This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer (raw, json) Hash identifier: lWIaz080sp6lYOkSqh5f/gEhnIrfswaufyxvWz/cAH4= Subject key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F26433EA5D976B0E57E4CD63B65A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209907 IP: 91.228.217.0/24 IP: 176.121.1.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:26:43:3e:a5:d9:76:b0:e5:7e:4c:d6:3b:65:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c72e716353ec733ab4b5085308b386d89a74f147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:38:8a:03:b3:4b:0e:e4:ed:7d:90:0c:8d:47: 05:be:d2:fd:35:a6:b1:f1:72:7a:7f:64:f7:03:04: af:6c:46:11:bd:bf:6b:37:9c:47:a2:50:eb:26:44: 1a:67:cf:01:79:ac:d2:05:b7:77:bf:28:eb:d6:be: d3:85:60:ca:87:4e:47:e3:59:da:89:9b:a6:1b:b4: b7:4f:28:b1:f8:3c:ac:6f:c6:db:2f:4e:6a:b7:4e: 35:e1:b6:05:88:ef:09:a9:4d:ec:fe:d9:ad:de:15: 24:1d:f7:25:ac:26:2c:1b:25:af:11:5d:2b:fd:98: 51:7d:a7:a8:e4:8f:db:9f:46:87:c0:83:dd:64:3c: 4a:22:a6:10:f5:61:84:98:83:0c:c9:e4:61:59:65: 44:ee:29:6c:cd:5f:f5:e8:62:34:99:87:53:8a:b5: 35:ba:43:4d:e3:4e:0b:46:c3:95:cc:20:37:28:69: 8e:0f:a7:3f:35:8d:cc:98:bd:49:2a:29:82:4c:0e: a9:4b:6e:96:ca:29:9d:28:08:16:3a:30:78:10:88: 5e:e8:d1:ff:d0:14:30:dd:7a:81:c6:bb:87:79:38: 0f:3b:6f:8d:43:43:14:da:b1:60:98:b3:aa:dc:16: 45:44:a7:a6:81:cd:ab:d1:b1:9e:a9:fc:db:7d:f6: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.217.0/24 176.121.1.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209907 Signature Algorithm: sha256WithRSAEncryption 2c:96:88:ae:7d:67:69:f9:17:86:5d:e0:0b:b3:af:59:b4:b4: b9:2e:8c:e3:96:98:b3:39:92:8e:ab:c9:9d:f4:96:e3:91:04: 07:53:3e:c2:4b:80:08:fd:01:2c:d2:c4:b5:70:2d:5f:9b:2d: 31:f0:67:6a:ca:15:f5:31:cc:c6:f6:57:19:74:82:97:23:ae: 01:9b:32:26:c6:c7:91:43:eb:a3:97:7c:0e:f5:b6:d4:2d:dd: 1c:5b:4a:ba:19:70:71:99:44:f0:8f:f5:81:2a:bc:c5:81:c0: 0b:5a:3c:88:cb:d5:03:ee:07:af:ae:0e:d1:e8:71:84:bf:22: 26:86:87:5e:a2:6a:4c:81:5e:52:cd:6c:08:d2:03:c9:83:63: 47:b5:e8:2a:01:47:de:38:3a:d4:65:16:a3:e7:dc:00:76:8f: 06:2e:ae:14:1c:dc:b9:27:4f:6c:b5:66:15:0b:ad:c1:8e:96: c1:0f:3c:6c:f0:11:1a:b5:c9:99:26:40:0e:58:2f:dc:b7:c5: 3e:7d:09:4e:29:1b:c4:00:61:b0:e7:44:7d:5c:30:ff:5b:53: 63:c4:93:90:44:61:36:52:6a:3d:0c:01:02:a1:75:d2:e7:c7: d7:c3:64:b9:87:8d:9b:f1:b7:9d:90:1d:d4:ea:23:35:78:3b: 1f:0d:c6:73 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5fyZDPqXZdrDlfkzWO2WpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzJlNzE2MzUzZWM3MzNhYjRiNTA4NTMwOGIzODZkODlhNzRmMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jiKA7NLDuTtfZAMjUcFvtL9Naax 8XJ6f2T3AwSvbEYRvb9rN5xHolDrJkQaZ88BeazSBbd3vyjr1r7ThWDKh05H41na iZumG7S3Tyix+Dysb8bbL05qt0414bYFiO8JqU3s/tmt3hUkHfclrCYsGyWvEV0r /ZhRfaeo5I/bn0aHwIPdZDxKIqYQ9WGEmIMMyeRhWWVE7ilszV/16GI0mYdTirU1 ukNN404LRsOVzCA3KGmOD6c/NY3MmL1JKimCTA6pS26WyimdKAgWOjB4EIhe6NH/ 0BQw3XqBxruHeTgPO2+NQ0MU2rFgmLOq3BZFRKemgc2r0bGeqfzbffaFKQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFMcucWNT7HM6tLUIUwizhtiadPFHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2M0OWQz NC0xYjE0LTQwMjYtYjc3Zi1lNGRlZjljNjk3YTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvYzQ5ZDM0 LTFiMTQtNDAyNi1iNzdmLWU0ZGVmOWM2OTdhNy8xL3h5NXhZMVBzY3pxMHRRaFRD TE9HMkpwMDhVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+TZAwQAsHkBMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMz8zANBgkqhkiG9w0BAQsFAAOCAQEALJaIrn1nafkXhl3gC7OvWbS0 uS6M45aYszmSjqvJnfSW45EEB1M+wkuACP0BLNLEtXAtX5stMfBnasoV9THMxvZX GXSClyOuAZsyJsbHkUPro5d8DvW21C3dHFtKuhlwcZlE8I/1gSq8xYHAC1o8iMvV A+4Hr64O0ehxhL8iJoaHXqJqTIFeUs1sCNIDyYNjR7XoKgFH3jg61GUWo+fcAHaP Bi6uFBzcuSdPbLVmFQutwY6WwQ88bPARGrXJmSZADlgv3LfFPn0JTikbxABhsOdE fVww/1tTY8STkERhNlJqPQwBAqF10ufH18NkuYeNm/G3nZAd1OojNXg7Hw3Gcw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:07:47 2026 by rpki-client