This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer File: 5Neqo9JcL5677HTIMMwM3pMYyPg.cer (raw, json) Hash identifier: qZAwUGZbM2wwk52RgGFsy8xDUtnSieTKsVR0OKv+CW0= Subject key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F844948C9BEC3587D45C6FE15E02EFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 94.231.215.0/24 IP: 2a01:f240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:49:48:c9:be:c3:58:7d:45:c6:fe:15:e0:2e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:1d:7b:69:3b:55:c5:72:0e:91:1f:43:49: 52:a4:37:3b:36:da:92:a7:55:03:ba:50:84:12:33: fa:5a:ee:70:3d:1b:d8:72:c6:74:4b:66:22:65:54: 43:9c:a0:fd:dc:b2:ed:ec:49:69:c9:2f:02:58:a8: d5:0f:12:7f:26:07:fa:a2:b7:08:e2:f3:2f:08:c1: dd:93:5f:bc:d1:ac:f8:be:3f:8b:df:be:4b:84:75: 15:77:0e:21:39:d9:6e:a6:1b:19:97:a1:ef:91:fa: 73:47:87:fc:06:fa:8a:dd:e7:be:86:e8:65:c7:71: d2:ba:06:a1:2a:c7:4c:97:3a:0f:a0:38:f7:5f:f8: d0:9c:b1:b2:c5:f7:74:e4:40:4f:7d:e1:61:57:ce: 0c:ea:1c:f3:93:e4:49:88:b2:0c:16:65:8f:a6:56: 79:75:71:dd:08:55:d9:cc:36:5b:94:2a:0c:44:68: f4:5b:96:e8:ab:f4:21:5c:8c:43:25:c5:cc:dd:c2: 11:34:99:75:68:21:01:ee:02:11:bf:57:89:5f:9e: e9:19:ae:8a:56:3c:50:98:2c:95:71:62:8c:87:f1: 91:3c:3f:91:4e:62:af:ae:e1:33:99:fd:07:91:d1: 36:d4:ad:62:30:18:7c:bd:83:c0:a3:d5:ee:58:f8: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.215.0/24 IPv6: 2a01:f240::/29 Signature Algorithm: sha256WithRSAEncryption a5:3a:48:28:1c:b2:e9:a2:64:69:a4:d0:7a:53:bb:77:11:9b: 7d:84:f4:c5:6e:4f:0d:4c:cd:91:c2:91:be:91:6a:fe:c7:fd: 19:bd:17:a0:96:f5:8e:65:c5:dd:d3:1e:46:f8:14:54:78:a5: b0:34:5b:91:e7:ee:24:ac:aa:fa:e9:af:84:2e:06:31:03:a8: 14:e5:55:92:54:88:39:41:d0:ae:6b:12:dd:ff:07:83:be:c1: eb:9e:0d:46:f3:75:76:30:54:73:30:e5:e7:bd:a7:79:69:12: d1:70:3d:82:07:3a:b6:1d:a1:43:dd:14:45:1f:39:bb:06:b0: 8b:d7:98:f8:24:b2:45:cb:d0:52:66:04:62:63:24:4a:a9:98: 79:bf:51:94:88:e8:6d:03:4b:c3:21:0c:f0:64:f5:64:24:a7: 7c:a5:c8:f5:bd:10:f0:af:1a:84:cf:88:c9:13:84:17:ea:97: d2:fc:fd:c2:c7:95:7e:3f:01:91:d0:98:3b:e4:a2:2c:02:03: 91:74:ab:35:95:88:ed:52:34:b2:93:2c:8d:f7:95:f4:24:a2: e2:b8:4f:9c:e6:82:cd:bd:cb:df:99:c5:60:a3:f1:bf:5a:47: 26:43:27:3e:ef:d8:f4:d8:6e:9e:d1:d6:a9:b8:2b:e0:fb:91: 53:49:11:65 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/hElIyb7DWH1Fxv4V4C7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQ3YWFhM2QyNWMyZjllYmJlYzc0YzgzMGNjMGNkZTkzMThjOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8wde2k7VcVyDpEfQ0lSpDc7NtqS p1UDulCEEjP6Wu5wPRvYcsZ0S2YiZVRDnKD93LLt7ElpyS8CWKjVDxJ/Jgf6orcI 4vMvCMHdk1+80az4vj+L375LhHUVdw4hOdluphsZl6HvkfpzR4f8BvqK3ee+huhl x3HSugahKsdMlzoPoDj3X/jQnLGyxfd05EBPfeFhV84M6hzzk+RJiLIMFmWPplZ5 dXHdCFXZzDZblCoMRGj0W5boq/QhXIxDJcXM3cIRNJl1aCEB7gIRv1eJX57pGa6K VjxQmCyVcWKMh/GRPD+RTmKvruEzmf0HkdE21K1iMBh8vYPAo9XuWPhYYwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOTXqqPSXC+eu+x0yDDMDN6TGMj4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzhiNDE0 Ny1lNmUwLTRkODAtYTkzZi1lZjYzYjgxNmRkMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOGI0MTQ3 LWU2ZTAtNGQ4MC1hOTNmLWVmNjNiODE2ZGQzNS8xLzVOZXFvOUpjTDU2NzdIVElN TXdNM3BNWXlQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXufXMA0EAgACMAcDBQMqAfJAMA0GCSqGSIb3 DQEBCwUAA4IBAQClOkgoHLLpomRppNB6U7t3EZt9hPTFbk8NTM2RwpG+kWr+x/0Z vReglvWOZcXd0x5G+BRUeKWwNFuR5+4krKr66a+ELgYxA6gU5VWSVIg5QdCuaxLd /weDvsHrng1G83V2MFRzMOXnvad5aRLRcD2CBzq2HaFD3RRFHzm7BrCL15j4JLJF y9BSZgRiYyRKqZh5v1GUiOhtA0vDIQzwZPVkJKd8pcj1vRDwrxqEz4jJE4QX6pfS /P3Cx5V+PwGR0Jg75KIsAgORdKs1lYjtUjSykyyN95X0JKLiuE+c5oLNvcvfmcVg o/G/WkcmQyc+79j02G6e0dapuCvg+5FTSRFl -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:20 2026 by rpki-client