This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer File: xVnUaTVVufKtaAe6ztxLWi5wGkg.cer (raw, json) Hash identifier: KLwwevz9+PogCPI8iV4jUGfdlad/vY5OvsQ0gAAnrzE= Subject key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78345A4D5C096197CB8A873041846AE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.35.118.0/24 IP: 149.62.34.0/24 IP: 185.70.28.0/22 IP: 2a05:2800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5a:4d:5c:09:61:97:cb:8a:87:30:41:84:6a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:ea:59:93:05:7a:43:ae:ed:13:dc:fb:0b: 15:32:e1:d3:74:71:aa:2c:a4:36:9b:22:04:47:87: 68:b7:ce:63:9b:e9:c3:84:ab:ad:63:97:af:92:6b: 83:5f:98:b6:3a:72:c9:24:9b:d8:dc:c0:ea:a3:cd: 01:fd:1c:d0:d0:c6:ef:c3:59:2f:4e:5f:f9:53:3b: cb:b6:ab:9f:0f:d2:f7:a8:ae:b9:61:ed:23:2a:58: ea:2a:bf:4a:ce:60:be:33:40:7e:41:49:f7:6f:25: c9:14:57:e8:ce:40:bc:5c:ef:1e:81:32:c6:82:ff: 73:32:b1:7b:76:c8:36:58:15:ac:70:a3:75:0e:60: aa:05:12:70:d2:7a:82:b2:14:49:a7:94:68:91:11: e4:77:82:2d:8b:69:dc:80:2c:dc:52:0b:20:de:48: 1f:44:5a:36:3e:ed:18:19:95:6a:14:a1:24:cf:64: cc:8c:c0:6f:36:34:00:24:39:cc:66:c2:8b:5b:3a: f6:95:62:e8:b1:cf:7c:34:89:22:02:68:02:5c:b3: 89:d3:ba:12:2a:1a:84:31:4b:5b:86:f0:41:4a:71: 2d:ac:56:44:25:2b:72:2a:28:96:99:ad:42:7c:a8: d4:2a:43:2c:42:69:7e:51:16:17:85:c4:aa:63:09: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.118.0/24 149.62.34.0/24 185.70.28.0/22 IPv6: 2a05:2800::/29 Signature Algorithm: sha256WithRSAEncryption 9c:46:a7:35:1a:28:8b:f6:e0:d2:c0:30:37:08:07:8a:9e:8c: 65:80:c5:95:69:e1:b4:75:cd:4b:c1:0d:b7:68:90:dd:22:dd: 24:3e:36:60:70:08:32:75:0e:07:ef:5f:3a:88:33:25:aa:86: d0:45:6e:12:6b:86:45:fe:22:45:e4:41:e7:73:69:f1:13:a5: ab:3d:7b:bf:48:9b:2d:05:93:a8:ba:a6:ee:d8:5a:81:c4:94: c0:76:40:af:50:09:9b:35:81:8b:d7:70:5b:06:61:6a:ff:31: 27:a1:08:3a:42:59:49:94:d2:2c:ff:06:4c:ca:d1:8d:b6:89: 80:1d:c1:1b:38:c0:84:25:3a:59:56:07:14:17:97:93:72:e8: ea:48:90:18:c6:9d:e6:9b:35:af:99:ed:08:08:c3:51:d0:a4: f6:f3:d0:1e:d6:e1:d1:8f:6d:ba:20:0f:fd:18:c2:4f:41:d8: 8a:60:33:0e:49:17:98:e2:2e:85:03:dc:3e:ae:49:df:9e:7e: d7:de:83:e4:81:ca:ac:0f:b7:64:ea:10:5c:d7:29:87:e8:f2: 3e:b1:c5:20:0f:35:e4:11:b4:18:27:8a:bf:77:38:29:57:52: d1:09:9c:15:0c:bc:d0:c7:47:2e:e7:1f:75:e4:26:43:9c:8c: 50:30:35:42 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NFpNXAlhl8uKhzBBhGrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU5ZDQ2OTM1NTViOWYyYWQ2ODA3YmFjZWRjNGI1YTJlNzAxYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI/qWZMFekOu7RPc+wsVMuHTdHGq LKQ2myIER4dot85jm+nDhKutY5evkmuDX5i2OnLJJJvY3MDqo80B/RzQ0Mbvw1kv Tl/5UzvLtqufD9L3qK65Ye0jKljqKr9KzmC+M0B+QUn3byXJFFfozkC8XO8egTLG gv9zMrF7dsg2WBWscKN1DmCqBRJw0nqCshRJp5RokRHkd4Iti2ncgCzcUgsg3kgf RFo2Pu0YGZVqFKEkz2TMjMBvNjQAJDnMZsKLWzr2lWLosc98NIkiAmgCXLOJ07oS KhqEMUtbhvBBSnEtrFZEJStyKiiWma1CfKjUKkMsQml+URYXhcSqYwm6ewIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMVZ1Gk1VbnyrWgHus7cS1oucBpIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzNmMGY4 Yi1hZjkzLTQyM2ItYmVhNS1kMmUzNTE2MDk3NTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvM2YwZjhi LWFmOTMtNDIzYi1iZWE1LWQyZTM1MTYwOTc1OS8xL3hWblVhVFZWdWZLdGFBZTZ6 dHhMV2k1d0drZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAWSN2AwQAlT4iAwQCuUYcMA0EAgACMAcDBQMq BSgAMA0GCSqGSIb3DQEBCwUAA4IBAQCcRqc1GiiL9uDSwDA3CAeKnoxlgMWVaeG0 dc1LwQ23aJDdIt0kPjZgcAgydQ4H7186iDMlqobQRW4Sa4ZF/iJF5EHnc2nxE6Wr PXu/SJstBZOouqbu2FqBxJTAdkCvUAmbNYGL13BbBmFq/zEnoQg6QllJlNIs/wZM ytGNtomAHcEbOMCEJTpZVgcUF5eTcujqSJAYxp3mmzWvme0ICMNR0KT289Ae1uHR j226IA/9GMJPQdiKYDMOSReY4i6FA9w+rknfnn7X3oPkgcqsD7dk6hBc1ymH6PI+ scUgDzXkEbQYJ4q/dzgpV1LRCZwVDLzQx0cu5x915CZDnIxQMDVC -----END CERTIFICATE-----Generated at Mon Jan 12 02:00:23 2026 by rpki-client