This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer File: Xdczb6kVchzjv-4hf06ZFk25Uys.cer (raw, json) Hash identifier: I6Ge/pXRLy2JNh27xkZXYyOgQy6BhbKZm3QSDKqLMSU= Subject key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC1B56F5C6A180C4699C606F2828C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35289 AS: 205653 IP: 5.62.0.0/18 IP: 91.228.0.0/22 IP: 91.231.154.0/23 IP: 91.238.214.0/23 IP: 109.68.56.0/21 IP: 185.25.84.0/22 IP: 185.210.164.0/22 IP: 193.151.72.0/22 IP: 2a04:2f40::/29 IP: 2a0b:5bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1b:56:f5:c6:a1:80:c4:69:9c:60:6f:28:28:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:9c:17:cf:26:44:cb:f5:4b:1c:51:8f:ed: cc:3d:10:ce:57:28:97:43:79:1d:7b:c0:87:3e:39: 2e:87:31:1d:3a:51:df:3d:49:61:40:98:3a:53:0f: 97:41:c2:de:ab:76:b3:30:6c:aa:d7:5a:d3:5c:74: 99:5c:27:be:7a:a1:d8:4c:21:57:4d:61:26:18:1c: 60:40:ed:a1:a8:19:f9:9e:91:1e:ab:14:fa:f7:98: 65:3f:06:2c:26:4e:9d:c1:98:f1:20:d1:e9:c2:8a: 67:57:01:4d:78:d4:41:75:05:56:51:d1:76:7c:3e: 9e:81:4a:99:55:f2:1f:a5:95:09:1b:6d:98:30:80: be:8c:05:82:58:a2:60:ea:ca:7c:41:14:24:4e:8f: 3d:f9:b1:50:10:17:d6:da:c2:6b:0d:c1:c1:79:1e: b4:e5:c4:60:b1:2e:1d:4c:66:6e:2b:61:70:91:66: 16:64:2a:99:b6:0d:3b:97:55:9a:91:c1:85:98:69: 56:26:92:12:ab:9a:a0:26:c3:bc:20:85:e4:5a:9a: 56:fa:ce:cb:d9:ce:e0:2b:70:4f:01:5c:da:7d:0c: 36:bd:68:d3:cb:62:40:93:54:ef:ff:ec:79:54:14: a3:fd:4b:21:3a:95:bc:d4:9c:e6:3b:d7:cb:c0:4b: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.0.0/18 91.228.0.0/22 91.231.154.0/23 91.238.214.0/23 109.68.56.0/21 185.25.84.0/22 185.210.164.0/22 193.151.72.0/22 IPv6: 2a04:2f40::/29 2a0b:5bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35289 205653 Signature Algorithm: sha256WithRSAEncryption 72:9d:ff:ec:fe:81:01:e6:c5:55:84:77:f8:62:61:e5:81:4d: 9d:ea:40:11:d8:19:db:77:ca:31:8a:50:14:88:71:01:80:a1: 69:72:f7:de:96:51:94:ab:90:a6:8c:06:e3:11:d9:03:fb:29: fb:3a:19:9b:28:bd:63:b2:fb:ce:11:43:9d:00:fa:99:6d:cf: 09:0b:03:0e:7d:c0:98:ba:ae:7e:09:0a:b2:c7:20:84:b3:37: 27:4b:72:11:c1:a1:c7:d0:65:41:07:e0:ac:f2:d2:28:f7:ed: 0b:d4:1c:41:66:88:64:bb:a9:19:2f:cc:2a:3d:52:5d:76:4e: cf:8c:bf:36:3b:4c:ba:e5:f4:ee:05:b0:42:c7:dd:6d:c4:b3: d9:04:f8:70:28:2e:86:b8:84:8a:5c:8c:d9:bc:1d:07:80:ac: f4:dc:b1:8c:1d:13:28:f9:f5:f4:7d:ce:fc:d8:61:84:0f:9f: 19:17:02:e9:f2:e1:30:39:ec:7a:64:c4:91:02:ba:77:19:ba: 61:81:b1:17:14:94:e2:42:fa:51:8e:13:2d:08:4b:17:07:ab: e7:5a:18:ab:44:04:cd:b4:b3:91:b5:c2:ad:1c:42:fd:d3:35: 7e:16:65:05:9c:f0:25:22:35:f4:fb:22:80:f7:7f:f4:7f:0a: 8c:a5:5c:ca -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt57BtW9cahgMRpnGBvKCjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQ3MzM2ZmE5MTU3MjFjZTNiZmVlMjE3ZjRlOTkxNjRkYjk1MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseycF88mRMv1SxxRj+3MPRDOVyiX Q3kde8CHPjkuhzEdOlHfPUlhQJg6Uw+XQcLeq3azMGyq11rTXHSZXCe+eqHYTCFX TWEmGBxgQO2hqBn5npEeqxT695hlPwYsJk6dwZjxINHpwopnVwFNeNRBdQVWUdF2 fD6egUqZVfIfpZUJG22YMIC+jAWCWKJg6sp8QRQkTo89+bFQEBfW2sJrDcHBeR60 5cRgsS4dTGZuK2FwkWYWZCqZtg07l1WakcGFmGlWJpISq5qgJsO8IIXkWppW+s7L 2c7gK3BPAVzafQw2vWjTy2JAk1Tv/+x5VBSj/UshOpW81JzmO9fLwEt+ywIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFF3XM2+pFXIc47/uIX9OmRZNuVMrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2U3NDRi ZC1mNmQ5LTRmNzQtOGMwMS04YzRiYzQ1OTI3YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTc0NGJk LWY2ZDktNGY3NC04YzAxLThjNGJjNDU5MjdhMy8xL1hkY3piNmtWY2h6anYtNGhm MDZaRmsyNVV5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQGBT4AAwQCW+QAAwQBW+eaAwQBW+7WAwQDbUQ4 AwQCuRlUAwQCudKkAwQCwZdIMBQEAgACMA4DBQMqBC9AAwUDKgtbwDAfBggrBgEF BQcBCAEB/wQQMA6gDDAKAgMAidkCAwMjVTANBgkqhkiG9w0BAQsFAAOCAQEAcp3/ 7P6BAebFVYR3+GJh5YFNnepAEdgZ23fKMYpQFIhxAYChaXL33pZRlKuQpowG4xHZ A/sp+zoZmyi9Y7L7zhFDnQD6mW3PCQsDDn3AmLqufgkKsscghLM3J0tyEcGhx9Bl QQfgrPLSKPftC9QcQWaIZLupGS/MKj1SXXZOz4y/NjtMuuX07gWwQsfdbcSz2QT4 cCguhriEilyM2bwdB4Cs9NyxjB0TKPn19H3O/NhhhA+fGRcC6fLhMDnsemTEkQK6 dxm6YYGxFxSU4kL6UY4TLQhLFwer51oYq0QEzbSzkbXCrRxC/dM1fhZlBZzwJSI1 9PsigPd/9H8KjKVcyg== -----END CERTIFICATE-----Generated at Mon Jan 12 07:34:46 2026 by rpki-client