This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer File: x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer (raw, json) Hash identifier: O4CsPPoIRIEOKtMMLTMdX0p75ob8EPZkosRrmAaOVsI= Subject key identifier: C7:55:4F:D3:E1:3B:4A:50:C1:D8:74:82:A7:43:7B:81:C6:3E:99:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38AF608869DF4E6DAD83AA5E3F86F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208957 IP: 5.182.168.0/22 IP: 2a0c:6f80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:af:60:88:69:df:4e:6d:ad:83:aa:5e:3f:86:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7554fd3e13b4a50c1d87482a7437b81c63e9951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:2f:b4:91:24:2d:24:4c:2a:7b:17:4e:df: 91:d8:fe:36:df:71:28:4a:8e:d6:9b:d4:56:63:ff: 8a:27:56:7f:4d:48:30:d0:ec:4a:8e:c4:8b:40:b6: 30:bd:b4:9c:ad:43:d7:4d:41:68:cd:e7:5c:b9:e8: f6:9d:3f:7c:80:5e:94:d7:d7:2f:b0:44:07:c8:82: 33:90:90:95:75:ca:b4:cf:25:1c:06:9d:aa:00:3c: 83:f6:13:eb:1b:fe:96:b3:26:86:8c:a8:ae:2a:73: 1f:50:f8:e3:2b:95:ee:51:bb:8b:69:38:ba:1b:2b: 59:04:ef:3c:e9:12:43:70:a9:e5:15:2a:1f:bf:09: d4:e3:57:96:07:63:5d:43:f6:44:8c:d1:a9:49:59: 2e:eb:50:c7:27:e9:b1:18:06:ac:66:eb:d8:49:ea: 5d:14:48:12:83:42:23:33:55:79:c0:c0:7d:6a:d6: 1a:b0:66:d9:a7:79:e3:d2:6f:0d:90:08:c6:ef:29: 74:16:f4:58:ee:a5:e4:41:bc:bb:97:e9:f2:9e:29: 2d:30:2c:00:f8:3f:fa:07:9c:03:b9:c5:a8:b6:15: 32:d3:56:b2:79:0d:c3:1f:0d:3b:53:d9:8f:f7:7c: 34:48:ec:af:12:8b:c9:d7:16:f0:36:30:dc:1d:eb: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:55:4F:D3:E1:3B:4A:50:C1:D8:74:82:A7:43:7B:81:C6:3E:99:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.168.0/22 IPv6: 2a0c:6f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208957 Signature Algorithm: sha256WithRSAEncryption 90:c4:6f:9a:ec:85:ab:a5:7b:33:a5:7e:3a:66:ea:7a:93:03: da:0a:68:f3:77:13:15:6e:73:d1:ad:08:57:a8:6e:7a:5c:04: 9a:0b:a4:98:89:af:d5:34:26:93:f8:97:50:1a:15:e1:ce:52: 7b:06:e8:e5:eb:45:93:5d:c6:b4:b5:49:4d:f5:76:fd:bb:8e: 65:b1:ab:7e:80:d2:b8:29:c3:8c:77:f7:42:71:74:50:1a:b0: e5:05:a9:57:59:15:55:96:f8:72:41:e8:8a:a7:c5:b9:8a:31: 49:dd:68:48:c5:83:b7:84:17:f1:6b:a8:cd:c3:90:d4:63:ab: f7:5f:c0:c1:ff:34:ae:0e:9f:2a:fb:63:7c:21:5f:24:a2:b7: a1:d6:ab:a5:3b:70:85:3b:9f:67:2c:27:2e:80:75:5d:bb:6c: ef:d2:8a:08:57:39:34:e4:1d:34:36:be:11:6d:4c:50:ff:3f: eb:93:8d:c9:5a:23:9f:54:7c:34:00:e2:04:91:e9:2e:f3:20: a3:c8:bf:c4:8d:3c:d5:f6:94:3e:d9:58:dc:16:dc:e1:23:8b: e4:97:3f:3c:11:0f:f1:27:66:d9:2e:41:b8:63:df:0a:41:2c: bf:6b:0c:bb:04:5d:e7:a9:54:a3:b5:22:28:3f:d5:20:4b:43: c6:12:73:a5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OK9giGnfTm2tg6peP4b4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzU1NGZkM2UxM2I0YTUwYzFkODc0ODJhNzQzN2I4MWM2M2U5OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lwvtJEkLSRMKnsXTt+R2P4233Eo So7Wm9RWY/+KJ1Z/TUgw0OxKjsSLQLYwvbScrUPXTUFozedcuej2nT98gF6U19cv sEQHyIIzkJCVdcq0zyUcBp2qADyD9hPrG/6WsyaGjKiuKnMfUPjjK5XuUbuLaTi6 GytZBO886RJDcKnlFSofvwnU41eWB2NdQ/ZEjNGpSVku61DHJ+mxGAasZuvYSepd FEgSg0IjM1V5wMB9atYasGbZp3nj0m8NkAjG7yl0FvRY7qXkQby7l+nyniktMCwA +D/6B5wDucWothUy01ayeQ3DHw07U9mP93w0SOyvEovJ1xbwNjDcHetnHwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMdVT9PhO0pQwdh0gqdDe4HGPplRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2I4YWVl Zi02ODg5LTQ2MTQtYjdmYy01Yzc1YzNmNDIxZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvYjhhZWVm LTY4ODktNDYxNC1iN2ZjLTVjNzVjM2Y0MjFmNS8xL3gxVlAwLUU3U2xEQjJIU0Nw ME43Z2NZLW1WRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbaoMA0EAgACMAcDBQAqDG+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwPTANBgkqhkiG9w0BAQsFAAOCAQEAkMRvmuyFq6V7 M6V+OmbqepMD2gpo83cTFW5z0a0IV6huelwEmgukmImv1TQmk/iXUBoV4c5Sewbo 5etFk13GtLVJTfV2/buOZbGrfoDSuCnDjHf3QnF0UBqw5QWpV1kVVZb4ckHoiqfF uYoxSd1oSMWDt4QX8WuozcOQ1GOr91/Awf80rg6fKvtjfCFfJKK3odarpTtwhTuf ZywnLoB1Xbts79KKCFc5NOQdNDa+EW1MUP8/65ONyVojn1R8NADiBJHpLvMgo8i/ xI081faUPtlY3Bbc4SOL5Jc/PBEP8Sdm2S5BuGPfCkEsv2sMuwRd56lUo7UiKD/V IEtDxhJzpQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:35 2026 by rpki-client