This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer File: XstMrbut1QD0nKaX1Waidh4Bdgg.cer (raw, json) Hash identifier: F+2t6I2qXOUk9Otfg2vdc9qZn8IBvi7m/12K9S4qvu8= Subject key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759497846968CB10DADDB4A98734FF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.75.221.0/24 IP: 86.54.172.0/24 IP: 141.193.228.0/24 IP: 170.62.190.0/24 IP: 213.254.170.0/24 IP: 2a03:e080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:49:78:46:96:8c:b1:0d:ad:db:4a:98:73:4f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:73:4a:c0:4d:cc:95:cb:b3:28:51:49:5d: 64:17:27:6d:18:08:ed:b9:f9:68:75:54:06:2b:09: 17:bc:72:73:0a:a1:b8:74:af:ed:d2:66:91:9f:ca: 48:71:b0:53:a8:c4:eb:e5:79:e4:15:c5:b9:f1:4a: 8b:7d:a8:38:8e:55:66:b4:b3:e5:dd:8c:b6:fe:6e: 79:01:4a:b8:f9:f3:85:36:74:94:c8:72:c0:eb:11: fa:0d:cd:5b:48:70:1b:fb:cf:dc:f8:2a:93:52:43: dd:76:53:38:38:68:6d:3c:5f:59:4c:64:85:d6:be: 48:47:55:a6:7a:2c:37:e7:38:22:ae:56:e5:ba:90: 07:a6:76:69:6c:f1:1a:83:1f:88:ea:c6:3b:a3:d6: 55:80:ac:2b:71:e8:8c:fc:a6:56:3b:f0:12:69:57: b5:27:64:c4:28:7b:28:e8:12:64:40:c0:14:41:7d: 00:99:ca:a1:86:23:71:ac:b1:5e:12:b6:60:04:09: ed:10:2b:a6:8c:2b:52:91:c2:9f:a6:09:33:e3:0f: bd:cb:e4:a8:cd:aa:65:d3:c8:f6:c0:7d:25:76:15: b0:5c:1a:8c:89:a4:1b:54:c4:cd:e1:55:eb:4f:3b: df:36:ff:25:9d:77:78:e7:dd:1b:e2:b6:fb:c4:b1: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.221.0/24 86.54.172.0/24 141.193.228.0/24 170.62.190.0/24 213.254.170.0/24 IPv6: 2a03:e080::/29 Signature Algorithm: sha256WithRSAEncryption 78:d1:11:bd:ef:61:c6:08:cd:46:29:21:0f:7d:ef:3d:44:52: 15:8b:1e:fd:ce:70:8d:27:3d:1d:ef:58:f1:3f:37:b3:10:00: f7:fa:18:ea:4c:fa:d6:5f:35:b7:3f:41:b3:6a:9b:4d:16:95: ef:73:dc:49:0f:5c:98:b9:01:d0:e5:fc:ae:58:84:a3:d7:f3: 1b:49:b9:55:da:97:41:74:76:a4:d7:19:71:e1:cd:27:7f:46: d9:b5:7e:41:26:a2:bb:f6:6b:f4:74:2a:a5:f1:b3:10:01:fe: 4f:04:05:20:b8:27:68:95:2c:f9:4b:d0:d1:b6:2e:1c:ad:b4: 5b:ce:07:2a:e0:1c:3a:cb:92:86:f2:c0:6c:76:06:7d:e2:ba: 99:1c:53:c6:d7:0b:78:b2:ca:48:f4:b8:0c:12:f8:31:7e:20: ee:73:63:e0:67:10:92:24:e6:fb:b7:40:61:5c:8b:24:42:3c: 9f:35:7f:3a:41:5b:78:d4:f3:4f:b5:6f:7b:1a:14:7a:a5:75: af:b5:62:68:b1:36:f8:3b:bf:c7:22:7f:a8:e6:91:ee:87:d2: 69:b4:ca:58:ae:26:f8:18:00:26:0e:21:98:6c:38:68:dc:b3: de:d0:3f:a2:f6:22:c3:5b:61:65:0d:73:b2:f0:25:a2:94:ac: c9:10:e5:e5 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt3WUl4RpaMsQ2t20qYc0/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWNiNGNhZGJiYWRkNTAwZjQ5Y2E2OTdkNTY2YTI3NjFlMDE3NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI5zSsBNzJXLsyhRSV1kFydtGAjt uflodVQGKwkXvHJzCqG4dK/t0maRn8pIcbBTqMTr5XnkFcW58UqLfag4jlVmtLPl 3Yy2/m55AUq4+fOFNnSUyHLA6xH6Dc1bSHAb+8/c+CqTUkPddlM4OGhtPF9ZTGSF 1r5IR1Wmeiw35zgirlblupAHpnZpbPEagx+I6sY7o9ZVgKwrceiM/KZWO/ASaVe1 J2TEKHso6BJkQMAUQX0AmcqhhiNxrLFeErZgBAntECumjCtSkcKfpgkz4w+9y+So zapl08j2wH0ldhWwXBqMiaQbVMTN4VXrTzvfNv8lnXd4590b4rb7xLFcBwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFF7LTK27rdUA9Jyml9VmonYeAXYIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FjMGUx M2Q4LWJmZTAtNDIzNS1hZmI0LWQ1M2VkZmJhY2RkMi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMw ZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFjZGQyLzAvNUVDQjRDQURCQkFE RDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgME AFBL3QMEAFY2rAMEAI3B5AMEAKo+vgMEANX+qjANBAIAAjAHAwUDKgPggDANBgkq hkiG9w0BAQsFAAOCAQEAeNERve9hxgjNRikhD33vPURSFYse/c5wjSc9He9Y8T83 sxAA9/oY6kz61l81tz9Bs2qbTRaV73PcSQ9cmLkB0OX8rliEo9fzG0m5VdqXQXR2 pNcZceHNJ39G2bV+QSaiu/Zr9HQqpfGzEAH+TwQFILgnaJUs+UvQ0bYuHK20W84H KuAcOsuShvLAbHYGfeK6mRxTxtcLeLLKSPS4DBL4MX4g7nNj4GcQkiTm+7dAYVyL JEI8nzV/OkFbeNTzT7VvexoUeqV1r7ViaLE2+Du/xyJ/qOaR7ofSabTKWK4m+BgA Jg4hmGw4aNyz3tA/ovYiw1thZQ1zsvAlopSsyRDl5Q== -----END CERTIFICATE-----Generated at Wed Jan 21 15:08:54 2026 by rpki-client