This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer File: 51hSRFn5E1C_OnC93qArt_GY9ic.cer (raw, json) Hash identifier: yk+OJPOnJHFMjLspjeav4emOYFbCN5VaX4pPcjG0oJM= Subject key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73AC769B927AF70162BC569144646 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50514 AS: 203039 IP: 185.153.52.0/24 IP: 213.134.15.0/24 IP: 2a13:5180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3a:c7:69:b9:27:af:70:16:2b:c5:69:14:46:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e758524459f91350bf3a70bddea02bb7f198f627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e9:1b:16:9c:b0:98:08:e6:f7:06:dc:0f:66: 9a:2d:85:89:9a:74:0e:cd:16:3d:59:41:93:51:ed: c1:53:18:83:14:75:c1:b5:dd:bb:a9:86:f6:b5:4f: 81:68:fc:82:4d:eb:04:34:ca:5d:a6:c0:2b:c8:83: 05:94:ef:b7:86:30:07:58:ad:da:97:09:c6:14:e0: 1e:bc:eb:da:5f:ac:78:12:31:7e:51:a3:bb:2b:32: 1a:0f:97:44:d8:e3:13:20:fc:66:8f:18:36:5a:18: 32:a2:2c:a5:ea:75:50:5d:0b:5a:96:1a:f7:d7:6d: 27:ee:df:8d:70:c2:d8:25:a5:06:77:ce:63:b9:59: f7:18:fb:29:8d:65:6f:eb:99:69:44:08:9f:36:71: 21:08:06:c8:da:42:b3:6a:ad:44:04:c5:a4:2a:17: 57:03:83:39:f6:cb:26:1a:74:90:98:7e:6d:2b:27: 69:82:4e:d2:58:74:2d:8e:be:33:49:35:fe:f9:40: c4:4f:b7:99:93:d6:6a:44:85:0b:87:a5:97:dc:08: e9:bf:a5:d7:63:6d:7f:bd:b1:5e:fa:72:e8:16:dc: 08:d6:a9:1f:aa:96:db:fe:73:c1:b3:0a:03:91:eb: b1:47:f8:69:8c:e9:cd:95:fd:8b:45:c2:79:cd:9d: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.52.0/24 213.134.15.0/24 IPv6: 2a13:5180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50514 203039 Signature Algorithm: sha256WithRSAEncryption 2e:af:11:fa:50:b2:34:24:3c:8d:7f:4f:93:d9:20:e7:d2:82: fe:11:f2:04:b3:56:5c:41:0a:b6:fc:91:e8:8c:6a:a9:dd:81: 05:eb:a3:23:a9:d2:96:7e:60:57:40:56:24:b0:d8:8e:d1:7d: e9:8c:e4:ab:ee:9f:cd:5f:e5:e8:68:07:d4:77:ec:98:08:a2: b1:bf:a9:aa:f6:c0:0c:75:19:95:1f:df:af:a7:5e:8d:ae:63: 48:ed:e7:fa:2c:da:b9:77:06:98:71:72:e3:14:cc:3b:c2:73: f0:7c:f6:53:74:f4:d8:5e:5d:7a:9a:85:f7:66:f1:c7:d3:42: f8:25:a3:9f:3c:63:ff:fb:60:62:8c:e6:cc:1c:d1:21:fc:42: 60:f4:c8:9e:06:7b:c2:6f:2b:1c:e4:df:34:62:52:7c:09:ee: c0:b8:c9:0a:7e:cf:a2:f1:d5:e0:e6:8f:d4:e5:b7:84:46:6e: a7:06:ec:71:88:0e:33:57:59:47:5c:a1:20:4a:34:b4:34:f0: 00:c1:2d:8a:4b:44:50:13:b1:af:63:96:7b:7c:39:7c:7d:67: a0:9d:42:8e:28:5f:b1:3f:0e:56:68:cb:ef:16:5e:77:db:bd: f4:17:d9:88:88:91:71:ac:74:3f:f0:81:8a:c1:35:5d:1b:19: 48:49:40:1d -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3xzrHabknr3AWK8VpFEZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzU4NTI0NDU5ZjkxMzUwYmYzYTcwYmRkZWEwMmJiN2YxOThmNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+kbFpywmAjm9wbcD2aaLYWJmnQO zRY9WUGTUe3BUxiDFHXBtd27qYb2tU+BaPyCTesENMpdpsAryIMFlO+3hjAHWK3a lwnGFOAevOvaX6x4EjF+UaO7KzIaD5dE2OMTIPxmjxg2Whgyoiyl6nVQXQtalhr3 120n7t+NcMLYJaUGd85juVn3GPspjWVv65lpRAifNnEhCAbI2kKzaq1EBMWkKhdX A4M59ssmGnSQmH5tKydpgk7SWHQtjr4zSTX++UDET7eZk9ZqRIULh6WX3Ajpv6XX Y21/vbFe+nLoFtwI1qkfqpbb/nPBswoDkeuxR/hpjOnNlf2LRcJ5zZ2SdwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2U1YTYy OS04ZjY4LTQzMmUtOWU1YS1jNDE5ZTcxMjk5MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvZTVhNjI5 LThmNjgtNDMyZS05ZTVhLWM0MTllNzEyOTkyOC8xLzUxaFNSRm41RTFDX09uQzkz cUFydF9HWTlpYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuZk0AwQA1YYPMA0EAgACMAcDBQMqE1GAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDFUgIDAxkfMA0GCSqGSIb3DQEBCwUAA4IB AQAurxH6ULI0JDyNf0+T2SDn0oL+EfIEs1ZcQQq2/JHojGqp3YEF66MjqdKWfmBX QFYksNiO0X3pjOSr7p/NX+XoaAfUd+yYCKKxv6mq9sAMdRmVH9+vp16NrmNI7ef6 LNq5dwaYcXLjFMw7wnPwfPZTdPTYXl16moX3ZvHH00L4JaOfPGP/+2BijObMHNEh /EJg9MieBnvCbysc5N80YlJ8Ce7AuMkKfs+i8dXg5o/U5beERm6nBuxxiA4zV1lH XKEgSjS0NPAAwS2KS0RQE7GvY5Z7fDl8fWegnUKOKF+xPw5WaMvvFl532730F9mI iJFxrHQ/8IGKwTVdGxlISUAd -----END CERTIFICATE-----Generated at Mon Jan 26 04:16:25 2026 by rpki-client