This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer (raw, json) Hash identifier: 8s4qZpklPEdSxZZUxfzi8O5LycRwAdD8DgADuMq+9gE= Subject key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED514784498EF85FB8471C61396ADD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48728 AS: 211559 IP: 31.11.48.0/21 IP: 37.186.32.0/19 IP: 80.76.160.0/20 IP: 103.14.208.0/22 IP: 103.17.0.0/22 IP: 103.23.124.0/22 IP: 103.199.88.0/22 IP: 103.225.72.0/22 IP: 185.247.88.0/22 IP: 212.70.96.0/19 IP: 2a04:7f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:51:47:84:49:8e:f8:5f:b8:47:1c:61:39:6a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4a9308742e7eb66506219d829d86185899a1e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:3c:9e:93:00:a5:6a:57:0c:30:0c:14:64: 0b:06:20:81:57:1b:77:64:4b:8d:fe:d2:31:d6:92: f3:da:02:31:ce:86:05:31:67:f2:90:ac:5e:4c:7a: 2d:f8:f6:68:76:78:04:aa:63:2d:74:2c:a0:a3:84: c8:23:e4:06:36:78:40:a9:72:dc:d7:86:c9:e9:51: 5a:f1:14:d8:6e:0f:e0:11:eb:a4:fd:b0:d3:f7:bd: ac:56:06:b8:19:c5:55:c3:e8:4f:66:4b:b1:5b:f2: 8a:f8:a9:86:8a:9d:c3:50:fc:01:5e:f2:bd:d5:f5: d8:38:a5:40:64:fb:3d:b5:21:0f:57:89:ce:6b:67: e1:99:75:c0:f8:02:aa:95:3d:ff:f6:8c:70:8d:f1: ff:f5:43:e8:4a:de:b9:fe:db:c6:1d:bf:93:b7:f5: 54:90:6f:8e:e3:95:60:01:39:65:9f:f5:b6:35:a0: 0c:4c:51:ba:c6:cb:5f:ec:28:94:b5:32:98:92:61: 56:47:67:a9:ee:a0:80:2c:fa:96:8e:dc:ab:64:8c: 15:3f:9b:e8:15:dc:56:3d:11:58:5f:86:10:30:c1: 06:aa:6f:7c:0b:41:9c:d9:b4:1c:0f:10:9e:b1:f4: 79:b4:54:06:bf:08:3e:b6:b8:8a:91:92:18:8e:1d: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.11.48.0/21 37.186.32.0/19 80.76.160.0/20 103.14.208.0/22 103.17.0.0/22 103.23.124.0/22 103.199.88.0/22 103.225.72.0/22 185.247.88.0/22 212.70.96.0/19 IPv6: 2a04:7f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48728 211559 Signature Algorithm: sha256WithRSAEncryption 2c:53:f8:7c:73:ee:a6:16:64:06:1e:b0:ea:e7:00:d4:ac:5e: a4:59:c9:aa:15:a6:26:bc:0f:fc:d4:22:58:db:2e:63:1f:f4: 68:23:72:93:e4:92:1d:e7:f0:a5:ea:db:73:b9:0a:1e:3c:7c: 7f:9f:d9:bd:06:b6:24:2d:d5:92:be:31:85:ce:a4:81:07:50: e2:1a:9e:d9:5e:82:64:6b:51:c6:08:5d:c3:9c:8a:cb:0b:37: 3d:1a:ec:f4:8f:87:cc:ae:2a:38:e4:bd:d8:4c:bd:6e:67:8a: aa:3b:ad:c9:2c:dc:a8:a1:79:5f:3a:e3:d6:62:2e:93:98:d0: 51:1e:eb:f1:a3:7e:49:ea:50:e6:3a:19:a6:45:e7:f0:ef:48: 97:20:9f:67:f0:77:dc:91:d8:cc:6d:67:dc:9b:0d:01:6a:25: 4c:b9:50:92:c2:a7:39:7f:cc:8b:89:13:d8:8b:00:96:22:aa: be:3a:6d:27:c9:8e:2d:31:b1:5d:8b:a3:50:56:33:0c:52:36: eb:b6:c0:f1:55:34:c1:d7:02:da:3e:44:52:14:54:32:72:81: ff:10:57:01:6c:ec:48:99:66:b3:f4:55:fc:dc:08:21:84:d3: 52:24:4d:0b:0f:4a:29:4f:b8:3f:d2:9c:84:80:4f:ec:81:15: bd:6b:1f:db -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt57VFHhEmO+F+4RxxhOWrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGE5MzA4NzQyZTdlYjY2NTA2MjE5ZDgyOWQ4NjE4NTg5OWExZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rc8npMApWpXDDAMFGQLBiCBVxt3 ZEuN/tIx1pLz2gIxzoYFMWfykKxeTHot+PZodngEqmMtdCygo4TII+QGNnhAqXLc 14bJ6VFa8RTYbg/gEeuk/bDT972sVga4GcVVw+hPZkuxW/KK+KmGip3DUPwBXvK9 1fXYOKVAZPs9tSEPV4nOa2fhmXXA+AKqlT3/9oxwjfH/9UPoSt65/tvGHb+Tt/VU kG+O45VgATlln/W2NaAMTFG6xstf7CiUtTKYkmFWR2ep7qCALPqWjtyrZIwVP5vo FdxWPRFYX4YQMMEGqm98C0Gc2bQcDxCesfR5tFQGvwg+triKkZIYjh1p2wIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFOSpMIdC5+tmUGIZ2CnYYYWJmh40MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzFjOWRi Yi0wNTJjLTRlZWEtYWRlNi1lYzViODhkMDEzOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMWM5ZGJi LTA1MmMtNGVlYS1hZGU2LWVjNWI4OGQwMTM4YS8xLzVLa3doMExuNjJaUVlobllL ZGhoaFltYUhqUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQDHwswAwQFJbogAwQEUEygAwQCZw7QAwQCZxEA AwQCZxd8AwQCZ8dYAwQCZ+FIAwQCufdYAwQF1EZgMA0EAgACMAcDBQMqBH+AMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC+WAIDAzpnMA0GCSqGSIb3DQEBCwUAA4IB AQAsU/h8c+6mFmQGHrDq5wDUrF6kWcmqFaYmvA/81CJY2y5jH/RoI3KT5JId5/Cl 6ttzuQoePHx/n9m9BrYkLdWSvjGFzqSBB1DiGp7ZXoJka1HGCF3DnIrLCzc9Guz0 j4fMrio45L3YTL1uZ4qqO63JLNyooXlfOuPWYi6TmNBRHuvxo35J6lDmOhmmRefw 70iXIJ9n8HfckdjMbWfcmw0BaiVMuVCSwqc5f8yLiRPYiwCWIqq+Om0nyY4tMbFd i6NQVjMMUjbrtsDxVTTB1wLaPkRSFFQycoH/EFcBbOxImWaz9FX83AghhNNSJE0L D0opT7g/0pyEgE/sgRW9ax/b -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:56 2026 by rpki-client