This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer File: xD5aLPbSgBXbyqKFDSATs2XkyTE.cer (raw, json) Hash identifier: LDlmepNmNRFwoXwfiXKcyIyQmUjaSknUqyvRFMGtRZk= Subject key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78345824514FD6F0245145C88A638929 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.88.236.0/22 IP: 2a07:c780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:58:24:51:4f:d6:f0:24:51:45:c8:8a:63:89:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:4b:d9:f3:66:84:15:91:1a:ef:0f:6f:63: e7:c2:e5:ec:c6:bb:e7:9c:d2:03:80:d1:39:34:a6: 2f:c6:bc:b8:78:41:4d:eb:9c:4e:5e:13:56:03:98: 04:64:e2:a9:4a:67:e8:c2:25:99:32:2b:c3:c4:2f: 51:be:03:07:a5:60:71:cd:25:4d:0c:ea:75:4c:f7: 50:a2:80:73:4f:d8:df:27:2f:fc:56:d1:51:94:f0: 48:ad:bf:d0:f1:05:86:25:78:b0:b8:a8:06:1b:38: ec:2a:51:2b:35:82:53:d9:fb:61:f7:7c:c4:8b:30: 73:f7:17:15:8c:38:81:a0:0b:8d:7f:bb:12:89:5b: 5e:66:2c:72:3c:30:95:79:13:ae:3a:09:54:ad:a5: e4:df:8f:5b:75:14:dc:85:3f:20:23:54:e5:c6:19: 9f:de:14:1e:40:2f:47:77:21:db:31:77:9a:a4:c9: 04:2b:a2:b6:c0:62:a1:6e:eb:db:ec:95:3a:50:1f: 09:df:e2:1b:b1:8a:b5:26:a5:a0:86:ab:99:9f:91: 34:ab:b2:b5:c7:f5:70:90:a9:f3:73:d5:ea:ad:61: a6:07:35:63:0e:49:26:e9:34:2e:dd:e4:00:dd:db: d9:6b:05:ab:98:63:24:87:91:96:fd:d0:0f:ff:d8: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.236.0/22 IPv6: 2a07:c780::/29 Signature Algorithm: sha256WithRSAEncryption 24:25:fe:2a:e9:a7:04:00:fe:8a:ca:c7:60:2c:ef:69:3b:27: b1:5c:f2:0e:5e:ec:0e:dc:d6:5d:eb:3b:df:eb:83:41:3a:e7: 30:dc:9b:2f:d4:86:2b:e4:67:43:36:99:81:df:3e:82:bd:25: de:28:d2:65:e2:5c:05:fc:4c:66:0a:94:97:a0:12:f6:83:27: d0:69:2f:5e:eb:f4:d7:e6:18:65:6f:25:8f:a3:95:3e:85:86: 2a:3e:3e:07:36:3d:80:f8:4d:09:75:55:e3:6b:a6:14:8f:b6: 85:0c:2e:5f:f0:81:4c:76:93:b4:64:b2:a3:c1:e1:5f:e1:d3: 02:0c:5e:89:17:fd:e7:60:dd:e5:ff:25:13:90:8b:03:e5:b5: 56:39:f3:48:eb:cf:df:9b:ca:98:36:a7:66:0a:ad:46:1a:96: 0e:76:f9:e8:b8:2d:a7:16:99:73:34:5b:a7:1a:c3:d5:49:b2: 08:3a:2b:12:d5:d9:e5:77:41:1c:1d:3f:9b:f5:5c:be:b6:3c: e9:e1:e7:96:9e:8d:bf:2c:b2:66:0e:2f:bb:90:22:a3:b5:a3: 84:94:78:ea:0a:ef:3f:29:8c:55:9f:22:de:c0:c8:79:54:00: 61:c4:67:06:64:c2:6b:e4:0a:d8:d6:20:24:4e:82:31:c2:63: d9:2c:fe:1a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NFgkUU/W8CRRRciKY4kpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDNlNWEyY2Y2ZDI4MDE1ZGJjYWEyODUwZDIwMTNiMzY1ZTRjOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYxL2fNmhBWRGu8Pb2PnwuXsxrvn nNIDgNE5NKYvxry4eEFN65xOXhNWA5gEZOKpSmfowiWZMivDxC9RvgMHpWBxzSVN DOp1TPdQooBzT9jfJy/8VtFRlPBIrb/Q8QWGJXiwuKgGGzjsKlErNYJT2fth93zE izBz9xcVjDiBoAuNf7sSiVteZixyPDCVeROuOglUraXk349bdRTchT8gI1Tlxhmf 3hQeQC9HdyHbMXeapMkEK6K2wGKhbuvb7JU6UB8J3+IbsYq1JqWghquZn5E0q7K1 x/VwkKnzc9XqrWGmBzVjDkkm6TQu3eQA3dvZawWrmGMkh5GW/dAP/9iAPQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzAyY2Yw OC0wZGI1LTQyNGUtOGY1MS04ZDZmNzQ4M2U2MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMDJjZjA4 LTBkYjUtNDI0ZS04ZjUxLThkNmY3NDgzZTYzMi8xL3hENWFMUGJTZ0JYYnlxS0ZE U0FUczJYa3lURS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVjsMA0EAgACMAcDBQMqB8eAMA0GCSqGSIb3 DQEBCwUAA4IBAQAkJf4q6acEAP6KysdgLO9pOyexXPIOXuwO3NZd6zvf64NBOucw 3Jsv1IYr5GdDNpmB3z6CvSXeKNJl4lwF/ExmCpSXoBL2gyfQaS9e6/TX5hhlbyWP o5U+hYYqPj4HNj2A+E0JdVXja6YUj7aFDC5f8IFMdpO0ZLKjweFf4dMCDF6JF/3n YN3l/yUTkIsD5bVWOfNI68/fm8qYNqdmCq1GGpYOdvnouC2nFplzNFunGsPVSbII OisS1dnld0EcHT+b9Vy+tjzp4eeWno2/LLJmDi+7kCKjtaOElHjqCu8/KYxVnyLe wMh5VABhxGcGZMJr5ArY1iAkToIxwmPZLP4a -----END CERTIFICATE-----Generated at Tue Feb 3 08:13:19 2026 by rpki-client