This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer (raw, json) Hash identifier: NGqhmFLHWD7BstI0360EQyArSC2nHn368w6wSm9EBAM= Subject key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35580FBBBE50BB42AB33F626165581 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.17.68.0/24 IP: 193.30.161.0/24 IP: 193.200.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:58:0f:bb:be:50:bb:42:ab:33:f6:26:16:55:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dc:05:9b:ac:0f:1f:98:f4:56:bc:63:51:53: bb:05:76:c6:b9:33:9a:f4:0c:69:d7:4f:2b:db:d8: a7:71:d7:27:fe:fd:02:32:90:1c:fc:52:f7:d9:29: 2b:e8:e1:e4:4f:b0:06:03:c0:4e:11:a9:9e:0a:f1: 1b:3e:99:cc:e5:79:13:f4:4c:97:86:c2:fc:ea:48: 53:b5:03:2e:f1:0a:86:e9:65:5f:92:eb:e7:e9:17: b7:f1:0a:72:d0:fe:fc:aa:af:09:73:c6:83:1a:d9: 2d:74:23:ad:94:18:db:72:33:d7:79:3c:60:fc:7a: fe:1e:38:71:3c:b0:be:91:91:3b:82:26:14:3b:59: fd:11:e4:75:9c:24:72:da:44:d7:a7:af:9b:6b:90: 48:4c:4b:55:3f:15:28:79:bd:f9:ff:bb:63:d3:d7: 8f:92:3f:8b:3f:74:91:ed:aa:04:b8:80:4a:28:8d: b0:aa:93:99:96:18:28:01:1d:9b:ba:f0:ee:eb:60: 56:41:7f:85:c5:2c:ae:db:3f:89:4e:09:05:b6:f6: 3b:8f:35:4c:54:09:d9:b6:49:4c:ac:c9:14:89:9c: c4:9e:84:63:f1:ba:66:0e:ca:80:a4:7b:c2:99:c8: 9f:9a:ee:38:36:97:e3:1c:dc:7a:f5:79:aa:4e:9a: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.68.0/24 193.30.161.0/24 193.200.30.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:e2:76:1b:5b:d2:8a:01:db:87:ee:f3:67:e7:1a:f5:90:27: 0d:e8:39:60:57:6f:d6:02:c8:da:54:39:5a:30:40:ed:1e:7c: e3:1b:2c:ae:06:5a:1b:0c:70:2d:17:96:f2:c3:a6:9a:2a:56: 39:97:43:18:49:ec:db:1d:62:ff:ce:4a:d5:22:6f:54:82:99: d0:82:11:27:a8:43:a9:be:4d:e7:b7:52:d2:74:c7:85:75:88: 48:55:dc:c8:5a:f1:b2:a7:18:1a:57:28:6c:4f:93:77:41:a9: 82:68:33:9b:b7:ee:a6:fa:5c:fc:08:ea:a0:95:3d:87:31:9e: 29:a7:00:c1:ff:cd:95:85:00:cc:ff:b4:00:e1:60:11:ee:65: 6c:22:77:aa:10:a7:ee:19:50:29:2f:f5:33:fc:72:05:19:07: 19:a9:63:9f:3f:b7:43:43:c7:79:b4:37:7b:78:a3:40:98:8f: bc:bd:00:97:d9:06:47:f9:38:5c:dd:d6:11:47:d5:45:ba:72: 2c:f9:84:7f:3c:dd:a0:0d:53:20:3b:ea:c0:de:b0:53:64:95: 95:60:ae:84:89:a3:84:df:98:82:ee:4e:20:6e:62:69:93:7a: 40:96:12:14:da:56:ab:66:4b:16:b6:cc:8a:2e:16:47:f7:d3: 3f:59:95:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt7NVgPu75Qu0KrM/YmFlWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGE3MTRmZmM1OThiMTU2NDdiYmFmZTJjNjQ2MGE4N2VhZmJjZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dwFm6wPH5j0VrxjUVO7BXbGuTOa 9Axp108r29incdcn/v0CMpAc/FL32Skr6OHkT7AGA8BOEameCvEbPpnM5XkT9EyX hsL86khTtQMu8QqG6WVfkuvn6Re38Qpy0P78qq8Jc8aDGtktdCOtlBjbcjPXeTxg /Hr+HjhxPLC+kZE7giYUO1n9EeR1nCRy2kTXp6+ba5BITEtVPxUoeb35/7tj09eP kj+LP3SR7aoEuIBKKI2wqpOZlhgoAR2buvDu62BWQX+FxSyu2z+JTgkFtvY7jzVM VAnZtklMrMkUiZzEnoRj8bpmDsqApHvCmcifmu44NpfjHNx69XmqTpqV5wIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFOSnFP/FmLFWR7uv4sZGCofq+8+XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2Q5NmRh Ni0xMmIyLTQ0NmUtOGQ5OS03Y2IzNDVlODU0MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZDk2ZGE2 LTEyYjItNDQ2ZS04ZDk5LTdjYjM0NWU4NTQxYS8xLzVLY1VfOFdZc1ZaSHU2X2l4 a1lLaC1yN3o1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwRFEAwQAwR6hAwQAwcgeMA0GCSqGSIb3DQEB CwUAA4IBAQBe4nYbW9KKAduH7vNn5xr1kCcN6DlgV2/WAsjaVDlaMEDtHnzjGyyu BlobDHAtF5byw6aaKlY5l0MYSezbHWL/zkrVIm9UgpnQghEnqEOpvk3nt1LSdMeF dYhIVdzIWvGypxgaVyhsT5N3QamCaDObt+6m+lz8COqglT2HMZ4ppwDB/82VhQDM /7QA4WAR7mVsIneqEKfuGVApL/Uz/HIFGQcZqWOfP7dDQ8d5tDd7eKNAmI+8vQCX 2QZH+Thc3dYRR9VFunIs+YR/PN2gDVMgO+rA3rBTZJWVYK6EiaOE35iC7k4gbmJp k3pAlhIU2larZksWtsyKLhZH99M/WZV4 -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:26 2026 by rpki-client