This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer File: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer (raw, json) Hash identifier: YMu3ubBfvqU3FA7cNfsDuzLI0cwwNqHp88sma0sY9IU= Subject key identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E390BE380256ED3FD87FC07EDE293B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25278 IP: 194.102.45.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:e3:80:25:6e:d3:fd:87:fc:07:ed:e2:93:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:45:46:f5:ee:c9:ed:35:ff:cb:35:b5:9c: 49:87:60:b3:a0:c5:86:7b:ad:0e:b8:28:61:dc:e8: 31:e5:13:cf:21:27:f6:7a:34:11:11:94:6b:d7:fe: 44:66:a6:d8:af:56:ef:74:17:0e:48:89:44:46:4a: 6f:db:dc:2f:49:1e:d2:be:74:b3:b7:25:9e:0a:81: f5:a9:85:e7:62:9e:95:e4:d1:2d:f6:1e:6f:aa:a6: b4:9d:89:76:33:ef:36:dc:b2:ea:d9:ef:ed:73:e3: e0:b5:38:d7:1c:88:7d:9a:37:ad:c5:ce:1e:c4:73: 47:57:31:cc:c8:17:63:ee:f1:c6:56:26:2b:54:ef: 9a:3d:6e:05:25:96:11:8a:c5:42:bb:36:d7:89:39: bc:c8:14:b8:a4:e7:cf:e8:77:10:83:12:b5:7d:bd: c4:e9:2e:45:fa:d4:20:13:bb:78:9d:d9:04:8f:35: 48:83:99:69:6c:73:9c:49:46:a0:57:79:f5:79:b2: b2:6c:60:a9:83:94:2c:f7:39:60:dc:15:53:b1:49: c8:11:91:d9:09:56:b7:89:fe:ed:be:fe:d4:bd:1c: 02:f2:ca:e0:45:ed:f0:ae:70:bb:55:12:e0:75:12: ab:fb:f5:02:07:5e:ef:dd:dd:49:e4:37:83:47:9b: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.45.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25278 Signature Algorithm: sha256WithRSAEncryption 7e:e4:e6:b3:80:b7:ab:3a:9f:51:eb:cf:99:f8:79:76:9a:1e: 1c:9d:51:32:40:d3:a9:22:06:f6:5a:d3:1e:ee:58:0f:bc:c7: 23:35:96:aa:ba:95:3a:e6:12:6f:3e:2a:33:24:5a:04:cc:2b: 2d:b8:e7:5a:39:5c:06:ee:d7:ce:92:6c:0c:86:23:76:bc:a5: 39:a5:c4:d2:4f:eb:97:73:3f:12:46:16:57:94:3f:03:af:3c: 10:83:f5:dc:ef:db:02:22:0d:74:39:95:70:9e:ee:a1:77:24: d8:5d:02:9a:69:b1:a7:b1:07:a7:81:2e:13:e5:38:56:1a:62: ef:9f:04:2a:32:64:ba:2d:1e:30:79:88:91:ab:da:ff:5d:9d: e0:23:0b:a0:e8:30:3c:f3:d6:ff:35:4d:e7:b1:8d:c6:e7:73: df:ae:13:ef:19:43:b5:c1:8b:f3:d2:bc:b0:12:fd:f1:bd:e5: e2:36:17:8d:f3:b9:80:6a:d8:f6:10:21:3b:65:45:79:c5:08: 72:e0:51:4a:08:ba:17:b8:c0:d8:09:b6:5b:ed:97:52:1e:d2: 60:d4:95:e9:90:97:11:02:e8:5c:f0:ab:4d:54:3a:4c:3d:26: c6:cf:39:41:db:84:f4:b6:6f:e9:b2:66:63:a4:7d:92:e7:f6: 84:3a:f1:fb -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+OQvjgCVu0/2H/Aft4pOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzRmODgyNGQ0OGY0M2Y2NmU1NGJhNGE0MmU2ZDEwZWQxNWE0ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sFFRvXuye01/8s1tZxJh2CzoMWG e60OuChh3Ogx5RPPISf2ejQREZRr1/5EZqbYr1bvdBcOSIlERkpv29wvSR7SvnSz tyWeCoH1qYXnYp6V5NEt9h5vqqa0nYl2M+823LLq2e/tc+PgtTjXHIh9mjetxc4e xHNHVzHMyBdj7vHGViYrVO+aPW4FJZYRisVCuzbXiTm8yBS4pOfP6HcQgxK1fb3E 6S5F+tQgE7t4ndkEjzVIg5lpbHOcSUagV3n1ebKybGCpg5Qs9zlg3BVTsUnIEZHZ CVa3if7tvv7UvRwC8srgRe3wrnC7VRLgdRKr+/UCB17v3d1J5DeDR5tTkwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMdPiCTUj0P2blS6SkLm0Q7RWk5FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzk0ZWFm Yy01NmRlLTQzYjQtYThkYS1hYzc2N2Q0YzRjOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvOTRlYWZj LTU2ZGUtNDNiNC1hOGRhLWFjNzY3ZDRjNGM4Zi8xL3gwLUlKTlNQUV9adVZMcEtR dWJSRHRGYVRrVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwmYtMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmK+MA0GCSqGSIb3DQEBCwUAA4IBAQB+5OazgLerOp9R68+Z+Hl2mh4cnVEyQNOp Igb2WtMe7lgPvMcjNZaqupU65hJvPiozJFoEzCstuOdaOVwG7tfOkmwMhiN2vKU5 pcTST+uXcz8SRhZXlD8DrzwQg/Xc79sCIg10OZVwnu6hdyTYXQKaabGnsQengS4T 5ThWGmLvnwQqMmS6LR4weYiRq9r/XZ3gIwug6DA889b/NU3nsY3G53PfrhPvGUO1 wYvz0rywEv3xveXiNheN87mAatj2ECE7ZUV5xQhy4FFKCLoXuMDYCbZb7ZdSHtJg 1JXpkJcRAuhc8KtNVDpMPSbGzzlB24T0tm/psmZjpH2S5/aEOvH7 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:27 2026 by rpki-client