This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer File: 5gBvGrt1cn57wwwXnml00tGPjzg.cer (raw, json) Hash identifier: SYvKg22DAy97B4p4XpfEnsxYF43fn+8seRj6+pKPyXw= Subject key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CD8BE1E9867E0C2B034CCC79D9B74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61239 IP: 185.12.100.0/22 IP: 2a02:df00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d8:be:1e:98:67:e0:c2:b0:34:cc:c7:9d:9b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:4c:0c:da:66:b9:a1:01:66:d8:8b:c1:4d: 7d:10:91:53:4c:7a:75:13:5d:ae:fa:96:90:9f:2f: 66:22:cd:c5:ee:f8:87:3c:1b:db:6f:59:96:db:79: 01:9a:d0:6f:47:5f:13:2d:ab:ee:57:b6:d9:29:d6: 4e:25:a0:2a:f5:6b:c2:1d:35:62:64:fc:11:1a:31: ee:d1:80:0a:bf:cb:50:5d:8a:f7:e7:26:7e:18:07: 4a:9e:7b:7a:9f:21:ff:92:da:a3:b6:6d:2a:36:8d: 75:84:01:8e:6b:ee:8d:3a:29:3d:cd:36:a3:4c:4b: e0:c7:5a:aa:0b:27:06:61:42:57:cd:03:07:ba:08: 1a:4f:3d:f6:14:26:e2:aa:b1:cf:71:98:a8:83:54: bf:1d:3f:1c:85:52:29:3d:cc:e1:a8:a7:40:17:b0: 9d:39:69:6f:d4:f5:ed:3d:b3:7c:62:04:04:5f:ea: 3b:ac:06:73:6d:16:85:17:c6:dd:43:5a:83:9f:83: c4:bc:3c:2e:f4:6e:69:71:6d:d1:d3:f2:b3:ad:51: e1:aa:75:e9:78:ec:c6:f5:e1:a2:2d:26:68:97:47: d2:11:38:4b:5b:fb:4b:99:fe:f3:fb:13:75:64:4c: bb:3f:b8:86:3b:c1:ce:0e:bc:41:2c:33:5e:5f:4a: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.100.0/22 IPv6: 2a02:df00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61239 Signature Algorithm: sha256WithRSAEncryption 77:7b:6e:7f:19:19:28:4e:ae:39:e9:e6:85:1f:86:e1:7c:30: ef:12:14:e3:55:21:31:44:fc:ad:bd:10:54:8d:fd:a6:67:8f: 6c:66:f5:bd:86:93:56:28:17:18:6c:7c:1c:3f:84:b2:54:17: 12:c7:30:b6:87:31:bb:eb:d5:40:e0:43:a0:e1:2e:72:00:60: 9b:61:62:bc:09:81:e0:b8:c1:51:98:17:c5:e7:39:7e:2e:90: d9:65:22:10:f0:c1:99:d4:7e:09:d7:7d:b1:35:62:a1:a6:9b: f2:7b:bd:56:c6:23:0b:ec:27:ef:23:4a:81:0d:b2:af:2c:90: 23:da:e1:64:27:60:11:8b:10:e7:5c:4b:16:d2:91:66:f6:b6: 5d:5e:7d:b6:62:3c:8e:c5:84:27:4c:a6:33:5a:6a:3b:ec:aa: 21:7e:d7:58:db:59:21:3d:76:d4:78:4e:fc:68:b4:fb:e3:9c: 5a:15:6b:73:d6:df:46:b4:61:7d:5b:3b:a8:fb:7b:f6:ce:31: c7:06:58:c8:0c:06:67:bc:eb:04:14:e9:39:54:91:82:ca:57: a8:cd:a3:2e:50:50:15:1f:f3:88:81:7f:9b:a1:e6:8e:56:51: a1:2f:34:3c:ce:a6:bf:2d:25:c7:ac:5b:d6:9b:75:fe:74:12: e2:d0:2d:0f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XNi+Hphn4MKwNMzHnZt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjAwNmYxYWJiNzU3MjdlN2JjMzBjMTc5ZTY5NzRkMmQxOGY4ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbhMDNpmuaEBZtiLwU19EJFTTHp1 E12u+paQny9mIs3F7viHPBvbb1mW23kBmtBvR18TLavuV7bZKdZOJaAq9WvCHTVi ZPwRGjHu0YAKv8tQXYr35yZ+GAdKnnt6nyH/ktqjtm0qNo11hAGOa+6NOik9zTaj TEvgx1qqCycGYUJXzQMHuggaTz32FCbiqrHPcZiog1S/HT8chVIpPczhqKdAF7Cd OWlv1PXtPbN8YgQEX+o7rAZzbRaFF8bdQ1qDn4PEvDwu9G5pcW3R0/KzrVHhqnXp eOzG9eGiLSZol0fSEThLW/tLmf7z+xN1ZEy7P7iGO8HODrxBLDNeX0oCFQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOYAbxq7dXJ+e8MMF55pdNLRj484MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2EyN2Ex OS05MGI1LTQ2NzEtYmJjMS00NzJkODgyZTlkNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvYTI3YTE5 LTkwYjUtNDY3MS1iYmMxLTQ3MmQ4ODJlOWQ3Mi8xLzVnQnZHcnQxY241N3d3d1hu bWwwMHRHUGp6Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQxkMA0EAgACMAcDBQMqAt8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDvNzANBgkqhkiG9w0BAQsFAAOCAQEAd3tufxkZKE6u OenmhR+G4Xww7xIU41UhMUT8rb0QVI39pmePbGb1vYaTVigXGGx8HD+EslQXEscw tocxu+vVQOBDoOEucgBgm2FivAmB4LjBUZgXxec5fi6Q2WUiEPDBmdR+Cdd9sTVi oaab8nu9VsYjC+wn7yNKgQ2yryyQI9rhZCdgEYsQ51xLFtKRZva2XV59tmI8jsWE J0ymM1pqO+yqIX7XWNtZIT121HhO/Gi0++OcWhVrc9bfRrRhfVs7qPt79s4xxwZY yAwGZ7zrBBTpOVSRgspXqM2jLlBQFR/ziIF/m6HmjlZRoS80PM6mvy0lx6xb1pt1 /nQS4tAtDw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:48 2026 by rpki-client