This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer File: 51hbXNR32QB1zbYxCfVyeXZsKXY.cer (raw, json) Hash identifier: IAn9cBIKEB8+wPVOpOVspXWpBrUEfcrYeJ5cuQpcKmg= Subject key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835521F5034C86B7DFA1E3181F8D43D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52112 IP: 194.153.158.0/26 IP: 2001:7f8:89::/48 IP: 2a09:2500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:52:1f:50:34:c8:6b:7d:fa:1e:31:81:f8:d4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7585b5cd477d90075cdb63109f57279766c2976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:2c:06:ac:be:4e:70:f8:ea:28:84:df:52: b5:cb:27:88:96:ac:eb:48:96:a3:5a:38:25:13:3d: 78:52:1e:63:14:0f:2e:74:ae:a8:87:c9:1f:c5:0a: 8a:9a:29:73:19:6e:40:00:5e:77:7c:cf:a4:e8:6c: df:25:bd:b4:66:ac:f2:73:9c:48:9c:df:c5:4d:7a: c2:5d:e3:52:49:4d:80:36:35:c0:5b:ca:a0:00:68: 8e:55:1d:86:f4:00:29:f2:c6:57:03:78:44:e5:d9: 76:e6:1a:a1:bd:ee:c4:86:01:61:07:da:7f:1f:fc: 41:55:15:03:cf:bc:b3:c1:f2:aa:78:2f:51:a6:7b: b8:d7:40:88:6e:a6:fb:f2:1c:4e:bd:26:95:5d:34: 80:56:3a:dd:00:c2:f2:1a:c1:e5:61:e1:ae:7d:53: 19:d6:2a:c3:c6:df:e9:48:3d:f7:c3:79:b4:f4:b0: 4d:29:52:52:78:b3:bf:3d:18:1a:fe:ec:61:ad:88: fd:61:22:86:95:c1:c7:0a:f6:ed:49:e5:13:7e:d9: a1:31:5a:c4:67:ac:85:58:f1:ee:4a:91:2c:e4:25: c4:9b:6f:2d:ea:59:36:e0:1d:60:58:4f:4f:0f:98: 6b:1f:93:96:40:bd:87:90:7d:15:35:74:a1:11:63: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.158.0/26 IPv6: 2001:7f8:89::/48 2a09:2500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52112 Signature Algorithm: sha256WithRSAEncryption 8d:62:6f:ab:dd:9e:dc:26:e1:8e:36:f1:4b:12:37:c4:66:74: fc:cd:0d:c3:59:be:6b:2a:b7:82:8f:6d:97:b3:73:2b:92:e9: 83:25:dd:43:e6:39:8b:24:18:a5:50:77:1d:f8:0a:74:4b:60: 9e:64:9f:98:81:36:6a:91:ec:71:61:07:80:19:f0:a7:5d:cb: d2:f3:fb:c7:5b:a3:8a:2e:6a:59:a3:01:4e:4c:90:8d:b3:44: 4f:b7:5c:c3:83:b1:3f:70:d2:47:6f:7e:c4:ab:36:dd:15:d6: 56:b4:b1:8f:2d:40:aa:fe:c3:4d:21:0a:31:db:45:9b:5a:a1: 1d:74:dc:73:01:c1:22:46:94:81:51:5f:13:5c:7c:fe:ec:bb: be:8a:b4:29:f1:7f:1b:86:c9:e2:81:e3:4c:7a:84:99:3a:b1: 07:7e:83:70:80:5a:b5:32:4d:1d:0a:13:eb:2b:52:76:fd:e1: af:ba:c0:71:a0:0a:7f:34:04:b2:23:53:64:74:8e:52:b0:69: 2b:41:1d:59:cb:7d:37:f5:52:d8:8e:a5:1d:46:a3:88:61:30: 69:2d:cf:36:f1:16:ff:64:dc:3d:c7:dc:0e:16:80:37:22:ea: 56:8d:e8:42:05:c0:e9:29:be:af:26:38:28:1c:98:dd:05:03: 7a:c2:6e:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt4NVIfUDTIa336HjGB+NQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzU4NWI1Y2Q0NzdkOTAwNzVjZGI2MzEwOWY1NzI3OTc2NmMyOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAksBqy+TnD46iiE31K1yyeIlqzr SJajWjglEz14Uh5jFA8udK6oh8kfxQqKmilzGW5AAF53fM+k6GzfJb20Zqzyc5xI nN/FTXrCXeNSSU2ANjXAW8qgAGiOVR2G9AAp8sZXA3hE5dl25hqhve7EhgFhB9p/ H/xBVRUDz7yzwfKqeC9Rpnu410CIbqb78hxOvSaVXTSAVjrdAMLyGsHlYeGufVMZ 1irDxt/pSD33w3m09LBNKVJSeLO/PRga/uxhrYj9YSKGlcHHCvbtSeUTftmhMVrE Z6yFWPHuSpEs5CXEm28t6lk24B1gWE9PD5hrH5OWQL2HkH0VNXShEWOq0wIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFOdYW1zUd9kAdc22MQn1cnl2bCl2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzMGRl ODRiLTQwMGEtNGZkMS1hYjhhLWU3NjE2ZTI0NWI0OS8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMw ZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzEvRTc1ODVCNUNENDc3 RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQpMCcwDQQCAAEwBwMF BsKZngAwFgQCAAIwEAMHACABB/gAiQMFAyoJJQAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAMuQMA0GCSqGSIb3DQEBCwUAA4IBAQCNYm+r3Z7cJuGONvFLEjfEZnT8 zQ3DWb5rKreCj22Xs3MrkumDJd1D5jmLJBilUHcd+Ap0S2CeZJ+YgTZqkexxYQeA GfCnXcvS8/vHW6OKLmpZowFOTJCNs0RPt1zDg7E/cNJHb37EqzbdFdZWtLGPLUCq /sNNIQox20WbWqEddNxzAcEiRpSBUV8TXHz+7Lu+irQp8X8bhsnigeNMeoSZOrEH foNwgFq1Mk0dChPrK1J2/eGvusBxoAp/NASyI1NkdI5SsGkrQR1Zy3039VLYjqUd RqOIYTBpLc828Rb/ZNw9x9wOFoA3IupWjehCBcDpKb6vJjgoHJjdBQN6wm4/ -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:04 2026 by rpki-client