This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer (raw, json) Hash identifier: lD9l9NGRdVxuFzFmO+CijY/jFbeC26wcZaIwpoXcE30= Subject key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC66CAD8F776118BBCF95F7D3CAE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43700 IP: 14.102.4.0 -- 14.102.11.255 IP: 31.172.224.0/22 IP: 45.84.244.0/22 IP: 78.158.0.0/19 IP: 91.200.252.0/22 IP: 95.215.140.0/22 IP: 110.172.188.0/22 IP: 114.69.244.0/22 IP: 185.246.240.0/22 IP: 185.252.108.0/22 IP: 185.252.204.0/22 IP: 216.25.0.0/22 IP: 2a10:cc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:6c:ad:8f:77:61:18:bb:cf:95:f7:d3:ca:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:67:84:ab:ae:96:c1:55:54:75:f7:61:f0: 6a:65:e4:25:f4:1d:88:06:82:59:cd:9d:26:24:17: e7:f3:e9:9a:78:48:48:12:25:5e:45:f3:26:4f:dc: 1f:21:3a:58:10:9f:44:b2:d0:85:59:56:2e:2b:70: a9:89:6b:aa:a7:7c:88:dc:13:ae:43:95:e9:a0:c8: 87:47:97:cb:29:f0:b8:63:36:94:82:33:02:6c:b8: 5a:d4:da:d2:27:f8:cc:d6:fc:f4:fe:04:41:c0:2c: ae:ea:fc:4e:87:12:04:6d:ff:64:f9:9c:2a:fe:c1: ec:b6:60:d7:2e:29:21:32:e0:d5:e8:d0:ac:37:1d: 2d:ea:6b:cb:05:77:4b:25:54:25:3c:c8:4a:10:9e: a0:ab:03:e8:42:4d:a1:57:b4:0c:f8:5f:f1:22:1e: 54:9e:b7:06:b6:e3:50:31:5b:d6:cd:62:9c:8a:c2: f3:a2:e7:0b:08:f9:a0:f6:9b:37:d7:13:26:75:a3: 8d:9a:c0:92:e7:53:db:cd:b9:88:50:0c:cb:de:01: 64:7b:45:c9:67:74:d0:90:75:a5:27:dc:98:c5:2e: e8:bb:f7:a0:48:20:ca:6e:e1:f0:bc:62:3c:28:ef: 87:48:d9:31:a6:07:17:33:0f:d8:fa:c2:30:82:ba: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.4.0-14.102.11.255 31.172.224.0/22 45.84.244.0/22 78.158.0.0/19 91.200.252.0/22 95.215.140.0/22 110.172.188.0/22 114.69.244.0/22 185.246.240.0/22 185.252.108.0/22 185.252.204.0/22 216.25.0.0/22 IPv6: 2a10:cc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43700 Signature Algorithm: sha256WithRSAEncryption a0:65:d1:33:fe:7f:44:a5:73:34:30:a1:a7:ff:11:47:9b:69: 56:9d:c0:8c:a8:b3:db:c5:5b:9f:39:29:b1:15:7e:b2:8b:df: f6:a4:5e:62:1c:b8:db:7f:ec:bc:cf:75:8e:5e:2b:d5:62:a9: b1:73:d6:56:d5:f2:32:e4:73:27:a4:a3:b3:d0:0a:6c:75:41: 45:51:b0:ef:13:e4:fa:36:8b:bb:be:79:85:fe:28:df:32:b6: 86:f1:0b:48:97:e6:58:29:32:3d:29:47:68:9d:1f:6b:03:85: 30:4b:ae:e1:fd:22:c6:ec:1d:6f:14:c2:4d:cc:4c:8e:2c:ea: eb:1b:1c:be:7a:42:8e:fd:20:2c:50:fe:5a:3c:40:84:8b:2e: e8:7b:e9:ed:25:54:6b:39:1f:0a:39:00:52:68:14:96:ed:25: 6c:54:ef:9e:0c:fb:06:4c:d7:aa:10:a0:3e:5a:7f:11:84:b4: 4d:44:d2:99:a3:00:0e:14:d9:96:e5:68:32:a6:c7:4f:58:21: 18:3a:28:37:7e:c6:6b:cc:27:9c:2e:cb:3b:e6:35:26:e3:37: e1:84:a1:f6:8c:c2:a6:4e:da:b7:8d:ae:00:01:28:04:90:f2: 47:82:4f:3a:3a:33:45:8e:f4:de:4b:d8:92:c6:e7:6e:0a:3b: 4a:ae:68:1c -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt5fsZsrY93YRi7z5X308rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQ2ZjZkMjk5YmNkZWM3M2QxM2YyZDg0MmZjMWRmNGJjMWVlMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqFnhKuulsFVVHX3YfBqZeQl9B2I BoJZzZ0mJBfn8+maeEhIEiVeRfMmT9wfITpYEJ9EstCFWVYuK3CpiWuqp3yI3BOu Q5XpoMiHR5fLKfC4YzaUgjMCbLha1NrSJ/jM1vz0/gRBwCyu6vxOhxIEbf9k+Zwq /sHstmDXLikhMuDV6NCsNx0t6mvLBXdLJVQlPMhKEJ6gqwPoQk2hV7QM+F/xIh5U nrcGtuNQMVvWzWKcisLzoucLCPmg9ps31xMmdaONmsCS51PbzbmIUAzL3gFke0XJ Z3TQkHWlJ9yYxS7ou/egSCDKbuHwvGI8KO+HSNkxpgcXMw/Y+sIwgrqb5wIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFF3W9tKZvN7HPRPy2EL8HfS8HuLTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2E0YjQ0 Ni1iYjcyLTQ1YmUtYmM0Ni01MWY1ZmY4MWMxMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYTRiNDQ2 LWJiNzItNDViZS1iYzQ2LTUxZjVmZjgxYzExNy8xL1hkYjIwcG04M3NjOUVfTFlR dndkOUx3ZTR0TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBWBAIAATBQMAwDBAIOZgQDBAIOZggDBAIfrOADBAItVPQDBAVO ngADBAJbyPwDBAJf14wDBAJurLwDBAJyRfQDBAK59vADBAK5/GwDBAK5/MwDBALY GQAwDQQCAAIwBwMFAyoQzAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKq0MA0G CSqGSIb3DQEBCwUAA4IBAQCgZdEz/n9EpXM0MKGn/xFHm2lWncCMqLPbxVufOSmx FX6yi9/2pF5iHLjbf+y8z3WOXivVYqmxc9ZW1fIy5HMnpKOz0ApsdUFFUbDvE+T6 Nou7vnmF/ijfMraG8QtIl+ZYKTI9KUdonR9rA4UwS67h/SLG7B1vFMJNzEyOLOrr Gxy+ekKO/SAsUP5aPECEiy7oe+ntJVRrOR8KOQBSaBSW7SVsVO+eDPsGTNeqEKA+ Wn8RhLRNRNKZowAOFNmW5WgypsdPWCEYOig3fsZrzCecLss75jUm4zfhhKH2jMKm Ttq3ja4AASgEkPJHgk86OjNFjvTeS9iSxuduCjtKrmgc -----END CERTIFICATE-----Generated at Thu Jan 1 14:23:02 2026 by rpki-client