This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer (raw, json) Hash identifier: UzaU7/p/Yy4ytZdkbWQkxJFOTsNIrR/eGnnvhw6B/Mg= Subject key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECEBB05C9B312F948EDA67F5BFDF15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9208 IP: 185.205.232.0/22 IP: 212.166.0.0/18 IP: 2a01:5a00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:eb:b0:5c:9b:31:2f:94:8e:da:67:f5:bf:df:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:18:a7:47:59:0c:d2:48:9c:b0:e3:1b:76: 94:d2:52:1d:de:02:d7:7e:bb:92:7f:ee:70:58:cd: 11:9e:9c:8f:4b:1b:75:73:0d:0c:ef:e2:c1:57:69: 2e:d0:ce:c7:49:d0:37:95:5a:10:1d:c3:4e:33:99: 08:6d:5e:f4:05:c3:f8:2e:b0:f8:88:46:a0:29:4e: 16:18:e7:b2:bf:37:a3:f5:72:fa:6d:80:4e:0d:c1: f7:b2:da:27:a6:32:0a:63:92:eb:12:aa:a4:30:8d: e2:d2:5f:21:cb:3c:06:39:0e:63:b9:cb:4d:84:68: 29:fb:76:33:d8:3d:25:6b:db:34:73:73:ec:a4:01: a4:61:88:bc:5e:19:8f:d5:55:44:67:a5:a2:e1:f6: 7d:7f:88:fd:a8:90:0d:ee:46:66:45:9c:e3:26:22: 21:ce:68:63:ad:11:0f:c2:07:d1:98:9e:f3:4e:81: 0f:0d:a3:98:84:5b:c2:d2:2c:70:f3:34:db:85:f9: 3b:c3:ca:ec:03:ea:a0:5e:60:33:96:27:4e:2c:c1: 5d:75:df:c8:9e:5c:ef:9f:a4:e6:51:20:d4:b8:0f: e7:2e:a2:79:3a:00:43:14:71:b3:a4:89:12:0a:5f: ea:29:b2:54:cb:88:13:e3:b8:6a:7a:91:5b:47:5f: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.232.0/22 212.166.0.0/18 IPv6: 2a01:5a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9208 Signature Algorithm: sha256WithRSAEncryption 9d:e7:2e:12:8e:19:14:58:a7:d1:1b:53:ce:0f:d9:49:59:ab: 71:0f:2e:f8:c2:f1:21:2e:96:38:37:2a:1e:af:38:e7:72:60: 33:95:a9:ec:ac:d6:94:ca:8a:96:9d:c7:db:3b:f7:a7:ae:c4: 07:53:17:85:6f:21:43:c8:88:c4:d5:2e:a8:49:40:db:03:4e: 08:d4:72:52:8d:44:41:9a:72:e9:db:1e:34:af:21:ab:87:84: 87:4a:06:08:cd:4d:1b:09:be:b4:13:4a:f4:f0:7e:1f:72:30: 13:9b:13:54:28:56:14:ce:64:f1:33:eb:23:37:1f:af:37:22: 18:23:7e:cc:a7:c6:40:ed:d5:95:e3:80:cb:ee:2a:37:21:17: f0:5b:2e:16:90:df:33:f6:29:d6:e2:0c:d8:99:29:73:6e:d1: 7c:4e:22:80:55:e4:b3:28:ac:6e:18:05:07:85:17:bf:97:ba: 45:53:72:74:16:40:e2:d7:30:eb:5c:ab:85:20:84:57:6c:da: 43:65:52:1f:e8:6d:bf:df:34:d5:09:cb:7f:5d:f2:68:e6:47: c7:d2:57:6d:51:70:5c:c7:9c:8e:86:5a:29:3a:8a:d2:dd:0d: 58:c3:c4:6b:bb:76:5c:5d:07:9b:f2:b7:ae:f9:72:06:a3:c2: ed:31:ed:0e -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt57OuwXJsxL5SO2mf1v98VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTdmZDk1ODZmOWNjYjBmYjQ0ODdiMjA4Y2RmNDY3NWU1YmJmMzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8gYp0dZDNJInLDjG3aU0lId3gLX fruSf+5wWM0RnpyPSxt1cw0M7+LBV2ku0M7HSdA3lVoQHcNOM5kIbV70BcP4LrD4 iEagKU4WGOeyvzej9XL6bYBODcH3stonpjIKY5LrEqqkMI3i0l8hyzwGOQ5juctN hGgp+3Yz2D0la9s0c3PspAGkYYi8XhmP1VVEZ6Wi4fZ9f4j9qJAN7kZmRZzjJiIh zmhjrREPwgfRmJ7zToEPDaOYhFvC0ixw8zTbhfk7w8rsA+qgXmAzlidOLMFddd/I nlzvn6TmUSDUuA/nLqJ5OgBDFHGzpIkSCl/qKbJUy4gT47hqepFbR1/IuQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFF5/2VhvnMsPtEh7IIzfRnXlu/MwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzE1ZTUz ZC03MGIwLTQyNjgtOTEyNC00YjAxZDYzZTc5NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMTVlNTNk LTcwYjAtNDI2OC05MTI0LTRiMDFkNjNlNzk1Yy8xL1huX1pXRy1jeXctMFNIc2dq TjlHZGVXNzh6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuc3oAwQG1KYAMA0EAgACMAcDBQAqAVoAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiP4MA0GCSqGSIb3DQEBCwUAA4IBAQCd5y4S jhkUWKfRG1POD9lJWatxDy74wvEhLpY4NyoerzjncmAzlansrNaUyoqWncfbO/en rsQHUxeFbyFDyIjE1S6oSUDbA04I1HJSjURBmnLp2x40ryGrh4SHSgYIzU0bCb60 E0r08H4fcjATmxNUKFYUzmTxM+sjNx+vNyIYI37Mp8ZA7dWV44DL7io3IRfwWy4W kN8z9inW4gzYmSlzbtF8TiKAVeSzKKxuGAUHhRe/l7pFU3J0FkDi1zDrXKuFIIRX bNpDZVIf6G2/3zTVCct/XfJo5kfH0ldtUXBcx5yOhlopOorS3Q1Yw8Rru3ZcXQeb 8reu+XIGo8LtMe0O -----END CERTIFICATE-----Generated at Sat Jan 3 02:18:59 2026 by rpki-client