This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.cer (raw, json) Hash identifier: COjXYkSZBv9OlnDi8vgTsN/BL0WycxVY1xyLMGpHa8Y= Subject key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3639E849A0E44240A5B453109634C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33823 IP: 193.25.110.0/23 IP: 195.12.52.0/22 IP: 195.28.184.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:39:e8:49:a0:e4:42:40:a5:b4:53:10:96:34:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:58:fb:4c:0f:72:32:5a:82:91:34:76:cb: 4e:36:2e:68:06:7a:60:61:fd:04:c1:a8:15:0a:c6: bd:cd:6c:cb:7c:5a:d7:a4:15:2d:77:ae:d8:6d:cb: 81:7f:e3:ff:cb:78:55:fc:84:c0:ef:f2:f2:6e:12: 04:9f:7d:62:34:a4:6f:82:28:82:d3:5d:c9:15:3d: d6:0c:e9:aa:0d:1a:60:09:f2:2d:d7:2a:22:9d:22: 88:5b:54:ad:ff:8f:1c:4d:e3:3b:ae:e0:b3:62:5b: ff:89:fc:0c:24:ab:b9:bb:70:60:f7:de:f8:1d:c4: a6:29:25:4f:d6:a9:60:94:f7:42:0d:a8:22:ff:6e: 1c:77:0d:13:b6:99:ad:a9:2c:7a:8c:fc:42:5e:94: c8:ea:2d:e5:e6:2e:85:f3:a7:78:bf:35:5e:68:b0: 6c:48:25:2a:80:bc:81:67:d9:0c:38:e6:4d:54:dc: e9:09:cd:cf:47:b2:76:c5:47:15:da:6e:dc:87:6d: 5e:89:33:7c:8e:c0:6e:26:c7:37:08:21:fa:21:3d: 43:d7:b5:80:8c:f8:34:30:ee:26:ce:70:9c:20:fa: 31:66:f5:d5:c0:25:16:47:1d:42:13:ad:5f:3a:51: aa:b3:e0:c3:28:47:ee:2b:d7:82:d2:e5:d0:f6:b5: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.110.0/23 195.12.52.0/22 195.28.184.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33823 Signature Algorithm: sha256WithRSAEncryption 93:a0:78:cb:8c:32:af:6d:a0:a0:4d:ae:c7:66:69:d8:a5:f5: d2:65:ca:19:96:f8:0c:e6:d6:72:62:0a:56:93:3d:d3:dc:0b: 95:72:d8:51:5b:c0:30:15:9b:38:e7:36:fe:a5:bc:f3:b4:80: bd:f2:8a:2d:78:40:cf:ce:72:75:37:2d:a9:6a:6d:13:fb:fb: 81:d8:c3:a9:0b:06:a7:fb:64:9d:85:63:30:32:3d:e9:00:cb: 51:a7:1f:d8:ed:9a:2a:b5:3b:3f:4f:0b:a3:e5:d8:a7:05:21: 45:55:0b:65:6a:ee:9d:17:d1:d8:e6:53:8f:66:9a:77:cd:9b: 11:f3:ef:2f:1a:60:55:ec:99:0b:b2:36:e7:28:49:e1:7c:19: 01:33:83:93:0e:6b:0d:79:6d:cb:4c:82:ee:80:f0:fa:08:f2: 5b:44:44:14:dc:fa:e1:99:5a:60:e4:01:cc:3a:89:e5:fe:a4: 15:cb:67:78:24:b6:2a:f5:1f:8d:3b:d4:5a:3c:2d:8d:79:58: 41:75:ab:fc:c5:e4:1c:9e:8f:52:60:1b:00:3e:dd:de:08:b0: 87:ce:e6:b7:9f:46:20:8c:e6:02:15:c6:c9:17:06:0e:8f:74: db:b5:ff:60:0f:3d:8b:1d:38:3c:1e:74:ad:0f:70:29:07:ac: a8:9e:14:24 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt7NjnoSaDkQkCltFMQljTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGI0YzUzYWY2NWYwYjgzOTZiOTViNGQwN2Q0ZWM0ZTdiZTI3N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTRY+0wPcjJagpE0dstONi5oBnpg Yf0EwagVCsa9zWzLfFrXpBUtd67YbcuBf+P/y3hV/ITA7/LybhIEn31iNKRvgiiC 013JFT3WDOmqDRpgCfIt1yoinSKIW1St/48cTeM7ruCzYlv/ifwMJKu5u3Bg9974 HcSmKSVP1qlglPdCDagi/24cdw0TtpmtqSx6jPxCXpTI6i3l5i6F86d4vzVeaLBs SCUqgLyBZ9kMOOZNVNzpCc3PR7J2xUcV2m7ch21eiTN8jsBuJsc3CCH6IT1D17WA jPg0MO4mznCcIPoxZvXVwCUWRx1CE61fOlGqs+DDKEfuK9eC0uXQ9rWO2wIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFOS0xTr2XwuDlrlbTQfU7E574nflMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzQ2YWFi Zi1kYWQwLTRkNzYtYTViNS04OGRiMDEyNWE2YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDZhYWJm LWRhZDAtNGQ3Ni1hNWI1LTg4ZGIwMTI1YTZiOC8xLzVMVEZPdlpmQzRPV3VWdE5C OVRzVG52aWQtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBwRluAwQCwww0AwQBwxy4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCEHzANBgkqhkiG9w0BAQsFAAOCAQEAk6B4y4wyr22goE2u x2Zp2KX10mXKGZb4DObWcmIKVpM909wLlXLYUVvAMBWbOOc2/qW887SAvfKKLXhA z85ydTctqWptE/v7gdjDqQsGp/tknYVjMDI96QDLUacf2O2aKrU7P08Lo+XYpwUh RVULZWrunRfR2OZTj2aad82bEfPvLxpgVeyZC7I25yhJ4XwZATODkw5rDXlty0yC 7oDw+gjyW0REFNz64ZlaYOQBzDqJ5f6kFctneCS2KvUfjTvUWjwtjXlYQXWr/MXk HJ6PUmAbAD7d3giwh87mt59GIIzmAhXGyRcGDo9027X/YA89ix04PB50rQ9wKQes qJ4UJA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:57 2026 by rpki-client