This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer File: x50CxhiGGtRbr3jOOQI8vLSUp78.cer (raw, json) Hash identifier: jR2l+Fb00FHQM6po4GcovZHCGBhUY9xxD2PZBC0KxJA= Subject key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F467D508FDDDEADA3D7A9AF59B76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.246.4.0/23 IP: 193.246.102.0/23 IP: 217.198.187.0/24 IP: 2a0f:f080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f4:67:d5:08:fd:dd:ea:da:3d:7a:9a:f5:9b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:b8:40:94:b0:50:11:e1:99:8e:1b:8a:7a: 68:87:fe:fc:32:fc:55:55:1f:f8:45:35:c7:8d:aa: b3:ae:04:16:d9:08:10:14:e9:22:d4:89:59:db:df: bb:21:f7:a9:ff:85:35:cc:85:dc:fe:e9:a7:3c:6a: 29:93:3e:31:ff:4d:ea:a4:8b:3e:b8:a2:ca:ba:f6: 72:24:9f:f0:0e:5b:14:97:7d:7f:f1:9b:8f:8d:a3: a3:87:40:30:9a:78:01:0e:61:29:15:eb:c7:4e:8a: 19:77:c1:cd:38:69:67:16:be:d0:3b:6f:86:92:fa: 01:45:21:63:b5:ff:af:e3:2b:e4:06:b9:b3:0c:f5: b5:35:69:f0:42:f1:c9:47:14:5f:06:90:9e:c2:3f: 46:a6:df:52:47:c0:6b:13:85:58:56:24:16:74:ba: e4:cb:b6:7d:6a:7d:0b:dd:f0:4e:86:41:a8:58:d6: 9d:bc:d8:a6:48:93:ac:65:2a:fd:36:b4:db:72:65: 53:47:c6:b5:9b:2d:f7:ed:b7:e8:78:5c:f3:8b:ac: 4a:35:1c:6d:38:f3:ac:71:a5:87:4b:00:c6:58:44: 33:2d:3a:6d:62:63:93:18:95:fd:81:0c:01:51:fc: 16:ef:b8:9c:b8:02:33:9f:06:e0:25:62:10:fe:12: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.4.0/23 193.246.102.0/23 217.198.187.0/24 IPv6: 2a0f:f080::/29 Signature Algorithm: sha256WithRSAEncryption 3f:be:a5:4c:f4:90:7c:68:13:80:2a:6d:15:59:71:4b:02:e0: ae:b2:9d:cd:d7:57:5c:70:24:49:82:f5:16:30:62:a5:cb:2b: 83:3d:62:4c:e9:ba:81:68:1f:00:29:ac:ec:97:3a:5b:fb:c4: 35:87:f8:9a:8c:1b:e3:c6:fa:8e:fd:cb:6a:27:b4:f3:9d:8f: dc:63:32:91:55:45:ed:51:bb:bf:2b:6e:f8:3b:b5:b5:f7:03: db:d2:ba:d8:26:49:fe:bb:23:7c:9f:7e:8b:c3:17:f3:54:de: a1:40:64:27:10:03:dc:3a:27:23:ea:17:cd:b0:39:6c:a8:1b: 81:8c:56:43:b9:fe:e4:07:86:06:d8:0c:35:46:40:74:62:26: 6b:9a:3b:ce:41:55:05:fe:68:b9:b4:6f:ad:c7:c7:aa:2e:63: ce:32:0a:35:1e:b4:b0:6d:ed:a0:69:ed:11:5b:af:c7:ac:d9: 0a:3f:0c:9e:77:c6:0d:18:d3:6a:13:0b:0c:de:e1:1b:17:99: db:23:81:d9:a3:8d:0b:f6:04:db:43:3d:ec:60:cb:cb:94:15: 46:ed:d0:a9:3b:05:47:1c:83:bf:bc:25:f2:8a:1e:ff:2f:8a: 79:20:4c:00:af:b7:f6:bf:aa:64:af:08:69:22:d0:e8:9e:4d: 25:3f:d8:76 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4NPRn1Qj93eraPXqa9Zt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzlkMDJjNjE4ODYxYWQ0NWJhZjc4Y2UzOTAyM2NiY2I0OTRhN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Se4QJSwUBHhmY4binpoh/78MvxV VR/4RTXHjaqzrgQW2QgQFOki1IlZ29+7Ifep/4U1zIXc/umnPGopkz4x/03qpIs+ uKLKuvZyJJ/wDlsUl31/8ZuPjaOjh0AwmngBDmEpFevHTooZd8HNOGlnFr7QO2+G kvoBRSFjtf+v4yvkBrmzDPW1NWnwQvHJRxRfBpCewj9Gpt9SR8BrE4VYViQWdLrk y7Z9an0L3fBOhkGoWNadvNimSJOsZSr9NrTbcmVTR8a1my337bfoeFzzi6xKNRxt OPOscaWHSwDGWEQzLTptYmOTGJX9gQwBUfwW77icuAIznwbgJWIQ/hIVAQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMedAsYYhhrUW694zjkCPLy0lKe/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q5MGE5 MzVhLWE3NGQtNGI5OC05NDMwLWJjN2FlNWMyNGYyOC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkw YTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvQzc5RDAyQzYxODg2 MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgME AcH2BAMEAcH2ZgMEANnGuzANBAIAAjAHAwUDKg/wgDANBgkqhkiG9w0BAQsFAAOC AQEAP76lTPSQfGgTgCptFVlxSwLgrrKdzddXXHAkSYL1FjBipcsrgz1iTOm6gWgf ACms7Jc6W/vENYf4mowb48b6jv3Laie0852P3GMykVVF7VG7vytu+Du1tfcD29K6 2CZJ/rsjfJ9+i8MX81TeoUBkJxAD3DonI+oXzbA5bKgbgYxWQ7n+5AeGBtgMNUZA dGIma5o7zkFVBf5oubRvrcfHqi5jzjIKNR60sG3toGntEVuvx6zZCj8MnnfGDRjT ahMLDN7hGxeZ2yOB2aONC/YE20M97GDLy5QVRu3QqTsFRxyDv7wl8ooe/y+KeSBM AK+39r+qZK8IaSLQ6J5NJT/Ydg== -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:39 2026 by rpki-client