dP WZGLeU0YwwD4rnbzS/A0vrIIVtNTd0Q8MYThU6VR8qylTdIiIOH2ATmU/Q== -----END CERTIFICATE-----Generated at Fri Jan 2 01:53:40 2026 by rpki-client