This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer File: xi18rB_7LD-94oRiW_GvTGuuaw4.cer (raw, json) Hash identifier: 5EFNxl7vF4F04Q/PbFMi6gJHMsi83nZk3CiRkd5ruFQ= Subject key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC87FB08242E47C8202481C7E1F55B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5624 AS: 29156 IP: 147.29.0.0/16 IP: 152.95.0.0/16 IP: 2a01:5440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7f:b0:82:42:e4:7c:82:02:48:1c:7e:1f:55:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:54:83:3f:e3:28:41:1d:22:ae:99:ec:63: a4:f5:61:b6:82:05:a7:18:47:c3:f8:3f:e4:63:e1: 1a:0e:b7:4b:70:54:93:d3:1d:55:8b:a6:e0:27:da: 63:63:f3:b3:41:a6:2f:14:2a:87:24:cd:15:14:e0: 3e:29:59:e6:51:62:be:56:8f:a6:ac:76:bd:44:dc: 11:f7:15:f4:1c:bb:c6:14:e3:0e:f3:22:d6:63:34: 2c:a2:b5:37:d2:da:ff:ad:67:4a:1d:94:84:e4:a0: 2a:65:5b:9a:90:1c:75:01:70:fb:71:c2:25:3e:da: 92:1f:87:19:b4:6f:1f:fe:ad:1f:df:d9:8e:ca:b9: 20:7a:1f:4c:a9:11:fc:ab:7c:bd:1e:82:53:00:74: 5d:c6:95:1b:6d:cf:97:aa:da:2a:83:09:7a:2d:d9: 47:ce:db:a0:06:39:43:23:81:ad:65:21:dd:b3:e3: 26:1b:0a:2c:33:f9:c9:72:47:90:74:0d:b9:59:38: 6a:97:a3:e4:53:88:3e:c3:cc:3a:64:10:97:fc:fe: 95:cd:b5:e5:14:81:a5:4d:07:e2:5f:4f:d0:44:0a: 70:a0:1f:18:ef:29:da:47:8a:f6:ce:2c:dd:9b:c1: e3:0b:ec:4e:e0:fa:9c:5a:fa:90:fc:9c:c7:d2:6c: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.29.0.0/16 152.95.0.0/16 IPv6: 2a01:5440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5624 29156 Signature Algorithm: sha256WithRSAEncryption 8b:d2:07:93:ff:1d:24:f5:e9:47:1b:70:91:4c:03:1e:79:f3: 4e:7a:1d:90:c5:80:09:c5:ff:db:77:95:f2:65:b2:cb:3c:5d: 49:4e:58:9c:a7:cc:c2:23:dd:9b:ab:ff:36:25:b4:6f:1a:4e: b7:0b:da:94:2d:59:f5:28:99:5e:20:d6:0d:63:18:7d:30:69: 25:0a:b2:a1:4c:e1:7d:c2:c6:39:a0:1d:65:bf:1a:3b:d0:8a: 4a:f0:51:ea:46:92:a0:49:80:9d:3a:1e:54:d3:32:de:34:aa: a4:c5:15:bf:70:97:3d:07:fe:64:74:6e:dd:21:c4:6f:7c:8e: ae:d1:a1:54:52:fb:c9:8a:5a:a2:20:24:32:36:04:e0:cb:d3: 4c:3b:be:4d:aa:d1:f1:a6:cf:95:d2:ac:97:ed:3d:fb:bc:b1: f2:c0:82:fa:e8:ff:ac:b6:10:97:45:b2:c2:4f:de:8b:c4:bd: 8d:d1:f8:1a:3f:d8:76:8b:f4:6d:6a:13:14:73:40:15:2f:e6: 82:5a:c6:19:df:10:6d:bf:f3:3a:e2:c3:11:d0:59:f6:2d:e2: 43:5d:0e:5d:c3:5c:8d:13:a9:84:d6:01:0c:14:db:58:c3:31: 17:c8:05:0b:97:6a:1a:62:ad:b0:82:8c:9f:52:69:fb:b9:76: 13:45:f7:b6 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt6yH+wgkLkfIICSBx+H1W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjJkN2NhYzFmZmIyYzNmYmRlMjg0NjI1YmYxYWY0YzZiYWU2YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0RUgz/jKEEdIq6Z7GOk9WG2ggWn GEfD+D/kY+EaDrdLcFST0x1Vi6bgJ9pjY/OzQaYvFCqHJM0VFOA+KVnmUWK+Vo+m rHa9RNwR9xX0HLvGFOMO8yLWYzQsorU30tr/rWdKHZSE5KAqZVuakBx1AXD7ccIl PtqSH4cZtG8f/q0f39mOyrkgeh9MqRH8q3y9HoJTAHRdxpUbbc+Xqtoqgwl6LdlH ztugBjlDI4GtZSHds+MmGwosM/nJckeQdA25WThql6PkU4g+w8w6ZBCX/P6VzbXl FIGlTQfiX0/QRApwoB8Y7ynaR4r2zizdm8HjC+xO4PqcWvqQ/JzH0mxyWQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFMYtfKwf+yw/veKEYlvxr0xrrmsOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzZjZDVm Yy02MGNjLTQ1ZGUtYmQ4YS0xNTQ0YjQ0ZDU5Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNmNkNWZj LTYwY2MtNDVkZS1iZDhhLTE1NDRiNDRkNTljYS8xL3hpMThyQl83TEQtOTRvUmlX X0d2VEd1dWF3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUF BwEHAQH/BCMwITAQBAIAATAKAwMAkx0DAwCYXzANBAIAAjAHAwUAKgFUQDAdBggr BgEFBQcBCAEB/wQOMAygCjAIAgIV+AICceQwDQYJKoZIhvcNAQELBQADggEBAIvS B5P/HST16UcbcJFMAx558056HZDFgAnF/9t3lfJlsss8XUlOWJynzMIj3Zur/zYl tG8aTrcL2pQtWfUomV4g1g1jGH0waSUKsqFM4X3CxjmgHWW/GjvQikrwUepGkqBJ gJ06HlTTMt40qqTFFb9wlz0H/mR0bt0hxG98jq7RoVRS+8mKWqIgJDI2BODL00w7 vk2q0fGmz5XSrJftPfu8sfLAgvro/6y2EJdFssJP3ovEvY3R+Bo/2HaL9G1qExRz QBUv5oJaxhnfEG2/8zriwxHQWfYt4kNdDl3DXI0TqYTWAQwU21jDMRfIBQuXahpi rbCCjJ9Safu5dhNF97Y= -----END CERTIFICATE-----Generated at Mon Jan 12 09:03:53 2026 by rpki-client