This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer File: X63Q6UW8YRAcabzmSj1yi6G7hmE.cer (raw, json) Hash identifier: tOwfFqPmK/3sZVD9vRAxOm6BeHRdQ8Bl1D+Qw23qfgk= Subject key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7354568D193D684EFB0E17E6B9415 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207493 IP: 94.231.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:35:45:68:d1:93:d6:84:ef:b0:e1:7e:6b:94:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:30:39:70:33:5c:ed:95:75:ef:6c:1f:e2: c2:87:66:5a:e5:89:c1:ea:c2:c2:64:0e:6b:22:d0: a6:5d:65:33:d4:9d:ea:90:db:e7:7f:a3:6a:a3:58: 94:1e:99:4c:f8:43:5e:f3:9c:df:2f:02:46:f1:bd: 6b:f5:5f:7b:2a:32:80:28:5a:cb:c3:92:1a:37:36: 73:a9:5a:77:a1:b8:0c:d9:76:e6:3b:82:ee:64:82: 6f:22:e9:34:34:7c:8c:6e:05:e8:80:d0:f7:8e:10: 79:6a:bc:c8:55:6e:50:fa:af:68:c8:ff:1c:1e:84: a2:b3:76:5e:1b:f4:b4:12:e1:72:e1:cf:82:a3:f9: 01:41:79:22:46:33:ec:8c:19:43:30:f8:17:f5:f0: 19:b2:92:2f:69:7a:a8:25:e8:c2:92:85:aa:69:bf: f8:8f:8e:bc:79:01:71:52:86:5c:07:84:4c:1f:ed: 84:55:be:9e:62:2b:1d:32:48:3e:ae:65:db:c0:92: fe:a8:41:e3:e9:f4:db:3a:4c:9b:f3:33:ea:56:15: 7e:35:4d:58:39:3d:e7:30:f6:57:cb:7e:42:1d:c3: 71:f7:24:33:0a:ac:ce:91:e7:66:cd:b2:0c:a3:3f: a2:2a:ec:6d:cf:38:b8:2e:d7:8e:23:0a:3d:22:6d: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.193.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207493 Signature Algorithm: sha256WithRSAEncryption 6b:a8:bb:25:6f:5b:0a:9a:a6:7b:31:c0:f5:98:d3:fd:00:cc: 81:82:79:df:b7:16:db:81:d0:01:a7:45:99:52:c5:3b:5c:46: ac:99:5e:4c:75:1f:36:46:47:a0:3d:53:64:2b:07:42:85:54: 2f:46:e0:d0:70:4e:71:40:ec:0c:27:a9:a1:ea:bc:7c:c2:7c: fa:68:78:71:90:c3:55:a8:23:ba:7d:24:93:7f:26:c0:00:da: 9c:83:66:85:b3:b7:37:1a:88:f7:90:98:24:cb:fd:b4:54:b7: 7c:38:d8:8c:ba:37:4e:e8:6f:fe:20:ac:d9:93:e4:f5:94:b6: 99:1c:29:84:65:06:06:7f:7a:9a:78:b1:10:95:28:bf:61:a1: fa:1e:e9:c7:39:f0:f2:bc:a7:d6:f0:32:d0:79:22:ba:ed:f3: 7d:7f:8b:f0:cf:75:d3:ea:db:47:6b:ab:22:1d:5b:19:07:ff: 24:ab:e9:68:f1:c9:9d:3c:c4:58:1f:41:94:76:ad:42:d5:55: e6:d3:f0:de:62:43:80:19:90:8d:a8:e5:c3:b0:0f:da:7c:70: 3c:f7:62:73:bf:b3:60:1c:2d:8f:d1:44:f5:3a:e5:5d:5b:58: bb:ae:f8:00:0a:b9:55:ee:0a:40:d1:ce:27:35:2d:ec:00:13: c5:20:e2:53 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xzVFaNGT1oTvsOF+a5QVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmFkZDBlOTQ1YmM2MTEwMWM2OWJjZTY0YTNkNzI4YmExYmI4NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubEwOXAzXO2Vde9sH+LCh2Za5YnB 6sLCZA5rItCmXWUz1J3qkNvnf6Nqo1iUHplM+ENe85zfLwJG8b1r9V97KjKAKFrL w5IaNzZzqVp3obgM2XbmO4LuZIJvIuk0NHyMbgXogND3jhB5arzIVW5Q+q9oyP8c HoSis3ZeG/S0EuFy4c+Co/kBQXkiRjPsjBlDMPgX9fAZspIvaXqoJejCkoWqab/4 j468eQFxUoZcB4RMH+2EVb6eYisdMkg+rmXbwJL+qEHj6fTbOkyb8zPqVhV+NU1Y OT3nMPZXy35CHcNx9yQzCqzOkedmzbIMoz+iKuxtzzi4LteOIwo9Im2YawIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF+t0OlFvGEQHGm85ko9couhu4ZhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2IwMDcz ZC0zODhmLTRhYjktYjkwZS03MWM3ZThhYzU5YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYjAwNzNk LTM4OGYtNGFiOS1iOTBlLTcxYzdlOGFjNTljMC8xL1g2M1E2VVc4WVJBY2Fiem1T ajF5aTZHN2htRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXufBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMqhTANBgkqhkiG9w0BAQsFAAOCAQEAa6i7JW9bCpqmezHA9ZjT/QDMgYJ537cW 24HQAadFmVLFO1xGrJleTHUfNkZHoD1TZCsHQoVUL0bg0HBOcUDsDCepoeq8fMJ8 +mh4cZDDVagjun0kk38mwADanINmhbO3NxqI95CYJMv9tFS3fDjYjLo3Tuhv/iCs 2ZPk9ZS2mRwphGUGBn96mnixEJUov2Gh+h7pxznw8ryn1vAy0Hkiuu3zfX+L8M91 0+rbR2urIh1bGQf/JKvpaPHJnTzEWB9BlHatQtVV5tPw3mJDgBmQjajlw7AP2nxw PPdic7+zYBwtj9FE9TrlXVtYu674AAq5Ve4KQNHOJzUt7AATxSDiUw== -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:53 2026 by rpki-client