This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer File: x0xgresM1XaM91b1YrG1zFucGAo.cer (raw, json) Hash identifier: TULjbBLrgBbJUL6qtyoZBPVxeLE2xvR9jvaqddk5Gg8= Subject key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC03ED3B1D7F2FF84F0E8124ED4026 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49245 AS: 50839 AS: 212271 AS: 216164 IP: 77.75.227.0/24 IP: 185.1.206.0/24 IP: 193.163.70.0/24 IP: 2001:7f8:112::/48 IP: 2a05:4140::/29 IP: 2a11:e100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:03:ed:3b:1d:7f:2f:f8:4f:0e:81:24:ed:40:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:4d:88:2b:d6:ea:3d:d3:14:53:29:ad:5c: 0d:d4:7f:2a:59:eb:f5:fb:e2:ca:98:8b:fe:91:b8: d9:98:9b:05:55:b1:06:ed:3f:6b:de:4f:71:70:8f: c7:a9:4d:f0:b2:99:2b:fd:8a:ca:60:fd:22:a0:e7: 07:33:2a:6b:a5:09:9f:76:f7:07:30:e8:49:03:04: 15:96:78:1b:32:e0:45:a5:69:f6:d2:dd:4d:3e:42: c8:5c:04:2d:d8:df:08:a7:d6:ea:3c:6a:a4:94:d0: d0:f0:88:aa:43:48:57:12:34:99:ee:52:81:61:d0: 54:22:1c:ab:9f:49:55:7c:44:1c:9c:64:bc:50:dc: 7e:6f:47:e5:d2:4d:46:b3:53:c3:d0:c3:3e:1e:7b: 22:43:f2:a3:91:ee:e8:67:a2:11:6e:cc:97:1a:1f: 6b:6d:53:c0:52:f4:c2:b8:a7:b0:f0:1d:04:ed:f7: de:a2:73:13:6b:37:93:d9:1a:ec:aa:42:8b:dc:1f: 6e:83:f0:11:e4:13:38:8c:38:6c:29:97:9e:ea:f4: 26:91:9a:67:bd:cf:26:7b:1d:81:72:02:f4:7a:df: 29:01:e3:f8:90:4c:f5:e8:58:11:ed:9d:00:20:32: 45:06:13:1f:16:e9:53:89:e2:92:2e:7a:89:36:d1: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.227.0/24 185.1.206.0/24 193.163.70.0/24 IPv6: 2001:7f8:112::/48 2a05:4140::/29 2a11:e100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49245 50839 212271 216164 Signature Algorithm: sha256WithRSAEncryption 25:a8:2d:dd:a0:80:79:73:28:f0:d8:0e:96:51:26:6b:9d:0d: d0:22:fa:6b:3d:b7:f1:8a:28:f4:e2:b7:b6:11:34:89:ba:cc: 07:b1:91:5a:ea:52:ec:4c:81:86:ae:c1:74:69:d4:a5:f1:cb: 3c:8f:93:d3:31:d9:97:96:61:66:b2:82:68:73:d9:dc:95:64: 6f:92:72:d8:41:55:bd:92:d3:86:3f:e6:2a:a8:79:44:11:67: 8a:5d:00:66:d2:f3:62:d6:c7:0b:b0:67:11:8c:6c:af:83:85: 4d:3d:c3:95:49:b0:37:84:5a:95:05:ea:06:ca:cc:9d:55:bf: 60:ef:b7:3a:6c:5f:ed:9b:e7:b2:76:3c:b6:c1:03:e2:fa:04: d5:07:d4:a7:72:df:96:6a:09:f8:dc:a7:84:50:0e:39:a9:e6: 46:ee:34:7c:cf:52:11:8f:c3:f7:e1:dc:8c:af:5a:c3:54:6b: 15:fb:61:ee:c6:2a:3d:62:23:f7:8a:65:e5:67:b2:63:77:12: 9f:8d:47:e3:c9:2c:04:ee:54:d4:6a:22:7e:0e:e8:1e:e4:dd: 3b:40:54:9d:6e:79:a2:8b:fc:57:a1:ef:e0:6e:60:9d:96:9a: 69:05:da:3e:d2:ad:4b:e6:21:1f:d4:9f:a2:b8:3a:1f:e0:bd: b7:75:a9:06 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt57APtOx1/L/hPDoEk7UAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzRjNjBhZGViMGNkNTc2OGNmNzU2ZjU2MmIxYjVjYzViOWMxODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbFNiCvW6j3TFFMprVwN1H8qWev1 ++LKmIv+kbjZmJsFVbEG7T9r3k9xcI/HqU3wspkr/YrKYP0ioOcHMyprpQmfdvcH MOhJAwQVlngbMuBFpWn20t1NPkLIXAQt2N8Ip9bqPGqklNDQ8IiqQ0hXEjSZ7lKB YdBUIhyrn0lVfEQcnGS8UNx+b0fl0k1Gs1PD0MM+HnsiQ/Kjke7oZ6IRbsyXGh9r bVPAUvTCuKew8B0E7ffeonMTazeT2RrsqkKL3B9ug/AR5BM4jDhsKZee6vQmkZpn vc8mex2BcgL0et8pAeP4kEz16FgR7Z0AIDJFBhMfFulTieKSLnqJNtGRIwIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFMdMYK3rDNV2jPdW9WKxtcxbnBgKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2FkYjY1 Yy1mNmY3LTQ0OTUtYmEyMy04ODVlODRlNzUxMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvYWRiNjVj LWY2ZjctNDQ5NS1iYTIzLTg4NWU4NGU3NTEyZS8xL3gweGdyZXNNMVhhTTkxYjFZ ckcxekZ1Y0dBby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUF BwEHAQH/BDswOTAYBAIAATASAwQATUvjAwQAuQHOAwQAwaNGMB0EAgACMBcDBwAg AQf4ARIDBQMqBUFAAwUDKhHhADApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMAwF0C AwDGlwIDAz0vAgMDTGQwDQYJKoZIhvcNAQELBQADggEBACWoLd2ggHlzKPDYDpZR JmudDdAi+ms9t/GKKPTit7YRNIm6zAexkVrqUuxMgYauwXRp1KXxyzyPk9Mx2ZeW YWaygmhz2dyVZG+ScthBVb2S04Y/5iqoeUQRZ4pdAGbS82LWxwuwZxGMbK+DhU09 w5VJsDeEWpUF6gbKzJ1Vv2DvtzpsX+2b57J2PLbBA+L6BNUH1Kdy35ZqCfjcp4RQ Djmp5kbuNHzPUhGPw/fh3IyvWsNUaxX7Ye7GKj1iI/eKZeVnsmN3Ep+NR+PJLATu VNRqIn4O6B7k3TtAVJ1ueaKL/Feh7+BuYJ2WmmkF2j7SrUvmIR/Un6K4Oh/gvbd1 qQY= -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:08 2026 by rpki-client