This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer (raw, json) Hash identifier: OPN2b5bIORCRaAanrTTIA6C3KYLEx0Q3ulreDV41aaE= Subject key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA64B6F5C3381B5B4BD3F17E5E0466 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213353 IP: 2a10:4780::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:64:b6:f5:c3:38:1b:5b:4b:d3:f1:7e:5e:04:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:c7:7f:8e:67:61:5a:8c:ce:12:14:ec:3a: 3a:62:d6:48:de:3a:20:93:78:54:89:85:80:4b:31: dc:47:96:83:85:44:a3:f2:71:d6:6c:3c:28:2f:b0: 39:22:43:41:e7:fa:97:d8:fa:4c:f3:5b:0a:a3:8b: b6:50:df:47:86:3b:3f:d7:e9:01:78:62:1f:27:e4: dd:48:24:89:1d:89:50:4e:1a:99:a8:f2:04:3d:50: 7d:93:b2:56:11:9d:58:4c:99:77:f1:85:bd:3f:d2: d9:ed:9f:64:e9:75:ac:0b:53:26:a6:2f:88:5c:70: 74:3e:8f:f5:1c:d8:e6:a9:67:2f:a4:02:3b:49:da: 2c:2a:b8:2c:78:68:c8:b6:8d:06:ee:a8:9a:f5:74: e0:e9:ce:b6:06:d1:d3:5d:d6:f8:46:83:a8:9c:20: 2d:53:22:1b:77:7c:15:48:fe:17:59:e4:e3:c9:27: 8c:0d:09:87:7e:69:4f:92:99:d5:a8:0c:ab:04:29: 0c:e7:20:f5:83:0b:61:bf:1d:f7:b0:39:08:24:f4: 20:1f:e9:35:1a:f7:e1:b2:13:cb:d1:65:88:1c:13: 74:a7:75:10:cd:a0:06:ef:a0:a4:e8:31:3d:5d:01: b4:d3:0a:5a:d4:68:1f:41:45:4d:38:15:46:7d:b6: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213353 Signature Algorithm: sha256WithRSAEncryption 2b:51:34:16:3c:ba:36:5d:20:84:e8:13:65:aa:ae:cd:d9:bd: 9b:05:35:7a:bf:37:55:b1:9d:9c:25:cd:7e:93:d4:d0:d1:79: 1b:78:f6:ea:38:80:67:2a:6f:1f:2e:d3:f3:19:8d:d1:b4:8f: 14:af:87:54:c4:28:c7:3f:39:5a:ef:af:38:06:52:ad:9e:57: c1:f3:b9:fc:b4:b8:61:3a:0c:14:8c:90:9d:be:3e:22:33:fe: fd:ab:31:de:b4:28:b5:3b:ad:68:58:30:bc:2b:28:9f:3c:f2: 01:97:cc:93:c1:72:fb:87:86:1c:5e:d7:d9:01:e9:55:45:e1: 48:4f:ef:94:20:17:41:74:7d:d3:02:2a:76:a2:8b:b6:13:c6: 85:34:ff:25:6d:48:43:3b:bf:73:97:a3:dd:89:41:19:d4:bc: 22:59:54:5f:96:bf:aa:72:8e:76:d4:d1:ad:fb:ce:2d:6b:22: 8e:45:e2:99:20:f6:03:48:bd:7e:f7:c4:98:12:ec:2d:d1:4e: c5:aa:9d:1a:11:f9:74:b5:76:05:c0:28:6b:49:4d:80:b3:61: fa:01:f6:07:1a:a8:71:b3:5e:71:a4:13:46:70:b5:6c:ed:b2: fc:e1:73:c4:4d:53:82:3a:c7:f7:70:96:b9:34:25:93:06:c7: cc:56:6e:51 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9ymS29cM4G1tL0/F+XgRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWRhOGU5Y2ZjOGIxNjBlYzU5YjU0MGYzOWQ4OTczZDQyMTgzMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+PHf45nYVqMzhIU7Do6YtZI3jog k3hUiYWASzHcR5aDhUSj8nHWbDwoL7A5IkNB5/qX2PpM81sKo4u2UN9Hhjs/1+kB eGIfJ+TdSCSJHYlQThqZqPIEPVB9k7JWEZ1YTJl38YW9P9LZ7Z9k6XWsC1Mmpi+I XHB0Po/1HNjmqWcvpAI7SdosKrgseGjIto0G7qia9XTg6c62BtHTXdb4RoOonCAt UyIbd3wVSP4XWeTjySeMDQmHfmlPkpnVqAyrBCkM5yD1gwthvx33sDkIJPQgH+k1 GvfhshPL0WWIHBN0p3UQzaAG76Ck6DE9XQG00wpa1GgfQUVNOBVGfbZLMwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFOXajpz8ixYOxZtUDznYlz1CGDEqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzAwM2Nh OS1jMzkwLTQyNzQtOGZjNi03YzUwNDcwM2JiMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMDAzY2E5 LWMzOTAtNDI3NC04ZmM2LTdjNTA0NzAzYmIwMi8xLzVkcU9uUHlMRmc3Rm0xUVBP ZGlYUFVJWU1Tby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKhBHgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQWkwDQYJKoZIhvcNAQELBQADggEBACtRNBY8ujZdIIToE2Wqrs3ZvZsFNXq/ N1WxnZwlzX6T1NDReRt49uo4gGcqbx8u0/MZjdG0jxSvh1TEKMc/OVrvrzgGUq2e V8Hzufy0uGE6DBSMkJ2+PiIz/v2rMd60KLU7rWhYMLwrKJ888gGXzJPBcvuHhhxe 19kB6VVF4UhP75QgF0F0fdMCKnaii7YTxoU0/yVtSEM7v3OXo92JQRnUvCJZVF+W v6pyjnbU0a37zi1rIo5F4pkg9gNIvX73xJgS7C3RTsWqnRoR+XS1dgXAKGtJTYCz YfoB9gcaqHGzXnGkE0ZwtWztsvzhc8RNU4I6x/dwlrk0JZMGx8xWblE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:50 2026 by rpki-client