This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.cer (raw, json) Hash identifier: KKnvLxiKfjWMiCjBFC7Q9KAo9p9P6DfzOI6e5M8+uSo= Subject key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79114B7D7D50C57C1EB2E0E29FC5161C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.109.60.0/24 IP: 194.150.222.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4b:7d:7d:50:c5:7c:1e:b2:e0:e2:9f:c5:16:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5398c96f784781b2edc203c751c4e8798785fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:9e:6c:78:cc:99:8f:c8:3a:87:a4:72:e7: ca:9e:04:6c:a8:8a:f3:61:0b:6e:0f:2c:e9:05:ae: d4:c1:e4:64:f4:bf:e8:f4:4f:5e:94:2c:e0:61:de: 03:ed:84:45:03:89:fc:82:8e:29:1f:eb:9b:80:be: 61:dc:68:72:ed:9f:33:76:ad:85:e8:60:36:79:ea: be:e1:04:b7:4e:d0:0a:fd:3c:40:08:d1:d9:4e:22: c6:c2:ed:0f:96:88:90:92:67:3d:cc:19:14:21:79: ce:4e:61:26:65:2b:2e:62:10:dd:b9:a4:06:7e:16: be:13:22:57:61:35:71:3a:8e:16:2f:fe:db:af:d0: 6e:30:8c:1e:08:8f:2e:4b:6e:f8:48:ed:48:ee:1f: 55:0d:19:95:38:47:33:f6:29:49:30:b2:eb:14:af: c1:0b:df:1a:c4:5a:3b:8e:f8:f4:5f:a2:e1:59:43: 17:5a:56:f2:d3:80:5a:2d:77:aa:29:78:da:ea:ab: 65:b7:a7:97:bd:a2:33:f7:4e:5a:1a:18:41:3f:3f: e5:2f:d1:ad:fa:55:e4:f0:bf:84:a9:5d:ae:79:23: cc:e7:65:b6:02:0b:b7:a6:0f:a3:fd:0e:f1:1c:18: 5c:6c:b5:69:5b:88:de:83:6c:93:5d:49:a5:6f:5a: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.60.0/24 194.150.222.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:43:44:98:4e:f3:18:7b:15:df:a6:34:71:2d:02:95:b1:af: 37:ec:ef:c7:3b:1b:de:7e:20:96:af:05:d9:8a:2a:c5:bc:1f: 94:14:09:8d:b3:43:fd:09:f9:fa:61:c4:94:b2:ff:e3:f3:38: 47:34:6e:87:1c:da:87:91:33:7a:1c:6b:8a:db:3d:55:cf:a0: a3:69:fa:6f:81:56:e5:0a:63:de:9b:b7:59:2b:1b:35:78:5a: c3:60:d7:01:34:f0:3c:02:5c:dd:0d:b1:43:bc:4b:e2:0a:55: f1:80:86:10:c6:8a:5a:67:65:10:d8:c6:0d:25:76:99:10:f4: de:08:5f:45:e5:1d:a6:8c:78:57:11:5d:f9:f1:ad:21:88:f8: d5:8f:0b:3a:e3:dc:67:86:8e:d7:4b:f3:c1:da:7c:ed:86:91: e1:25:7d:21:40:56:30:a3:e5:60:8f:14:9f:02:9a:7f:59:cf: 44:f7:05:c7:5b:96:bd:2c:b8:05:6c:bf:7b:2d:36:be:23:5c: 47:1c:b0:eb:a7:54:e2:53:fb:85:83:30:a1:2d:a2:ab:59:d8: 12:7c:c8:ff:09:79:c5:b5:39:d5:a0:44:df:24:eb:2a:c9:94: d5:33:61:db:47:fe:7b:05:90:1f:1b:82:2b:71:28:19:2a:c5: 17:2d:f5:20 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt5EUt9fVDFfB6y4OKfxRYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTM5OGM5NmY3ODQ3ODFiMmVkYzIwM2M3NTFjNGU4Nzk4Nzg1ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszKebHjMmY/IOoekcufKngRsqIrz YQtuDyzpBa7UweRk9L/o9E9elCzgYd4D7YRFA4n8go4pH+ubgL5h3Ghy7Z8zdq2F 6GA2eeq+4QS3TtAK/TxACNHZTiLGwu0PloiQkmc9zBkUIXnOTmEmZSsuYhDduaQG fha+EyJXYTVxOo4WL/7br9BuMIweCI8uS274SO1I7h9VDRmVOEcz9ilJMLLrFK/B C98axFo7jvj0X6LhWUMXWlby04BaLXeqKXja6qtlt6eXvaIz905aGhhBPz/lL9Gt +lXk8L+EqV2ueSPM52W2Agu3pg+j/Q7xHBhcbLVpW4jeg2yTXUmlb1qp8QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFOU5jJb3hHgbLtwgPHUcToeYeF+hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzlmNTRi NS1hMzlhLTRlNjAtOGIxYy1kMWU0NjA1MTg0ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvOWY1NGI1 LWEzOWEtNGU2MC04YjFjLWQxZTQ2MDUxODQ4My8xLzVUbU1sdmVFZUJzdTNDQThk UnhPaDVoNFg2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwW08AwQBwpbeMA0GCSqGSIb3DQEBCwUAA4IB AQAKQ0SYTvMYexXfpjRxLQKVsa837O/HOxvefiCWrwXZiirFvB+UFAmNs0P9Cfn6 YcSUsv/j8zhHNG6HHNqHkTN6HGuK2z1Vz6CjafpvgVblCmPem7dZKxs1eFrDYNcB NPA8AlzdDbFDvEviClXxgIYQxopaZ2UQ2MYNJXaZEPTeCF9F5R2mjHhXEV358a0h iPjVjws649xnho7XS/PB2nzthpHhJX0hQFYwo+VgjxSfApp/Wc9E9wXHW5a9LLgF bL97LTa+I1xHHLDrp1TiU/uFgzChLaKrWdgSfMj/CXnFtTnVoETfJOsqyZTVM2Hb R/57BZAfG4IrcSgZKsUXLfUg -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:42 2026 by rpki-client