This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer (raw, json) Hash identifier: Xfzj4jujMqQR+Mwr07gh+3hvgE6gKjFGZTfg/lYIu50= Subject key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6BFF541AEAA344727CF454C2116C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60759 IP: 188.95.91.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6b:ff:54:1a:ea:a3:44:72:7c:f4:54:c2:11:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:db:45:10:a7:75:18:5c:e1:51:5c:81:01: 4d:42:d6:80:1a:9a:dd:22:e5:33:f9:30:7d:09:35: ec:17:ac:26:8d:4f:e4:a4:3e:d5:54:d7:0e:f7:16: 5c:8c:18:80:eb:50:d5:39:10:6b:ec:5e:14:5d:05: e5:c1:fe:84:d8:4b:a1:65:92:ff:aa:ce:ec:bf:2c: 02:06:e4:9f:69:ab:9a:ad:c4:be:76:ef:d4:ce:c5: b6:a3:c6:33:10:91:2f:77:2b:79:2e:52:a3:3d:de: d8:68:68:c3:1a:bc:d8:7d:19:b5:b8:9a:a9:9b:c1: b0:c9:90:78:0d:b5:5b:3c:b0:43:ca:f7:97:ae:b3: 50:98:4b:ed:99:2c:12:fe:fc:14:f2:29:ca:b0:6c: 76:98:94:20:9b:bc:cf:e0:ad:1d:82:4b:1b:7c:2c: c7:fa:6b:66:42:13:ac:b6:ef:9f:70:23:91:c4:52: d3:0a:4c:4e:54:05:a6:a6:4e:83:86:a3:c0:5d:23: 78:71:9c:00:36:36:20:6e:38:b8:67:b4:86:fa:79: db:0a:24:29:a9:44:22:45:f6:08:87:7a:a9:08:9f: 78:8c:25:bf:33:f1:f1:4e:19:74:52:e7:cf:d8:50: cc:a1:b6:d4:3e:ef:dc:b3:1f:81:27:9f:bb:08:38: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.91.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60759 Signature Algorithm: sha256WithRSAEncryption 8e:2f:33:56:d7:f3:3f:61:e8:27:c1:ef:23:84:91:99:4f:69: d0:8a:0c:9d:56:57:d6:02:78:42:5c:99:c8:00:56:b3:39:7c: aa:88:6b:c0:22:72:0c:22:52:f0:d9:68:54:e1:72:1d:03:f2: 96:0e:ff:b7:ae:66:eb:ff:77:85:29:4f:b8:40:05:69:66:f9: 64:ac:71:e7:72:fe:e0:ef:a9:bc:eb:49:27:39:c6:8e:df:82: 50:72:3c:9e:9b:ec:a8:7b:1b:79:57:59:8c:ed:1d:dc:5a:02: c7:f4:52:06:ff:5a:ea:b3:36:33:93:de:49:8c:0a:f5:86:b1: 86:0c:5d:37:a4:61:18:fa:87:21:a4:65:a3:15:cd:27:47:60: 08:3f:8e:a5:58:e9:fe:51:2a:34:18:cd:f0:ce:8d:0d:6c:ac: b4:29:75:5a:5d:d2:00:c4:40:37:98:a3:3c:ed:e4:33:59:47: b3:f9:e0:6f:d4:e5:c5:0c:e9:d9:43:88:32:31:37:c9:ae:59: aa:fe:dc:01:0c:7c:39:c3:f7:29:6e:e9:aa:25:3e:f4:de:9f: 3a:6d:b4:22:37:c3:65:4a:50:c9:0e:81:d1:3f:97:be:e2:b8: f7:39:bf:72:70:96:5c:c3:f6:3e:ae:71:22:33:16:3a:d2:be: 1f:9d:0a:2b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt262v/VBrqo0RyfPRUwhFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzMyMzExOTUyNTY2ZDFjZTE4ZjA4OGU4YmI2Y2VhYmU3ZTc5MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy17bRRCndRhc4VFcgQFNQtaAGprd IuUz+TB9CTXsF6wmjU/kpD7VVNcO9xZcjBiA61DVORBr7F4UXQXlwf6E2EuhZZL/ qs7svywCBuSfaauarcS+du/UzsW2o8YzEJEvdyt5LlKjPd7YaGjDGrzYfRm1uJqp m8GwyZB4DbVbPLBDyveXrrNQmEvtmSwS/vwU8inKsGx2mJQgm7zP4K0dgksbfCzH +mtmQhOstu+fcCORxFLTCkxOVAWmpk6DhqPAXSN4cZwANjYgbji4Z7SG+nnbCiQp qUQiRfYIh3qpCJ94jCW/M/HxThl0UufP2FDMobbUPu/csx+BJ5+7CDhMowIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFwyMRlSVm0c4Y8Ijou2zqvn55NaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzVkZmQ4 OS00ZDc5LTRiYjYtOGJmMy0wZDM4ZGRkYjA3ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNWRmZDg5 LTRkNzktNGJiNi04YmYzLTBkMzhkZGRiMDc4MC8xL1hESXhHVkpXYlJ6aGp3aU9p N2JPcS1mbmsxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAvF9bMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDtVzANBgkqhkiG9w0BAQsFAAOCAQEAji8zVtfzP2HoJ8HvI4SRmU9p0IoMnVZX 1gJ4QlyZyABWszl8qohrwCJyDCJS8NloVOFyHQPylg7/t65m6/93hSlPuEAFaWb5 ZKxx53L+4O+pvOtJJznGjt+CUHI8npvsqHsbeVdZjO0d3FoCx/RSBv9a6rM2M5Pe SYwK9YaxhgxdN6RhGPqHIaRloxXNJ0dgCD+OpVjp/lEqNBjN8M6NDWystCl1Wl3S AMRAN5ijPO3kM1lHs/ngb9TlxQzp2UOIMjE3ya5Zqv7cAQx8OcP3KW7pqiU+9N6f Om20IjfDZUpQyQ6B0T+XvuK49zm/cnCWXMP2Pq5xIjMWOtK+H50KKw== -----END CERTIFICATE-----Generated at Thu Jan 1 03:50:43 2026 by rpki-client