This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer (raw, json) Hash identifier: sgoTftrvq9IMtXyPh/qof+WGSXHa4c/byicksO3v2zk= Subject key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EF31C169BDB47A3DA39D968433B87 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210015 IP: 2.58.176.0/22 IP: 45.80.248.0/22 IP: 141.98.68.0/22 IP: 152.89.228.0/22 IP: 193.151.160.0/22 IP: 2a0d:e7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f3:1c:16:9b:db:47:a3:da:39:d9:68:43:3b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4eb34dda2f8094968494892063351ee0f10e91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:f1:c9:00:e9:f9:5c:61:45:9f:f9:9b:41: 28:50:57:df:ed:68:41:10:2b:24:f7:74:ec:bf:3f: 82:bf:8a:59:47:e3:39:d8:97:01:dd:e9:11:80:c3: 9a:76:78:dc:f8:e4:58:1d:dd:c9:9c:6e:9c:c3:30: 6b:47:96:81:9e:42:7e:3c:04:68:aa:b0:b4:c8:f1: 93:9d:d4:b9:67:22:ea:60:21:db:a3:fd:b9:77:0d: 45:3f:e0:2c:ae:d8:6f:37:ba:cd:55:19:3c:20:28: 6b:24:ac:45:fe:b2:25:16:ef:53:ee:f2:95:d2:df: 33:b6:21:5a:da:31:99:71:4d:f3:cf:3f:3f:fc:e2: d6:c6:b4:45:2a:5c:91:61:d6:7e:89:58:1b:07:2a: e9:7c:1f:a4:27:c1:29:cf:e6:38:05:f2:fc:b4:48: fb:f0:20:bb:83:ed:28:68:39:e3:48:84:34:2e:99: c8:c8:06:91:e8:c9:15:e8:9c:1a:54:42:1c:48:59: a3:86:0b:e0:15:6d:a1:4c:f9:c9:90:3e:4a:60:aa: 47:66:24:85:65:f5:d7:ce:5c:e5:8e:b1:e4:bd:19: 2a:02:e6:2d:73:4b:f1:40:82:14:84:36:db:97:f0: f3:4e:49:8c:93:09:1a:1d:83:40:58:65:58:10:dd: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.176.0/22 45.80.248.0/22 141.98.68.0/22 152.89.228.0/22 193.151.160.0/22 IPv6: 2a0d:e7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210015 Signature Algorithm: sha256WithRSAEncryption 08:3e:ce:9f:e7:47:4d:ee:2b:ad:a5:f8:27:4a:0d:c2:05:b1: 26:e3:ee:02:c3:72:11:e1:f8:0c:fe:a8:50:dc:85:5d:91:e1: 88:06:a5:98:29:b6:c5:5c:b1:09:d1:19:7b:17:f0:51:89:dd: b8:1d:ba:b1:29:97:a7:a3:84:c5:14:58:da:4f:ba:81:60:71: 62:68:25:02:8e:cb:2e:3e:4c:70:14:a9:e4:96:26:df:28:87: d0:be:df:9f:49:c0:be:a7:32:5f:7a:5a:a7:84:ca:c0:b0:4d: 81:eb:ad:a7:56:d6:67:a1:55:e5:e9:d7:4c:05:f1:98:2e:25: 8b:ce:7d:08:a4:ef:64:49:c3:6c:4d:80:88:d2:57:9c:14:52: af:12:58:d4:6f:f3:e1:0d:69:18:4e:6a:76:86:18:ae:44:c1: ec:ab:c3:bd:a7:89:76:b6:e5:39:f8:4f:a4:40:dc:b5:32:a2: 55:e7:07:85:49:c3:4f:21:b1:36:f1:65:71:b7:a4:de:4d:4c: f2:de:7f:67:6d:ce:d9:e7:e7:f5:87:da:b8:ce:27:6a:3f:b9: 17:f7:11:99:e0:4d:96:e9:bb:43:e6:27:6b:8f:83:b9:a0:a8: 94:cd:44:8b:2d:2c:40:e0:a2:6a:b0:df:4b:a1:3b:7e:38:e5: 69:77:75:da -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8fvMcFpvbR6PaOdloQzuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGViMzRkZGEyZjgwOTQ5Njg0OTQ4OTIwNjMzNTFlZTBmMTBlOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4znxyQDp+VxhRZ/5m0EoUFff7WhB ECsk93Tsvz+Cv4pZR+M52JcB3ekRgMOadnjc+ORYHd3JnG6cwzBrR5aBnkJ+PARo qrC0yPGTndS5ZyLqYCHbo/25dw1FP+AsrthvN7rNVRk8IChrJKxF/rIlFu9T7vKV 0t8ztiFa2jGZcU3zzz8//OLWxrRFKlyRYdZ+iVgbByrpfB+kJ8Epz+Y4BfL8tEj7 8CC7g+0oaDnjSIQ0LpnIyAaR6MkV6JwaVEIcSFmjhgvgFW2hTPnJkD5KYKpHZiSF ZfXXzlzljrHkvRkqAuYtc0vxQIIUhDbbl/DzTkmMkwkaHYNAWGVYEN0B2QIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFMTrNN2i+AlJaElIkgYzUe4PEOkaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2I5NjU4 NC0xZjcxLTQ4YmItYTAyMS1hMzQ3YjU2ZjNiOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvYjk2NTg0 LTFmNzEtNDhiYi1hMDIxLWEzNDdiNTZmM2I5YS8xL3hPczAzYUw0Q1Vsb1NVaVNC ak5SN2c4UTZSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCAjqwAwQCLVD4AwQCjWJEAwQCmFnkAwQCwZeg MA0EAgACMAcDBQMqDefAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0XzANBgkq hkiG9w0BAQsFAAOCAQEACD7On+dHTe4rraX4J0oNwgWxJuPuAsNyEeH4DP6oUNyF XZHhiAalmCm2xVyxCdEZexfwUYnduB26sSmXp6OExRRY2k+6gWBxYmglAo7LLj5M cBSp5JYm3yiH0L7fn0nAvqcyX3pap4TKwLBNgeutp1bWZ6FV5enXTAXxmC4li859 CKTvZEnDbE2AiNJXnBRSrxJY1G/z4Q1pGE5qdoYYrkTB7KvDvaeJdrblOfhPpEDc tTKiVecHhUnDTyGxNvFlcbek3k1M8t5/Z23O2efn9YfauM4naj+5F/cRmeBNlum7 Q+Yna4+DuaColM1Eiy0sQOCiarDfS6E7fjjlaXd12g== -----END CERTIFICATE-----Generated at Sun Jan 18 11:13:17 2026 by rpki-client