This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer (raw, json) Hash identifier: 6f+zR2yYBlgPP2kGulQ2s78tUnHdHJWkkHqSgxu1NjI= Subject key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C746BF7A5EA1E60928EFBE2BE2087E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31394 IP: 83.137.40.0/21 IP: 185.100.240.0/22 IP: 2a00:11d0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:46:bf:7a:5e:a1:e6:09:28:ef:be:2b:e2:08:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:f5:2d:ba:18:1e:18:17:c0:59:df:05:da: a5:b8:90:d3:30:10:6d:a1:f0:27:39:ef:43:ff:16: 89:7e:3d:be:ac:b5:f1:21:41:e7:f6:92:af:1d:f1: 5f:33:39:f5:3d:cc:1d:84:7f:b9:03:52:26:18:96: c2:a2:5e:57:11:60:9a:bb:30:e2:ab:fa:59:24:c3: 2c:8c:1b:99:61:89:86:36:e4:c6:09:b3:c4:f1:db: 8f:e5:8d:bf:b7:bc:9a:c9:32:d7:e8:0e:99:8f:cc: cf:30:7f:44:67:c0:77:d1:49:d7:cb:ed:a2:dd:e8: 25:81:6d:78:dd:c2:29:e6:1e:72:ec:1e:5d:a0:18: 56:b0:e2:32:ff:65:52:a5:1a:ce:a1:15:f3:7d:77: 83:a2:d8:a4:7f:64:07:f4:a1:d4:ec:ea:f2:52:2f: b1:25:75:9a:33:16:07:0e:cc:34:b3:85:87:55:f1: 4f:f7:fd:8e:67:da:d1:77:4a:87:5c:14:d7:d4:22: f6:af:fb:8a:df:78:86:cf:bb:c7:9d:60:31:8f:0c: d2:ec:b4:a9:03:2a:10:07:0d:ad:d7:ec:1e:6f:d7: f4:f8:72:e1:c1:4a:32:1f:66:45:ff:54:ec:d5:79: 02:90:13:3e:9d:77:7a:11:3e:b7:2e:d6:e8:af:41: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.40.0/21 185.100.240.0/22 IPv6: 2a00:11d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31394 Signature Algorithm: sha256WithRSAEncryption 49:65:2a:c7:a3:a1:ec:38:43:1e:8d:5c:4a:a8:4d:93:ca:eb: f5:82:4e:18:a5:86:6a:b5:89:66:5e:b1:c3:cc:a8:cb:f1:52: e0:9d:cc:0a:e3:60:6c:dd:f0:46:79:46:52:60:6a:3d:06:82: 91:3e:b4:f1:a4:7e:41:b7:42:b0:4e:32:aa:3a:46:fa:b9:69: 9e:66:7d:7c:bb:c2:3b:82:4c:ee:21:dd:a7:20:0a:8b:1b:8e: ed:e1:af:c0:d3:96:a3:ab:d6:be:a6:7a:3b:f3:40:b5:91:73: ea:cc:2c:fc:56:49:d1:f9:52:b1:40:b7:27:94:74:b0:c8:67: a1:ee:71:4b:42:e1:f5:65:da:8e:33:2a:2b:9a:5e:fb:7d:ae: fe:f9:af:3b:25:e2:cd:cb:7b:4a:35:e5:a5:95:b8:0b:8a:d0: 86:44:d9:fa:76:de:5a:03:5b:b0:4b:01:6c:78:4c:ee:2e:9c: 72:fa:71:d1:82:77:ef:66:ee:c7:84:5d:8e:2e:01:7c:a9:46: 1c:9f:25:7f:94:0f:1f:0b:d8:eb:95:fa:76:0a:b8:6e:c9:ae: 23:63:b1:ee:fd:4e:33:11:77:9c:38:29:22:ed:be:2c:c6:6e: f2:8a:29:e2:55:24:d6:e5:8a:0c:7b:63:fc:05:54:19:98:fb: ea:3f:da:4f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3x0a/el6h5gko774r4gh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWVkZDZmNTNiY2I0OWU0YjliMDcwNmRmZDA3NDI1OWM5YjhhNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YD1LboYHhgXwFnfBdqluJDTMBBt ofAnOe9D/xaJfj2+rLXxIUHn9pKvHfFfMzn1PcwdhH+5A1ImGJbCol5XEWCauzDi q/pZJMMsjBuZYYmGNuTGCbPE8duP5Y2/t7yayTLX6A6Zj8zPMH9EZ8B30UnXy+2i 3eglgW143cIp5h5y7B5doBhWsOIy/2VSpRrOoRXzfXeDotikf2QH9KHU7OryUi+x JXWaMxYHDsw0s4WHVfFP9/2OZ9rRd0qHXBTX1CL2r/uK33iGz7vHnWAxjwzS7LSp AyoQBw2t1+web9f0+HLhwUoyH2ZF/1Ts1XkCkBM+nXd6ET63Ltbor0E65QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFF7t1vU7y0nkubBwbf0HQlnJuKQIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzczZDVh ZC1hM2YyLTQ2Y2ItODU4Mi0yMTVkYmM4OWMyYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNzNkNWFk LWEzZjItNDZjYi04NTgyLTIxNWRiYzg5YzJiOS8xL1h1M1c5VHZMU2VTNXNIQnRf UWRDV2NtNHBBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDU4koAwQCuWTwMA0EAgACMAcDBQAqABHQMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnqiMA0GCSqGSIb3DQEBCwUAA4IBAQBJZSrH o6HsOEMejVxKqE2Tyuv1gk4YpYZqtYlmXrHDzKjL8VLgncwK42Bs3fBGeUZSYGo9 BoKRPrTxpH5Bt0KwTjKqOkb6uWmeZn18u8I7gkzuId2nIAqLG47t4a/A05ajq9a+ pno780C1kXPqzCz8VknR+VKxQLcnlHSwyGeh7nFLQuH1ZdqOMyorml77fa7++a87 JeLNy3tKNeWllbgLitCGRNn6dt5aA1uwSwFseEzuLpxy+nHRgnfvZu7HhF2OLgF8 qUYcnyV/lA8fC9jrlfp2Crhuya4jY7Hu/U4zEXecOCki7b4sxm7yiiniVSTW5YoM e2P8BVQZmPvqP9pP -----END CERTIFICATE-----Generated at Sun Jan 18 11:05:02 2026 by rpki-client