This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer (raw, json) Hash identifier: MQkfLkCyTev9PgH4yOQ/O4K0Tn59ks5g1AHh11cG/YI= Subject key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD9E1F2A04ADE756F9A1F0614D2A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.228.59.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d9:e1:f2:a0:4a:de:75:6f:9a:1f:06:14:d2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:ea:d4:c9:20:ae:d0:65:73:65:fa:b6:bb: f1:41:13:f8:db:6d:06:bf:99:32:fd:f3:65:6a:99: 97:94:40:96:9a:a9:50:d2:ae:f4:e3:13:21:67:f5: d1:c2:19:31:40:b1:dc:ef:36:f7:7b:4c:86:7d:98: 93:15:ef:cb:6a:44:ed:87:1d:fe:8d:a1:73:46:ba: 32:40:5a:f4:9b:50:94:07:58:a0:17:33:99:21:80: e8:66:58:54:4f:86:d8:d8:ec:78:d0:2d:cf:ee:0d: 6e:04:cf:30:47:f5:fc:fc:a5:e5:ad:e8:bb:a1:9f: 85:a1:89:86:c8:b5:36:b0:49:72:e6:5d:0e:7d:cc: 4d:6b:ef:8d:31:07:80:94:12:e3:74:4a:41:54:50: 12:00:52:4e:f6:6f:2a:be:c1:02:de:14:de:27:c8: 87:a1:bb:a3:ff:55:2a:a3:9e:3f:3c:fd:e4:81:cb: 1a:7a:ea:f3:60:d7:fb:19:b0:46:75:dc:b9:1d:0b: 84:6d:ed:8a:73:9e:f1:5f:06:9c:e0:96:9e:cc:85: c9:08:b0:58:db:6c:d7:c4:d2:aa:a8:3b:b1:7b:5c: 65:87:9f:2a:ad:82:25:29:d7:84:ef:5c:96:c8:1f: 5c:d1:2f:b7:d8:1c:92:4e:dd:01:a1:f8:f2:14:bc: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.59.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:48:97:e0:c6:ab:b1:21:6d:d3:e3:01:b0:d4:3f:fd:55:5f: 8b:2e:ff:08:d8:f2:b4:47:89:06:25:ca:90:e5:12:e1:9d:09: d3:3b:96:8b:ff:a0:95:9b:d9:aa:69:ba:db:a3:ea:03:0e:b6: df:2a:40:ac:99:1b:05:85:73:91:3e:28:7a:6a:93:54:83:0c: 66:7e:d6:a2:c8:de:09:e4:34:a8:b1:b0:00:93:83:8f:75:10: 53:f4:f7:ec:b3:4d:9b:9f:10:a0:df:e8:82:ae:5e:f9:8a:65: 9d:61:57:9c:e1:d3:fd:b3:c8:21:3d:f2:eb:ef:dc:ab:3e:ab: 8f:55:7e:49:ac:aa:f5:8e:1b:b0:6b:1d:4e:23:6f:6f:bd:29: e2:26:f5:28:67:87:28:0f:e0:ed:b7:ff:29:5e:30:b7:3c:e3: 30:34:15:c9:72:68:d7:ff:1a:c3:db:a5:ab:7c:b8:6c:63:45: 9d:0f:5b:b2:75:f5:06:46:ee:67:c1:83:37:b6:26:b0:61:c9: 12:5f:e2:01:98:43:69:bf:b5:c6:07:83:43:11:67:ab:ea:51: c0:c8:74:42:b1:ac:0a:71:56:00:4a:a1:1c:10:9a:10:c4:72: 74:5a:16:57:57:99:4a:bf:d0:12:23:7d:72:ce:b3:f0:30:f9: a7:6a:53:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt26tnh8qBK3nVvmh8GFNKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGY5ZTg1NmYwNDk1Yzg0OTBkNTEyNGU4Y2ZiYWYwOGQ3MGRmYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKTq1MkgrtBlc2X6trvxQRP4220G v5ky/fNlapmXlECWmqlQ0q704xMhZ/XRwhkxQLHc7zb3e0yGfZiTFe/LakTthx3+ jaFzRroyQFr0m1CUB1igFzOZIYDoZlhUT4bY2Ox40C3P7g1uBM8wR/X8/KXlrei7 oZ+FoYmGyLU2sEly5l0OfcxNa++NMQeAlBLjdEpBVFASAFJO9m8qvsEC3hTeJ8iH obuj/1Uqo54/PP3kgcsaeurzYNf7GbBGddy5HQuEbe2Kc57xXwac4JaezIXJCLBY 22zXxNKqqDuxe1xlh58qrYIlKdeE71yWyB9c0S+32BySTt0BofjyFLxdwwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFF356FbwSVyEkNUSToz7rwjXDfsXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzEzZGMz OC0yZTc1LTRiMDctYmVmMC1lMWVhNDUzYzUyNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMTNkYzM4 LTJlNzUtNGIwNy1iZWYwLWUxZWE0NTNjNTI1Ny8xL1hmbm9WdkJKWElTUTFSSk9q UHV2Q05jTi14Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAueQ7MA0GCSqGSIb3DQEBCwUAA4IBAQBfSJfg xquxIW3T4wGw1D/9VV+LLv8I2PK0R4kGJcqQ5RLhnQnTO5aL/6CVm9mqabrbo+oD DrbfKkCsmRsFhXORPih6apNUgwxmftaiyN4J5DSosbAAk4OPdRBT9Pfss02bnxCg 3+iCrl75imWdYVec4dP9s8ghPfLr79yrPquPVX5JrKr1jhuwax1OI29vvSniJvUo Z4coD+Dtt/8pXjC3POMwNBXJcmjX/xrD26WrfLhsY0WdD1uydfUGRu5nwYM3tiaw YckSX+IBmENpv7XGB4NDEWer6lHAyHRCsawKcVYASqEcEJoQxHJ0WhZXV5lKv9AS I31yzrPwMPmnalPY -----END CERTIFICATE-----Generated at Mon Jan 12 17:19:10 2026 by rpki-client