This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer File: 52ASbc54vBbmbC5udjWEisRoRq8.cer (raw, json) Hash identifier: 2SQE59OlbsxmdOyyjmsYsJd/XNtf+0zbpZgpvqlVDHc= Subject key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECBE85F21240B708426C221B47EB11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57037 IP: 146.247.96.0/19 IP: 2a01:b180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:be:85:f2:12:40:b7:08:42:6c:22:1b:47:eb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e760126dce78bc16e66c2e6e7635848ac46846af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:4f:96:fc:03:3d:7a:86:8d:7c:d4:a0:c9: a8:a2:0e:ad:c5:f0:07:6f:ee:e3:73:79:12:52:4a: be:33:78:a6:a2:b9:85:3d:3e:77:0a:94:d8:02:02: cf:26:4a:01:7e:ad:75:61:0a:a2:73:89:14:e6:b6: 78:11:a9:6a:85:4e:84:90:11:b3:d8:4a:f6:e3:a6: 50:9d:d1:39:fa:dc:ac:24:32:2f:4f:e7:14:ec:2e: 46:e2:4b:fe:18:70:f2:59:21:7b:ac:5c:f4:84:65: 2b:90:73:f4:58:cf:cb:be:2d:ac:23:53:46:1f:fb: fb:1f:c1:d6:76:d4:f2:c3:c4:d0:e2:d9:ba:10:b5: b0:dc:ab:17:1b:c7:f3:36:70:32:54:45:a0:88:4b: 64:fb:84:0c:3d:b2:c3:32:c3:e2:a1:68:6a:e1:c4: b4:30:4c:9d:bf:f0:fd:6b:8b:76:cb:bf:ad:3b:8d: 50:ba:49:28:35:69:07:60:a5:3f:19:f5:07:5b:7e: 7c:61:a5:04:c5:09:14:95:42:a7:66:79:2d:dd:ca: a9:36:64:48:00:8f:73:09:5a:b7:4c:f4:22:9f:2a: ba:4d:d3:17:e5:4b:f1:14:a4:94:18:32:ce:d4:3f: c4:0e:28:54:7f:e8:63:a4:26:9c:45:e2:c0:dc:52: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.96.0/19 IPv6: 2a01:b180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57037 Signature Algorithm: sha256WithRSAEncryption 59:9d:11:e6:68:a9:e2:00:fb:7d:7c:95:b2:6f:15:30:a1:16: 53:23:4e:1b:55:31:4a:52:3e:8f:fa:dd:ee:9b:66:34:08:27: 89:fc:ba:b1:89:02:1e:0e:96:7b:1b:70:c8:b9:e8:88:63:03: f8:2c:99:1e:fb:b1:10:2b:77:a8:19:4d:6e:4b:14:ba:b9:88: f2:7c:a5:70:35:fb:35:34:c2:01:c4:55:0e:ad:57:34:e6:f6: bf:e3:3f:8a:9b:92:33:a7:7b:d6:62:e8:bb:88:6a:2b:fd:a9: 0d:50:19:04:ea:0a:f1:8a:e0:6a:33:84:5d:38:74:9b:74:5f: ca:50:37:37:cc:12:55:5a:5e:84:0b:8a:2d:35:75:82:40:d6: c3:60:9d:57:cb:69:5c:85:31:f3:44:7b:02:0e:8f:2d:1a:aa: a0:81:2e:ca:6c:54:df:6e:2f:48:dd:b9:46:8b:b2:21:5a:06: 82:21:f0:e3:4c:8d:25:98:f0:41:81:5d:a1:d3:63:a2:92:bc: 7a:62:49:e0:d5:e9:02:44:96:23:a8:b5:7a:a4:cf:d9:ce:98: 0d:6a:90:42:75:33:84:f8:c7:e5:47:90:3f:e6:96:5b:c5:97: 9d:c0:ca:65:28:5a:c9:cc:3f:7d:32:b9:55:21:c3:b0:bc:dc: 76:a9:69:a2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87L6F8hJAtwhCbCIbR+sRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzYwMTI2ZGNlNzhiYzE2ZTY2YzJlNmU3NjM1ODQ4YWM0Njg0NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1xPlvwDPXqGjXzUoMmoog6txfAH b+7jc3kSUkq+M3imormFPT53CpTYAgLPJkoBfq11YQqic4kU5rZ4EalqhU6EkBGz 2Er246ZQndE5+tysJDIvT+cU7C5G4kv+GHDyWSF7rFz0hGUrkHP0WM/Lvi2sI1NG H/v7H8HWdtTyw8TQ4tm6ELWw3KsXG8fzNnAyVEWgiEtk+4QMPbLDMsPioWhq4cS0 MEydv/D9a4t2y7+tO41QukkoNWkHYKU/GfUHW358YaUExQkUlUKnZnkt3cqpNmRI AI9zCVq3TPQinyq6TdMX5UvxFKSUGDLO1D/EDihUf+hjpCacReLA3FL9KQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOdgEm3OeLwW5mwubnY1hIrEaEavMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzQ4OGY2 MS0yZjAwLTQ2MzktOTdiOC1kMjRmNTYyZGVkZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNDg4ZjYx LTJmMDAtNDYzOS05N2I4LWQyNGY1NjJkZWRkMi8xLzUyQVNiYzU0dkJibWJDNXVk aldFaXNSb1JxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFkvdgMA0EAgACMAcDBQMqAbGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDezTANBgkqhkiG9w0BAQsFAAOCAQEAWZ0R5mip4gD7 fXyVsm8VMKEWUyNOG1UxSlI+j/rd7ptmNAgnify6sYkCHg6WextwyLnoiGMD+CyZ HvuxECt3qBlNbksUurmI8nylcDX7NTTCAcRVDq1XNOb2v+M/ipuSM6d71mLou4hq K/2pDVAZBOoK8YrgajOEXTh0m3RfylA3N8wSVVpehAuKLTV1gkDWw2CdV8tpXIUx 80R7Ag6PLRqqoIEuymxU324vSN25RouyIVoGgiHw40yNJZjwQYFdodNjopK8emJJ 4NXpAkSWI6i1eqTP2c6YDWqQQnUzhPjH5UeQP+aWW8WXncDKZShaycw/fTK5VSHD sLzcdqlpog== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:08 2026 by rpki-client