This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer File: 5k3j63dco74tVQPJyc07crvNpJs.cer (raw, json) Hash identifier: qbp7J4mFi6YvzkjsP887qiQrGdumcBHCIEQrD6c9fEc= Subject key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD5AD5658D669E417E856667BC3C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.155.229.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d5:ad:56:58:d6:69:e4:17:e8:56:66:7b:c3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:d8:fa:f1:08:fd:98:31:c4:ec:7e:e0:76: 96:80:1e:81:58:3f:a3:ba:40:12:3b:20:7c:9d:06: b2:3a:ea:93:ea:66:03:4a:ea:e0:f6:1d:48:15:71: 83:db:5d:88:12:10:b3:6c:e1:3e:20:ae:59:86:32: da:75:82:42:e9:65:34:ad:12:35:4e:4c:33:eb:25: 18:9c:f4:b9:a5:b3:82:db:8a:4e:1b:9a:2c:e3:67: 94:9b:e5:b5:f7:0f:59:86:96:e8:79:47:b5:2b:18: e2:20:39:0f:7e:f8:3d:30:9a:0c:f7:f7:10:7a:50: eb:7e:97:b3:c9:6e:40:ea:16:30:fb:5c:9b:7c:03: 83:47:7e:43:40:8e:93:a6:7b:35:92:0e:ab:3a:e1: be:f8:ce:4d:b8:6a:5a:1a:1a:ab:dd:43:d3:5c:13: 51:7f:0b:d1:a3:b4:ad:79:39:23:87:79:3e:e8:4d: 0c:58:cd:da:ce:3b:89:f3:63:75:f1:fa:7a:bb:95: 25:6e:13:d1:26:72:02:67:31:82:b0:9e:b1:87:3e: 14:ab:fd:65:d8:11:97:2b:0f:29:fd:f6:bc:a7:b0: 8d:a6:00:7b:a1:90:ac:97:7d:46:b1:2d:89:a3:92: d1:6d:6c:07:c5:6c:f7:e9:a1:ee:4d:d2:69:d0:8b: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.229.0/24 Signature Algorithm: sha256WithRSAEncryption 57:64:2e:3c:0f:a5:ea:51:ed:5e:ca:d9:6c:8b:23:e3:99:45: 5f:a7:45:63:58:b5:ad:67:32:aa:ef:5c:6c:45:ef:0d:39:3d: 57:b9:ce:7a:8b:3a:2d:19:f7:29:3e:95:2f:b9:6f:1d:72:9b: 2b:c7:b4:2a:ba:30:92:7c:fb:6b:4e:c2:b5:cc:8a:50:7d:25: 9a:16:fc:da:0a:91:3b:fa:57:0a:57:d9:9c:10:c2:16:a6:33: c4:9a:91:d2:64:df:3f:03:df:4b:fb:20:bf:91:52:37:f2:07: 82:73:5b:7c:98:cd:d0:6d:3d:5d:ac:e6:29:ac:37:ce:7c:8c: 1a:3c:06:36:35:6f:fe:82:be:81:ef:53:aa:de:ab:90:26:e9: 1a:2d:98:6f:d2:d5:28:83:7c:97:67:23:b2:aa:76:9e:3d:8a: 3e:d5:60:23:52:94:16:48:0c:97:6f:84:5b:c9:2f:fe:16:96: 53:ca:1b:f8:b9:6a:6a:df:c0:17:f8:01:bc:2a:87:d5:2d:a6: 1d:9c:95:30:7b:4b:78:f3:c1:92:c3:9e:07:ac:f0:2a:8a:63: 5f:90:e8:e7:8d:2d:97:38:4a:e0:ae:f8:49:6f:d7:7f:f4:c4: 90:b0:cf:95:5c:99:20:9d:c6:07:0c:2d:01:c7:3a:e9:1b:75: bd:f9:76:94 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fdWtVljWaeQX6FZme8PBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjRkZTNlYjc3NWNhM2JlMmQ1NTAzYzljOWNkM2I3MmJiY2RhNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnrY+vEI/ZgxxOx+4HaWgB6BWD+j ukASOyB8nQayOuqT6mYDSurg9h1IFXGD212IEhCzbOE+IK5ZhjLadYJC6WU0rRI1 Tkwz6yUYnPS5pbOC24pOG5os42eUm+W19w9ZhpboeUe1KxjiIDkPfvg9MJoM9/cQ elDrfpezyW5A6hYw+1ybfAODR35DQI6Tpns1kg6rOuG++M5NuGpaGhqr3UPTXBNR fwvRo7SteTkjh3k+6E0MWM3azjuJ82N18fp6u5UlbhPRJnICZzGCsJ6xhz4Uq/1l 2BGXKw8p/fa8p7CNpgB7oZCsl31GsS2Jo5LRbWwHxWz36aHuTdJp0Iu/awIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOZN4+t3XKO+LVUDycnNO3K7zaSbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzA1Y2U5 ZC02ZGFlLTQ3MDktOTcxZi0zNDE2NTgyNDNiNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMDVjZTlk LTZkYWUtNDcwOS05NzFmLTM0MTY1ODI0M2I0ZS8xLzVrM2o2M2Rjbzc0dFZRUEp5 YzA3Y3J2TnBKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuZvlMA0GCSqGSIb3DQEBCwUAA4IBAQBXZC48 D6XqUe1eytlsiyPjmUVfp0VjWLWtZzKq71xsRe8NOT1Xuc56izotGfcpPpUvuW8d cpsrx7QqujCSfPtrTsK1zIpQfSWaFvzaCpE7+lcKV9mcEMIWpjPEmpHSZN8/A99L +yC/kVI38geCc1t8mM3QbT1drOYprDfOfIwaPAY2NW/+gr6B71Oq3quQJukaLZhv 0tUog3yXZyOyqnaePYo+1WAjUpQWSAyXb4RbyS/+FpZTyhv4uWpq38AX+AG8KofV LaYdnJUwe0t488GSw54HrPAqimNfkOjnjS2XOErgrvhJb9d/9MSQsM+VXJkgncYH DC0BxzrpG3W9+XaU -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:36 2026 by rpki-client