This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer File: xU3YgoUsxFhrH-40wFAdXbfWDws.cer (raw, json) Hash identifier: 01WgMk8jLLMfS3VJRv3rNJk3u2XQ4DqStQ8Vn8VU6pY= Subject key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F4962F45F91B057F0B25813D15CB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204572 IP: 185.246.144.0/22 IP: 2a0d:8580::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:49:62:f4:5f:91:b0:57:f0:b2:58:13:d1:5c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:8d:50:1c:dc:9a:70:2e:ff:6c:72:f5:7b: f2:16:f2:1a:75:f8:41:0c:84:8b:c4:4e:b7:ab:a5: 3b:b7:ad:47:9e:ef:ab:63:01:bc:2a:ae:8b:8d:58: 9d:2f:ac:4e:df:bd:a7:d8:f5:0b:c2:29:65:c4:cc: 57:be:2f:d5:fe:32:b2:2a:77:5d:2b:d1:4e:5c:3f: 48:25:78:72:5e:1a:2b:f4:41:89:af:d7:62:3b:77: 94:28:f7:f3:f0:fd:7b:fd:ae:4c:b3:4a:09:6c:44: 2c:37:b8:cc:50:d2:96:41:4b:9b:77:ca:e5:b9:21: 4d:4d:d4:71:fb:c9:14:a9:f4:6b:7a:47:04:39:72: 70:bc:9a:5d:26:b1:4a:1d:d9:14:31:94:aa:b7:b0: 31:d8:e9:24:70:43:01:22:89:74:e0:39:82:8c:a6: 42:cb:2f:60:aa:99:f6:07:64:58:63:78:e2:78:94: f0:1f:16:fa:ca:fb:d0:36:d1:5f:79:ed:9d:09:c0: 96:5c:07:42:c8:d5:c7:9e:63:80:a1:d9:17:0a:bc: 50:a7:0a:fd:48:1b:24:fa:2a:5e:c7:1a:59:dc:5c: fc:4a:4a:4e:71:75:92:f5:ef:2b:1f:bb:b0:de:4e: 83:0d:3f:12:71:c0:6e:52:bd:d5:a0:18:af:04:00: c4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.144.0/22 IPv6: 2a0d:8580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204572 Signature Algorithm: sha256WithRSAEncryption 56:a7:12:8e:e9:c7:24:f8:09:ea:a4:24:8e:88:01:e1:d5:14: d8:23:38:f7:3e:f1:9b:ba:04:94:be:fe:6f:08:f2:a5:a0:6b: 65:5f:02:71:55:d1:b8:9b:41:b9:15:3c:38:45:0a:bb:99:f2: 58:65:f0:7f:bc:b5:b1:88:16:e5:86:54:bd:b6:57:3e:78:ff: d5:2f:be:eb:4c:e2:d4:36:26:1b:b2:7a:a9:e4:30:f7:84:b8: a2:4d:7c:6b:6a:0b:4e:91:e1:22:fe:b1:72:70:cb:8c:d1:33: 59:94:7b:18:68:0d:a6:5a:10:e4:6b:2d:fe:c2:55:ab:83:8a: 16:38:2c:04:f2:d2:72:53:6e:d1:f7:e0:5d:a4:78:75:2d:66: ef:8c:dd:6f:77:8e:25:0b:bd:ed:f1:a6:bf:f4:4f:94:41:4c: 1f:59:6e:93:b2:c2:61:72:45:01:20:74:e0:b8:63:36:94:81: 13:46:35:89:36:fc:77:2b:ad:e8:9f:9c:94:88:ce:ba:9c:f8: 87:fc:91:18:00:44:42:71:27:48:33:bc:23:2c:3d:e3:c3:eb: 5c:ff:47:b0:eb:a1:98:2b:61:a0:ae:ee:d2:5f:dc:90:7b:74: 8e:e9:93:83:37:a3:33:2f:ae:64:5c:17:a0:64:18:d6:e8:41: 3e:f6:d2:01 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5f0li9F+RsFfwslgT0VyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTRkZDg4Mjg1MmNjNDU4NmIxZmVlMzRjMDUwMWQ1ZGI3ZDYwZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+NUBzcmnAu/2xy9XvyFvIadfhB DISLxE63q6U7t61Hnu+rYwG8Kq6LjVidL6xO372n2PULwillxMxXvi/V/jKyKndd K9FOXD9IJXhyXhor9EGJr9diO3eUKPfz8P17/a5Ms0oJbEQsN7jMUNKWQUubd8rl uSFNTdRx+8kUqfRrekcEOXJwvJpdJrFKHdkUMZSqt7Ax2OkkcEMBIol04DmCjKZC yy9gqpn2B2RYY3jieJTwHxb6yvvQNtFfee2dCcCWXAdCyNXHnmOAodkXCrxQpwr9 SBsk+ipexxpZ3Fz8SkpOcXWS9e8rH7uw3k6DDT8SccBuUr3VoBivBADEzQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMVN2IKFLMRYax/uNMBQHV231g8LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzY0ODc5 Yi02YzY4LTQ1OTctOWZhYi02ZmJlMjkzMTcxZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvNjQ4Nzli LTZjNjgtNDU5Ny05ZmFiLTZmYmUyOTMxNzFmZS8xL3hVM1lnb1VzeEZockgtNDB3 RkFkWGJmV0R3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufaQMA0EAgACMAcDBQAqDYWAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfHDANBgkqhkiG9w0BAQsFAAOCAQEAVqcSjunHJPgJ 6qQkjogB4dUU2CM49z7xm7oElL7+bwjypaBrZV8CcVXRuJtBuRU8OEUKu5nyWGXw f7y1sYgW5YZUvbZXPnj/1S++60zi1DYmG7J6qeQw94S4ok18a2oLTpHhIv6xcnDL jNEzWZR7GGgNploQ5Gst/sJVq4OKFjgsBPLSclNu0ffgXaR4dS1m74zdb3eOJQu9 7fGmv/RPlEFMH1luk7LCYXJFASB04LhjNpSBE0Y1iTb8dyut6J+clIjOupz4h/yR GABEQnEnSDO8Iyw948PrXP9HsOuhmCthoK7u0l/ckHt0jumTgzejMy+uZFwXoGQY 1uhBPvbSAQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:51 2026 by rpki-client