This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer File: xGtE1wczJKsoQWNn3gQPDkYzSNE.cer (raw, json) Hash identifier: cQlO/TQS5Sc4najZ0JRzlkZlKm1BEBItf/6AkztNR4Q= Subject key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3883D32B88BD22BB371E259C01F1E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210168 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:83:d3:2b:88:bd:22:bb:37:1e:25:9c:01:f1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c46b44d7073324ab28416367de040f0e463348d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:3c:a3:a4:91:99:cc:96:ea:d8:e0:21:e5: c8:c2:58:69:5c:90:2f:5d:d1:06:db:b4:73:68:15: 00:f5:25:3c:aa:79:41:30:1c:10:98:0b:4a:70:66: a9:0a:4f:1f:52:ae:74:e0:b6:67:6f:d3:f3:87:14: 93:02:e0:f9:4a:81:7f:9a:3d:5c:0c:c9:5f:90:47: 03:2a:c6:2e:68:90:ea:23:02:9b:a1:e8:70:66:28: 07:46:da:fc:36:51:7b:c9:8e:2f:bd:fe:b3:6f:16: a4:73:ef:c2:13:ad:79:ee:49:13:30:e9:52:f5:d6: b2:fc:9e:5d:3b:13:f0:f3:43:3b:f6:4a:b6:5a:63: 97:b4:74:37:6b:7b:db:a2:40:72:b5:fa:e5:48:91: 37:23:56:f7:ef:7d:f0:63:b3:8b:bc:cf:92:ef:d6: ba:54:7a:de:3e:4c:9c:3e:95:5f:0d:e3:7f:0e:71: 2e:0b:62:bf:b1:8c:c1:a6:15:70:c5:e3:f4:ca:da: 04:c3:e0:a2:65:3c:2b:e9:ea:43:05:a8:9e:32:cb: 95:b0:6a:0c:5c:26:29:fc:be:dd:53:1c:bb:c3:4f: bb:b8:9c:14:78:d3:61:f1:d4:40:65:70:5c:cf:08: 8f:58:53:ee:17:c2:e2:a0:b2:32:4f:b5:a0:36:13: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210168 Signature Algorithm: sha256WithRSAEncryption 39:5d:67:bd:36:3a:40:09:09:da:65:e9:87:e2:77:36:49:58: a3:82:87:c4:a2:0f:85:54:67:6c:19:cf:ef:90:f8:3e:49:61: 86:ca:d5:b3:6b:ca:21:a5:17:61:7c:2e:6e:3e:bd:e9:4c:54: be:9b:1f:50:a0:bd:2b:f5:31:72:41:a4:0f:f8:54:3d:de:60: 6e:44:c8:e4:1d:c6:16:b3:6d:75:1c:9d:31:a4:48:26:9f:45: b5:0c:2e:df:52:f3:39:35:e9:bf:c4:06:f6:ca:0a:86:0a:95: 62:4b:0b:1a:63:8a:2e:da:bf:b6:b6:29:b9:92:5c:c8:ce:f7: e9:51:3c:75:e5:da:cc:47:a5:a4:da:87:7e:2c:ea:da:c0:76: ac:b0:4e:62:64:00:d1:04:54:61:68:b9:5d:3f:20:d5:f4:f5: 96:bc:50:cd:e5:f0:b1:df:d6:03:c4:48:25:c9:48:a8:18:fc: 52:85:0a:9a:2f:85:e9:6a:54:26:c3:b1:9b:9a:97:0e:9b:c3: 65:e9:99:90:55:1d:f7:d8:f7:a8:6e:ea:2f:bb:df:79:c5:99: 5c:fb:7a:fb:92:05:03:c7:b0:2c:a3:4f:b4:2f:7a:dd:d1:c3: f3:6e:ce:e2:91:b2:1e:ee:86:e0:e7:8e:b9:19:db:74:4f:45: f8:71:7a:e4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OIPTK4i9Irs3HiWcAfHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDZiNDRkNzA3MzMyNGFiMjg0MTYzNjdkZTA0MGYwZTQ2MzM0OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C88o6SRmcyW6tjgIeXIwlhpXJAv XdEG27RzaBUA9SU8qnlBMBwQmAtKcGapCk8fUq504LZnb9PzhxSTAuD5SoF/mj1c DMlfkEcDKsYuaJDqIwKboehwZigHRtr8NlF7yY4vvf6zbxakc+/CE6157kkTMOlS 9day/J5dOxPw80M79kq2WmOXtHQ3a3vbokBytfrlSJE3I1b3733wY7OLvM+S79a6 VHrePkycPpVfDeN/DnEuC2K/sYzBphVwxeP0ytoEw+CiZTwr6epDBaieMsuVsGoM XCYp/L7dUxy7w0+7uJwUeNNh8dRAZXBczwiPWFPuF8LioLIyT7WgNhMsiQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMRrRNcHMySrKEFjZ94EDw5GM0jRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzU0OTc3 NC0wYjdlLTRiODgtODk4MS0xZjBhYWMxNDk1YWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNTQ5Nzc0 LTBiN2UtNGI4OC04OTgxLTFmMGFhYzE0OTVhYy8xL3hHdEUxd2N6Sktzb1FXTm4z Z1FQRGtZelNORS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0+DANBgkqhkiG9w0BAQsFAAOCAQEAOV1nvTY6QAkJ 2mXph+J3NklYo4KHxKIPhVRnbBnP75D4PklhhsrVs2vKIaUXYXwubj696UxUvpsf UKC9K/UxckGkD/hUPd5gbkTI5B3GFrNtdRydMaRIJp9FtQwu31LzOTXpv8QG9soK hgqVYksLGmOKLtq/trYpuZJcyM736VE8deXazEelpNqHfizq2sB2rLBOYmQA0QRU YWi5XT8g1fT1lrxQzeXwsd/WA8RIJclIqBj8UoUKmi+F6WpUJsOxm5qXDpvDZemZ kFUd99j3qG7qL7vfecWZXPt6+5IFA8ewLKNPtC963dHD827O4pGyHu6G4OeOuRnb dE9F+HF65A== -----END CERTIFICATE-----Generated at Tue Jan 13 00:12:15 2026 by rpki-client