This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer (raw, json) Hash identifier: 15VC3vqPz6g6S6N1dYWnHxoX+Syny+jAU/11tO3umd0= Subject key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783531651179636A1F5A95393606F17A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52093 IP: 185.156.4.0/22 IP: 2a07:9640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:31:65:11:79:63:6a:1f:5a:95:39:36:06:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:b0:8c:86:a9:98:dd:9b:d7:5a:a0:d7:88: c2:59:f6:6e:43:74:d4:f4:81:13:f2:3c:ef:e8:fd: 51:32:19:6a:a0:71:8d:c4:e7:3d:fc:a9:22:0b:7a: f0:1e:18:17:99:bf:16:d7:5d:b7:ba:9d:0e:ef:a5: 0e:e1:00:1d:81:e0:aa:ab:8d:7b:fa:ed:15:f4:68: de:92:43:ee:bb:aa:65:20:b6:a1:d9:ec:92:c5:9e: 97:f6:68:40:d7:cd:f2:fa:aa:99:4a:78:48:d9:db: 38:04:9e:29:0b:0f:8f:49:ee:7f:65:c9:8a:55:f1: 17:84:e7:45:65:49:61:69:77:3a:d3:6e:9c:c2:c4: 8f:44:4d:b2:6f:41:26:5a:19:b1:0f:8f:95:1a:3a: 85:e3:38:6b:7e:25:05:65:a7:de:27:7c:b6:31:27: 9d:d1:91:85:e5:c0:b9:2c:6d:a1:5e:2d:a0:76:dd: a9:ac:a3:37:dd:fc:77:cc:1e:0e:a1:c1:26:f2:c1: 96:44:a4:a1:09:c3:52:f7:b1:d2:1e:1c:f2:05:cc: 8a:da:9c:43:55:08:87:7e:fd:72:ca:42:9f:71:d1: d9:44:cc:83:9e:1e:19:e2:85:a5:a2:74:b7:1f:df: db:40:f5:68:1d:10:13:10:a2:14:be:5e:bc:c0:11: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.4.0/22 IPv6: 2a07:9640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52093 Signature Algorithm: sha256WithRSAEncryption 3c:7c:67:fa:94:3c:0c:2a:1a:e3:aa:28:5f:e5:7a:c9:1b:43: cf:46:49:fa:24:1a:a1:45:d2:33:0b:9f:35:7d:8a:dd:5e:ef: e8:1a:ca:ff:8d:cb:04:ca:df:c6:9f:c5:bd:02:18:b6:41:ad: ec:7a:50:4b:f3:df:68:6b:0f:96:da:07:42:0d:cb:d0:c2:f9: e0:36:df:dc:61:92:a9:73:72:3c:f7:9d:69:4f:9d:58:a8:1e: 9a:12:4e:d8:fd:52:51:1f:69:8f:48:df:a0:5d:b7:51:f6:70: d8:0b:5c:6c:fe:93:71:63:68:bd:ed:23:99:d6:1f:54:1f:f7: 59:78:bc:59:3a:5e:29:0e:6e:24:13:4b:a3:36:d0:f1:37:9e: 26:80:c0:bc:f3:43:1c:41:90:24:87:84:85:a0:48:93:7c:c0: 2c:50:07:fa:2a:50:fc:c8:7f:4a:2c:42:55:83:23:fd:a0:65: 19:71:da:5c:7c:02:52:4f:e2:ae:11:c0:15:eb:62:19:dc:11: fb:a4:56:87:0f:11:e1:de:a3:dd:68:b3:dc:9c:5b:3b:28:22: 0e:70:f8:f2:03:1f:62:4f:e0:72:56:1c:a1:a0:f5:7d:96:e1: 37:ee:95:cc:9c:fb:7b:bf:4f:7e:cf:42:86:d8:a1:d9:bd:da: e6:48:d6:a6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NTFlEXljah9alTk2BvF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRlNjE4ODIyYjhhZjZmOWVjYWZmY2Q3ZDU0NTliN2NjMTE0NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnduwjIapmN2b11qg14jCWfZuQ3TU 9IET8jzv6P1RMhlqoHGNxOc9/KkiC3rwHhgXmb8W1123up0O76UO4QAdgeCqq417 +u0V9GjekkPuu6plILah2eySxZ6X9mhA183y+qqZSnhI2ds4BJ4pCw+PSe5/ZcmK VfEXhOdFZUlhaXc6026cwsSPRE2yb0EmWhmxD4+VGjqF4zhrfiUFZafeJ3y2MSed 0ZGF5cC5LG2hXi2gdt2prKM33fx3zB4OocEm8sGWRKShCcNS97HSHhzyBcyK2pxD VQiHfv1yykKfcdHZRMyDnh4Z4oWlonS3H9/bQPVoHRATEKIUvl68wBFQkQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNDeYYgiuK9vnsr/zX1UWbfMEUSaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzVhY2Q3 OC1kNjcwLTQxOTItYjU2NC0wNDBlMDY0NGZiZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNWFjZDc4 LWQ2NzAtNDE5Mi1iNTY0LTA0MGUwNjQ0ZmJlOC8xLzBONWhpQ0s0cjItZXl2X05m VlJadDh3UlJKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZwEMA0EAgACMAcDBQMqB5ZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDLfTANBgkqhkiG9w0BAQsFAAOCAQEAPHxn+pQ8DCoa 46ooX+V6yRtDz0ZJ+iQaoUXSMwufNX2K3V7v6BrK/43LBMrfxp/FvQIYtkGt7HpQ S/PfaGsPltoHQg3L0ML54Dbf3GGSqXNyPPedaU+dWKgemhJO2P1SUR9pj0jfoF23 UfZw2AtcbP6TcWNove0jmdYfVB/3WXi8WTpeKQ5uJBNLozbQ8TeeJoDAvPNDHEGQ JIeEhaBIk3zALFAH+ipQ/Mh/SixCVYMj/aBlGXHaXHwCUk/irhHAFetiGdwR+6RW hw8R4d6j3Wiz3JxbOygiDnD48gMfYk/gclYcoaD1fZbhN+6VzJz7e79Pfs9Chtih 2b3a5kjWpg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:53 2026 by rpki-client