This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer (raw, json) Hash identifier: SfHyqbdUyFmhSsKbc3fLxZ/Mzb8Y1oHpDN+me2qFXpI= Subject key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77595E5F29CE68DCD2C2F1E7911E61FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29555 IP: 85.117.96.0/19 IP: 185.57.72.0/22 IP: 217.76.64.0/20 IP: 2a03:32c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5e:5f:29:ce:68:dc:d2:c2:f1:e7:91:1e:61:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:5e:5f:c8:34:42:32:51:63:ee:a9:bf:f9: 8f:cd:20:a7:72:1e:6d:bc:81:25:5e:3f:20:d5:1f: f4:2c:fd:38:09:55:2f:6e:c2:43:4c:f7:48:93:91: fa:fb:27:26:ae:8d:60:65:bb:b9:e4:58:ad:bf:9f: c1:57:56:b7:f0:a0:fa:01:69:04:26:17:b3:67:d3: 31:2f:fd:e9:d3:7b:79:a4:6e:18:31:42:69:f1:d1: bd:33:87:3a:82:f7:c6:f8:5f:62:e8:30:e0:0c:b4: 62:db:87:42:f9:d7:47:fc:a9:7f:2f:24:ca:f6:49: 2c:85:b3:c7:24:74:f1:76:0f:87:05:77:61:f3:51: d0:d0:5a:82:96:d7:9d:a9:d1:43:db:75:ea:f9:72: 3c:df:df:f4:52:48:e4:4b:68:ac:ac:bc:a4:60:d4: c1:25:a2:e2:7d:79:ef:07:93:5a:59:48:ab:b2:88: 76:0f:7a:cb:8d:ca:3d:c0:41:cb:9d:05:53:45:c4: 5c:67:4a:c0:8f:d7:04:3e:15:8b:3f:da:7e:d5:f4: ab:9b:c7:a4:28:30:e1:e0:92:af:33:b4:30:91:ab: 53:8a:f1:33:b1:f4:bd:73:2a:c4:b4:07:57:f0:b6: df:87:ff:24:13:1e:ed:a5:ae:ea:14:ca:dc:c6:d3: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.96.0/19 185.57.72.0/22 217.76.64.0/20 IPv6: 2a03:32c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29555 Signature Algorithm: sha256WithRSAEncryption 47:81:07:2b:2f:c8:e8:dd:32:fb:47:f6:dd:3e:c9:69:a4:c0: 6c:ed:86:12:ee:04:19:04:75:63:10:34:9a:9e:ae:cc:82:d4: 69:65:0a:90:dc:01:ba:9e:12:86:29:ad:93:8a:6e:be:ac:49: 56:f3:3b:1e:07:d1:5b:10:f2:1c:55:ec:1a:fc:47:1a:0b:8a: ad:8a:e6:e0:53:1e:90:3a:b9:4d:88:d9:af:f4:c3:9b:13:fc: 6c:0b:c2:d4:11:f2:f5:4f:9f:6a:3a:00:78:0b:de:9a:cc:9b: ab:9b:fe:ac:2e:a4:e2:08:d6:4b:f3:d1:37:ff:dd:74:d8:0a: 6e:5b:14:5a:23:af:5f:dd:3a:3c:db:3c:6b:8b:8b:7d:16:63: 5c:24:ab:7f:83:7d:48:c7:3f:15:e4:00:6c:3b:ce:32:4e:3d: 74:82:86:cf:db:e4:b7:41:ea:fb:b6:0f:61:6f:2d:65:e5:7a: 72:20:a1:03:40:1d:3f:f9:93:5f:0c:05:e0:fa:d5:09:37:80: 4b:1e:4f:47:ac:d5:b3:f6:78:69:76:9e:c9:b6:aa:86:7d:7d: ae:c3:e5:70:96:83:fc:fb:a7:df:2d:8a:ba:02:f5:2e:16:a9: 36:d1:9a:6c:41:4b:bc:c7:99:fa:bd:d9:e7:22:40:a8:35:18: 25:8c:5e:74 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3WV5fKc5o3NLC8eeRHmH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWJiYTA3MzVhMDdlNDBjYTMyMDI2Mjc4YjI2Nzg2NzhmOGJhY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fJeX8g0QjJRY+6pv/mPzSCnch5t vIElXj8g1R/0LP04CVUvbsJDTPdIk5H6+ycmro1gZbu55Fitv5/BV1a38KD6AWkE JhezZ9MxL/3p03t5pG4YMUJp8dG9M4c6gvfG+F9i6DDgDLRi24dC+ddH/Kl/LyTK 9kkshbPHJHTxdg+HBXdh81HQ0FqCltedqdFD23Xq+XI839/0UkjkS2isrLykYNTB JaLifXnvB5NaWUirsoh2D3rLjco9wEHLnQVTRcRcZ0rAj9cEPhWLP9p+1fSrm8ek KDDh4JKvM7QwkatTivEzsfS9cyrEtAdX8Lbfh/8kEx7tpa7qFMrcxtM1RwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFF67oHNaB+QMoyAmJ4smeGePi6zZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzYwNzdk OC0yODc3LTQ2OTgtODA0MC0zMjEyYjY4NTg0ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvNjA3N2Q4 LTI4NzctNDY5OC04MDQwLTMyMTJiNjg1ODRlOS8xL1hydWdjMW9INUF5aklDWW5p eVo0WjQtTHJOay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFVXVgAwQCuTlIAwQE2UxAMA0EAgACMAcDBQAq AzLAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnNzMA0GCSqGSIb3DQEBCwUAA4IB AQBHgQcrL8jo3TL7R/bdPslppMBs7YYS7gQZBHVjEDSanq7MgtRpZQqQ3AG6nhKG Ka2Tim6+rElW8zseB9FbEPIcVewa/EcaC4qtiubgUx6QOrlNiNmv9MObE/xsC8LU EfL1T59qOgB4C96azJurm/6sLqTiCNZL89E3/9102ApuWxRaI69f3To82zxri4t9 FmNcJKt/g31Ixz8V5ABsO84yTj10gobP2+S3Qer7tg9hby1l5XpyIKEDQB0/+ZNf DAXg+tUJN4BLHk9HrNWz9nhpdp7JtqqGfX2uw+VwloP8+6ffLYq6AvUuFqk20Zps QUu8x5n6vdnnIkCoNRgljF50 -----END CERTIFICATE-----Generated at Mon Jan 12 13:35:17 2026 by rpki-client