This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.cer (raw, json) Hash identifier: NlazFqgYeIAZo35h+TX5sH7m14mq5i6kecv8nO+80jA= Subject key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15A526421703DF3D0DA8AE97E78436 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205017 IP: 2001:678:9b8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a5:26:42:17:03:df:3d:0d:a8:ae:97:e7:84:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:ad:86:c5:8c:24:b3:16:cc:42:10:64:04: 11:c8:39:b5:47:3b:8f:c8:f1:93:b4:db:66:c7:bb: e6:96:ff:a8:63:0c:6b:66:62:80:5f:b9:cc:83:4f: b8:3a:36:5d:47:fb:4e:85:b6:56:31:46:60:cb:61: ce:53:5d:52:52:f0:a4:c8:e6:7f:b2:68:b1:af:dd: 31:68:25:0a:60:b8:90:6d:da:20:f0:26:d9:b5:c6: 93:14:c7:99:fb:de:f4:78:51:c4:8e:fa:0e:2d:8a: 2c:dc:68:b9:b6:8e:06:05:5c:a1:d2:2f:a0:d3:2d: 19:df:3b:cb:c8:08:0b:92:de:72:d2:b1:2c:d3:58: d0:1c:76:24:d9:51:71:9c:f3:c3:7e:de:c4:f8:b6: 75:8f:33:ef:53:c0:8a:a8:f4:87:7f:eb:e1:60:ad: c0:00:b5:4c:e8:bc:b1:64:d0:0d:08:ab:62:55:60: 6b:e9:ca:5f:ee:5f:b0:cb:b6:88:6b:b5:21:8a:b5: ae:67:88:03:2f:1d:ba:22:44:8c:dd:94:59:cb:ea: 67:7e:3d:ff:da:52:a6:85:13:90:72:97:86:9f:eb: 98:bf:c6:96:79:ca:11:ac:75:f4:67:0d:c5:41:87: 68:29:9c:ce:c8:1e:00:a5:67:ef:61:9e:b3:8c:f0: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:9b8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205017 Signature Algorithm: sha256WithRSAEncryption 89:00:26:df:47:f8:ce:f4:f6:25:7e:c7:5a:1a:1b:8e:7c:8d: f8:2b:11:01:33:1f:41:ed:60:70:f1:91:c7:b5:09:55:8f:e5: 55:57:bc:be:fb:43:ef:76:19:8c:e5:15:2a:70:24:3a:e1:bb: 20:fd:0a:01:13:aa:fc:97:ea:a8:42:6c:99:7c:47:c2:e8:ba: be:4e:70:47:ce:72:88:2c:f2:9b:a0:d4:65:aa:25:34:43:a2: 92:13:5d:03:25:89:e3:09:a7:f9:86:72:af:83:56:13:9d:eb: c9:bc:93:23:e0:b4:05:bf:71:87:1f:dc:90:f1:38:04:2e:b4: 8a:ca:5e:fb:e9:90:d0:58:dd:f1:2d:e4:c8:df:c7:e7:07:89: 96:8f:41:17:a7:88:ac:8a:38:a8:b2:09:78:0c:64:09:e2:40: ad:a3:3d:21:ac:38:73:72:48:4e:8a:96:ed:ab:53:f8:91:da: 7d:d6:28:34:61:65:bb:d0:30:87:81:71:d7:72:0b:7c:7e:53: b8:39:ed:5d:17:3e:9f:f7:29:9b:19:93:12:cc:95:f0:d5:6d: bc:7a:3b:9a:3a:f3:05:3c:3d:05:db:d8:fa:4b:4b:a4:90:a0: 68:92:73:39:dd:f1:b4:4c:24:ca:dd:8f:5a:84:e4:e9:07:3c: d9:bc:28:5d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/FaUmQhcD3z0NqK6X54Q2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjE2YzdiMjAxOTU2MDdmMjdiMTNkODhmOTJiZjFkMGViMzhlNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPmthsWMJLMWzEIQZAQRyDm1RzuP yPGTtNtmx7vmlv+oYwxrZmKAX7nMg0+4OjZdR/tOhbZWMUZgy2HOU11SUvCkyOZ/ smixr90xaCUKYLiQbdog8CbZtcaTFMeZ+970eFHEjvoOLYos3Gi5to4GBVyh0i+g 0y0Z3zvLyAgLkt5y0rEs01jQHHYk2VFxnPPDft7E+LZ1jzPvU8CKqPSHf+vhYK3A ALVM6LyxZNANCKtiVWBr6cpf7l+wy7aIa7UhirWuZ4gDLx26IkSM3ZRZy+pnfj3/ 2lKmhROQcpeGn+uYv8aWecoRrHX0Zw3FQYdoKZzOyB4ApWfvYZ6zjPAhhQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOYWx7IBlWB/J7E9iPkr8dDrOOYPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzAzNjM4 MC03ZmJlLTQ0NDQtODRkOS01Y2QwMDRkNmUzNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMDM2Mzgw LTdmYmUtNDQ0NC04NGQ5LTVjZDAwNGQ2ZTM2Ni8xLzVoYkhzZ0dWWUg4bnNUMkkt U3Z4ME9zNDVnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAm4MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMg2TANBgkqhkiG9w0BAQsFAAOCAQEAiQAm30f4zvT2JX7HWhobjnyN+CsR ATMfQe1gcPGRx7UJVY/lVVe8vvtD73YZjOUVKnAkOuG7IP0KAROq/JfqqEJsmXxH wui6vk5wR85yiCzym6DUZaolNEOikhNdAyWJ4wmn+YZyr4NWE53rybyTI+C0Bb9x hx/ckPE4BC60ispe++mQ0Fjd8S3kyN/H5weJlo9BF6eIrIo4qLIJeAxkCeJAraM9 Iaw4c3JIToqW7atT+JHafdYoNGFlu9Awh4Fx13ILfH5TuDntXRc+n/cpmxmTEsyV 8NVtvHo7mjrzBTw9BdvY+ktLpJCgaJJzOd3xtEwkyt2PWoTk6Qc82bwoXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:51 2026 by rpki-client