This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer File: xCl41TJpj7IIQPlCsCR8Acj1eLI.cer (raw, json) Hash identifier: 3bR84Wxz2p1I8FL1l8C21FShK1ImdwqendS4aq91GvE= Subject key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F2DAFEF0996A6F4D8A8B22A40798 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.180.124.0/22 IP: 2a0a:8340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f2:da:fe:f0:99:6a:6f:4d:8a:8b:22:a4:07:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42978d532698fb20840f942b0247c01c8f578b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:36:c3:d8:70:a7:8c:40:91:dc:0e:20:4e: af:95:a7:70:ac:23:5d:55:62:d0:8f:d5:31:6e:6a: 66:9a:b6:d4:7a:2b:10:eb:59:66:39:63:4c:6b:5a: c7:8c:de:ff:f5:ed:05:fa:3b:3c:4a:e5:a1:bc:41: 71:31:5b:ae:02:20:96:f1:f4:27:bd:3a:99:ad:6f: 4a:ac:d6:c9:54:2d:17:1b:39:08:7f:04:2a:63:74: 7f:89:21:92:95:78:a4:df:c8:57:59:08:65:09:b6: e8:4d:2c:a3:8a:38:3a:37:db:f7:b8:05:69:e4:2f: a3:fa:8d:26:20:15:7d:81:5d:b9:a5:0d:27:e4:70: cd:6f:a4:d8:44:39:c9:36:8d:f1:31:9f:88:07:df: 69:25:a6:f9:be:fa:4e:39:f1:98:43:cc:f4:2d:c6: 5d:0c:12:31:bc:f1:ec:cd:60:cf:bd:40:72:7c:9a: 8a:a7:df:14:78:80:ff:61:20:f0:14:34:7a:1e:5a: 85:cf:25:cc:69:2b:6c:69:03:69:fa:c0:43:e3:b8: 72:e5:6c:1f:ca:29:f4:40:30:2b:e6:0f:b4:88:1f: 11:53:3c:73:bd:32:ce:48:d2:cd:7c:94:e5:18:ad: e8:42:e3:68:24:47:a7:6a:35:68:b1:43:53:e2:44: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.124.0/22 IPv6: 2a0a:8340::/29 Signature Algorithm: sha256WithRSAEncryption a6:ef:a1:cf:83:b1:c6:c2:14:ba:40:6b:ac:25:29:07:e2:16: 90:24:6b:31:ee:ad:01:4e:c3:95:2e:f1:a0:b3:2f:9d:22:be: f2:00:d7:a1:f3:98:28:44:87:72:14:8c:50:7c:31:ac:cb:d2: 76:c7:cd:23:eb:38:90:23:ef:a9:52:5a:65:7f:04:8f:b1:9b: 12:2c:06:fa:1f:6d:c2:6c:68:25:d7:6b:b7:45:63:54:a4:53: e7:50:1c:57:e6:7e:d2:a4:57:f1:28:64:e9:59:f8:7e:ec:f4: 03:66:69:53:67:05:22:18:8b:c1:90:30:b6:14:30:10:5e:3c: 75:93:4a:1a:84:50:f5:07:60:6f:7b:3f:e3:f5:c9:61:9e:42: 41:d6:35:4b:4b:73:c3:3d:27:dd:09:fb:65:b5:93:18:98:90: 03:07:f6:d0:cc:d7:57:ce:93:0a:9c:47:ba:33:d4:c1:f3:ec: 04:f1:0f:81:51:6c:e6:ac:57:af:88:06:b2:03:95:80:b8:6e: 66:70:30:07:b3:d9:08:5b:61:ee:be:c0:86:26:e8:45:22:49: d8:8b:03:e7:af:bb:4a:30:33:e4:34:b5:5c:7f:2f:a2:a3:2c: 27:e0:ea:3f:f6:e8:40:4e:97:41:9a:c8:6b:d7:4e:71:3d:bb: 1c:8f:f6:3f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FfLa/vCZam9NiosipAeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDI5NzhkNTMyNjk4ZmIyMDg0MGY5NDJiMDI0N2MwMWM4ZjU3OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPk2w9hwp4xAkdwOIE6vladwrCNd VWLQj9UxbmpmmrbUeisQ61lmOWNMa1rHjN7/9e0F+js8SuWhvEFxMVuuAiCW8fQn vTqZrW9KrNbJVC0XGzkIfwQqY3R/iSGSlXik38hXWQhlCbboTSyjijg6N9v3uAVp 5C+j+o0mIBV9gV25pQ0n5HDNb6TYRDnJNo3xMZ+IB99pJab5vvpOOfGYQ8z0LcZd DBIxvPHszWDPvUByfJqKp98UeID/YSDwFDR6HlqFzyXMaStsaQNp+sBD47hy5Wwf yin0QDAr5g+0iB8RUzxzvTLOSNLNfJTlGK3oQuNoJEenajVosUNT4kQO+wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMQpeNUyaY+yCED5QrAkfAHI9XiyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2VkZDdh Zi0yZmYwLTQ1ZGMtYjE0Yi03N2Q1MTZiZTdhODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZWRkN2Fm LTJmZjAtNDVkYy1iMTRiLTc3ZDUxNmJlN2E4Ny8xL3hDbDQxVEpwajdJSVFQbENz Q1I4QWNqMWVMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbR8MA0EAgACMAcDBQMqCoNAMA0GCSqGSIb3 DQEBCwUAA4IBAQCm76HPg7HGwhS6QGusJSkH4haQJGsx7q0BTsOVLvGgsy+dIr7y ANeh85goRIdyFIxQfDGsy9J2x80j6ziQI++pUlplfwSPsZsSLAb6H23CbGgl12u3 RWNUpFPnUBxX5n7SpFfxKGTpWfh+7PQDZmlTZwUiGIvBkDC2FDAQXjx1k0oahFD1 B2Bvez/j9clhnkJB1jVLS3PDPSfdCftltZMYmJADB/bQzNdXzpMKnEe6M9TB8+wE 8Q+BUWzmrFeviAayA5WAuG5mcDAHs9kIW2HuvsCGJuhFIknYiwPnr7tKMDPkNLVc fy+ioywn4Oo/9uhATpdBmshr105xPbscj/Y/ -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:38 2026 by rpki-client