This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer File: xoxl5pm1dqsROnm-iCiUjx5swmA.cer (raw, json) Hash identifier: fREJmv6ld1Dowt4lCtvk/3VyPcPha04iFOQRD5u7Foo= Subject key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AAA71FA95B839068EF5BBB2FEF7EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50395 AS: 62075 AS: 209419 IP: 45.140.208.0/22 IP: 82.115.216.0/22 IP: 2001:67c:1b0::/48 IP: 2001:67c:18d4::/48 IP: 2a0d:2d40::/29 IP: 2a0e:c6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:aa:71:fa:95:b8:39:06:8e:f5:bb:b2:fe:f7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:9b:66:6b:43:8c:5c:3e:1c:b6:4c:59:2a: d2:7b:1f:72:52:ed:e1:39:5c:6b:19:c1:37:8e:18: 04:71:c4:69:fb:93:05:1d:55:3c:57:4d:4a:68:5d: 67:a6:46:0d:0c:9c:ef:4b:15:4e:91:ab:3c:4c:03: 96:c6:ee:ed:c5:36:a7:ce:ea:68:06:06:79:58:d8: 0a:3a:52:dc:9a:d7:dd:f7:19:d1:05:af:94:ba:75: 05:5c:ed:7f:db:ab:eb:ac:32:54:93:94:1b:44:1e: 99:b5:fb:da:5c:4b:11:77:87:7a:c5:26:dc:6c:7c: e9:71:96:05:c0:38:65:4c:e0:a6:a5:72:3e:80:3b: 7d:f3:5b:bb:30:6c:f1:f3:cf:05:76:96:d0:a4:b5: da:b2:7e:12:b4:01:4d:14:2a:a7:54:9a:89:27:b1: bc:e9:bb:8b:be:f5:4d:24:3b:22:08:98:af:34:49: 55:68:43:91:ca:47:23:ce:b7:2f:4b:8a:99:ad:e8: c2:93:5f:37:31:a9:fd:b1:16:1c:55:14:76:41:b4: 7e:57:02:28:b3:62:43:c8:eb:0c:37:f9:9c:1c:a0: a1:88:ee:42:24:0d:6a:b2:67:af:b8:04:bd:bb:54: c5:0c:74:bc:bd:1f:0f:82:26:53:7a:9e:8e:a6:d1: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.208.0/22 82.115.216.0/22 IPv6: 2001:67c:1b0::/48 2001:67c:18d4::/48 2a0d:2d40::/29 2a0e:c6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50395 62075 209419 Signature Algorithm: sha256WithRSAEncryption 41:ac:63:8f:5c:c2:bd:5f:6f:01:f6:b7:c1:c9:8a:f4:c1:d5: c4:8f:ec:e1:67:37:dd:a6:fc:e1:f5:9a:34:b8:a8:05:3d:7b: a2:cd:3f:dc:05:e9:be:10:17:1a:3a:e1:07:d6:00:32:2d:f1: bf:c1:28:e1:ca:50:c0:b8:5e:cb:39:fc:66:ea:2e:da:6a:75: 91:1a:11:74:d6:31:91:75:b6:37:49:a3:32:d5:01:b0:de:dc: 99:9c:30:ec:78:24:25:16:f0:54:37:1f:51:05:21:30:2f:17: 80:05:56:ae:dc:67:84:db:50:0e:26:20:9f:4f:df:f0:5e:30: f5:87:c2:70:62:73:22:da:34:3c:65:89:8a:0c:e5:fb:55:0e: bf:4c:7b:ab:c5:cc:f5:bb:dd:b2:ce:8f:13:2b:49:5d:2d:51: cf:94:29:77:41:bf:59:4a:c7:6b:ca:29:eb:f6:68:b0:3a:63: 8d:27:fb:e4:cf:43:9e:9b:10:4f:16:e0:8d:ac:38:71:3d:a4: 91:ba:08:2f:52:3e:30:64:5d:f8:76:92:5e:ca:46:99:3e:4b: 3a:71:90:25:5d:20:7b:a7:c9:94:dc:34:6c:29:55:70:b8:43: ec:a2:81:8c:08:6d:b4:be:49:06:61:94:35:aa:a0:c9:55:cc: bd:49:ea:20 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt6Wqpx+pW4OQaO9buy/vfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjhjNjVlNjk5YjU3NmFiMTEzYTc5YmU4ODI4OTQ4ZjFlNmNjMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KqbZmtDjFw+HLZMWSrSex9yUu3h OVxrGcE3jhgEccRp+5MFHVU8V01KaF1npkYNDJzvSxVOkas8TAOWxu7txTanzupo BgZ5WNgKOlLcmtfd9xnRBa+UunUFXO1/26vrrDJUk5QbRB6ZtfvaXEsRd4d6xSbc bHzpcZYFwDhlTOCmpXI+gDt981u7MGzx888FdpbQpLXasn4StAFNFCqnVJqJJ7G8 6buLvvVNJDsiCJivNElVaEORykcjzrcvS4qZrejCk183Man9sRYcVRR2QbR+VwIo s2JDyOsMN/mcHKChiO5CJA1qsmevuAS9u1TFDHS8vR8PgiZTep6OptE0WQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFMaMZeaZtXarETp5vogolI8ebMJgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzM0MGM3 My03OWVlLTQ5MjYtOGU0Zi02MDdkNGYzN2Y1OWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMzQwYzcz LTc5ZWUtNDkyNi04ZTRmLTYwN2Q0ZjM3ZjU5Zi8xL3hveGw1cG0xZHFzUk9ubS1p Q2lVang1c3dtQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDASBAIAATAMAwQCLYzQAwQCUnPYMCYEAgACMCADBwAgAQZ8AbAD BwAgAQZ8GNQDBQMqDS1AAwUDKg7GwDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMA xNsCAwDyewIDAzILMA0GCSqGSIb3DQEBCwUAA4IBAQBBrGOPXMK9X28B9rfByYr0 wdXEj+zhZzfdpvzh9Zo0uKgFPXuizT/cBem+EBcaOuEH1gAyLfG/wSjhylDAuF7L Ofxm6i7aanWRGhF01jGRdbY3SaMy1QGw3tyZnDDseCQlFvBUNx9RBSEwLxeABVau 3GeE21AOJiCfT9/wXjD1h8JwYnMi2jQ8ZYmKDOX7VQ6/THurxcz1u92yzo8TK0ld LVHPlCl3Qb9ZSsdryinr9miwOmONJ/vkz0OemxBPFuCNrDhxPaSRuggvUj4wZF34 dpJeykaZPks6cZAlXSB7p8mU3DRsKVVwuEPsooGMCG20vkkGYZQ1qqDJVcy9Seog -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:37 2026 by rpki-client