This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer File: 5WzVePQvjeBnI2dnxs_CusvBbgU.cer (raw, json) Hash identifier: ycgNXPlmd5QuM43dxQBF+7rg5gmgepb3AKxivbGQalU= Subject key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3818DFD73F7183A0449915D91820BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61418 IP: 195.206.236.0/24 IP: 2a10:2cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:18:df:d7:3f:71:83:a0:44:99:15:d9:18:20:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:f4:ae:79:f5:d5:ed:8b:d0:39:ef:44:99: 39:88:0b:53:28:12:3e:de:7b:2f:80:18:b2:9e:4c: 15:fc:45:da:c3:45:6a:3f:01:d8:c2:e8:d2:1a:e5: ae:c5:10:b3:66:0e:df:9b:43:01:a1:fa:24:01:78: 9d:c1:4e:28:96:7c:ab:1c:29:5d:af:0a:d2:1a:47: 9b:ea:79:3d:fe:7f:85:8c:41:96:7b:7e:a9:ec:a1: 2b:69:06:90:b5:bb:a9:e0:41:b1:a7:38:05:97:62: e0:84:a3:ce:79:03:a4:78:97:96:30:53:cb:39:2c: c2:fe:22:e9:e1:12:04:9e:72:05:01:71:31:12:f1: db:59:6a:a5:01:c6:ba:ec:3a:ad:31:28:40:42:07: 7d:c1:99:15:9a:3b:60:d7:9a:f7:a2:29:4c:03:ff: a5:67:2f:ed:ba:4f:66:30:53:9a:2d:f1:e2:70:02: 09:36:05:02:fd:bc:ff:1b:94:3e:cf:bc:6e:39:c0: 0c:e7:96:16:08:a2:dd:cd:88:22:02:d8:91:c8:33: 54:be:ea:b8:98:0d:ed:2d:40:4f:dd:41:e6:8d:20: 1b:b8:68:71:6f:10:3b:8f:a2:02:33:6c:26:6b:30: 7a:92:36:90:b8:14:c5:76:6f:cb:e1:e9:66:93:e4: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.206.236.0/24 IPv6: 2a10:2cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61418 Signature Algorithm: sha256WithRSAEncryption 32:c7:84:89:8f:30:a8:b5:4c:0a:77:1a:56:20:8c:12:00:62: 51:fe:db:5b:5c:54:17:4f:e2:41:62:98:5e:b2:cd:f1:8d:e8: 69:bf:f4:69:4b:da:1c:b1:42:df:3b:97:03:1d:93:eb:00:47: a6:cc:06:6f:8e:8a:a5:e0:03:90:38:52:c9:39:8c:af:36:54: e4:08:c4:1a:c7:a8:0b:66:62:32:5a:fc:d9:b9:48:25:16:4b: dd:4c:31:3b:74:a6:1c:c6:1b:ec:9b:10:4b:84:8d:e8:00:39: f4:36:04:e5:f3:71:54:a3:2b:bc:55:47:9d:96:6b:f0:f0:7d: ae:6b:09:b8:8c:e1:d2:3c:4c:d9:0f:fd:c9:80:27:dc:6e:7c: 5e:52:e9:13:26:b9:36:de:69:29:c4:18:5a:76:f0:95:87:ff: d7:9a:da:dc:53:17:73:74:ea:f0:8b:94:72:bb:84:05:b0:2a: fd:a1:f2:db:68:b0:e4:17:ed:cd:9e:e5:d5:74:66:58:b4:a6: 41:06:0e:c0:bc:e8:7f:85:15:69:f4:fd:88:4f:f1:69:8b:9a: 96:f7:ca:28:df:99:b9:5c:be:34:db:69:4b:cb:8f:2b:99:62: 92:d9:9b:de:55:19:a7:3f:34:6e:a3:da:8a:04:d5:b8:1d:da: d5:08:72:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OBjf1z9xg6BEmRXZGCC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTZjZDU3OGY0MmY4ZGUwNjcyMzY3NjdjNmNmYzJiYWNiYzE2ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7r0rnn11e2L0DnvRJk5iAtTKBI+ 3nsvgBiynkwV/EXaw0VqPwHYwujSGuWuxRCzZg7fm0MBofokAXidwU4olnyrHCld rwrSGkeb6nk9/n+FjEGWe36p7KEraQaQtbup4EGxpzgFl2LghKPOeQOkeJeWMFPL OSzC/iLp4RIEnnIFAXExEvHbWWqlAca67DqtMShAQgd9wZkVmjtg15r3oilMA/+l Zy/tuk9mMFOaLfHicAIJNgUC/bz/G5Q+z7xuOcAM55YWCKLdzYgiAtiRyDNUvuq4 mA3tLUBP3UHmjSAbuGhxbxA7j6ICM2wmazB6kjaQuBTFdm/L4elmk+T0EQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzI5ZGU0 Ni1jMmU5LTQ4ZmItOTJkNC1iN2E1NjRhZmIwNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMjlkZTQ2 LWMyZTktNDhmYi05MmQ0LWI3YTU2NGFmYjA0Yi8xLzVXelZlUFF2amVCbkkyZG54 c19DdXN2QmJnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw87sMA0EAgACMAcDBQMqECzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDv6jANBgkqhkiG9w0BAQsFAAOCAQEAMseEiY8wqLVM CncaViCMEgBiUf7bW1xUF0/iQWKYXrLN8Y3oab/0aUvaHLFC3zuXAx2T6wBHpswG b46KpeADkDhSyTmMrzZU5AjEGseoC2ZiMlr82blIJRZL3UwxO3SmHMYb7JsQS4SN 6AA59DYE5fNxVKMrvFVHnZZr8PB9rmsJuIzh0jxM2Q/9yYAn3G58XlLpEya5Nt5p KcQYWnbwlYf/15ra3FMXc3Tq8IuUcruEBbAq/aHy22iw5BftzZ7l1XRmWLSmQQYO wLzof4UVafT9iE/xaYualvfKKN+ZuVy+NNtpS8uPK5liktmb3lUZpz80bqPaigTV uB3a1Qhyfg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:31 2026 by rpki-client