This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer File: 5k3j63dco74tVQPJyc07crvNpJs.cer (raw, json) Hash identifier: kNY7UnAPyhE5+X5dyGxB9L+X0ky2bTowElVmoSQhZJQ= Subject key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACEB9285FB3BB78FFBDD64A91F41B60C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 29 Nov 2025 08:27:12 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.155.229.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ce:b9:28:5f:b3:bb:78:ff:bd:d6:4a:91:f4:1b:60:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 29 08:27:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:d8:fa:f1:08:fd:98:31:c4:ec:7e:e0:76: 96:80:1e:81:58:3f:a3:ba:40:12:3b:20:7c:9d:06: b2:3a:ea:93:ea:66:03:4a:ea:e0:f6:1d:48:15:71: 83:db:5d:88:12:10:b3:6c:e1:3e:20:ae:59:86:32: da:75:82:42:e9:65:34:ad:12:35:4e:4c:33:eb:25: 18:9c:f4:b9:a5:b3:82:db:8a:4e:1b:9a:2c:e3:67: 94:9b:e5:b5:f7:0f:59:86:96:e8:79:47:b5:2b:18: e2:20:39:0f:7e:f8:3d:30:9a:0c:f7:f7:10:7a:50: eb:7e:97:b3:c9:6e:40:ea:16:30:fb:5c:9b:7c:03: 83:47:7e:43:40:8e:93:a6:7b:35:92:0e:ab:3a:e1: be:f8:ce:4d:b8:6a:5a:1a:1a:ab:dd:43:d3:5c:13: 51:7f:0b:d1:a3:b4:ad:79:39:23:87:79:3e:e8:4d: 0c:58:cd:da:ce:3b:89:f3:63:75:f1:fa:7a:bb:95: 25:6e:13:d1:26:72:02:67:31:82:b0:9e:b1:87:3e: 14:ab:fd:65:d8:11:97:2b:0f:29:fd:f6:bc:a7:b0: 8d:a6:00:7b:a1:90:ac:97:7d:46:b1:2d:89:a3:92: d1:6d:6c:07:c5:6c:f7:e9:a1:ee:4d:d2:69:d0:8b: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.229.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:8c:64:44:8d:dc:9e:9f:55:f4:13:f4:11:c4:2a:50:40:39: ee:e7:0b:ec:5e:3a:95:45:01:89:84:63:2d:5a:37:01:44:95: 07:3c:a0:10:0c:a5:f5:85:32:c3:c6:6e:ff:74:13:5d:40:53: 47:a5:3c:00:f2:ec:2f:a8:b0:c2:c1:f5:f1:4f:38:55:87:fd: 00:43:3a:4d:37:20:bd:a3:74:fa:0f:8d:19:3b:c2:d9:7d:2c: 34:71:44:5d:99:7f:89:48:84:61:7c:e7:de:f9:86:aa:11:60: 90:32:55:29:a0:01:71:bc:f9:57:fd:a7:2f:35:24:81:56:ba: d5:3e:e4:04:30:2b:fa:10:33:d7:53:11:24:7e:cf:54:54:b0: 47:61:90:d4:ad:12:f8:35:07:ca:e9:e9:04:f7:22:2d:a8:ed: 33:b4:39:8b:ef:0e:27:ee:ab:fd:be:68:d1:6d:c6:f9:6e:78: dd:da:7a:39:db:30:c8:fc:c9:7e:32:92:94:97:93:c0:03:a2: 41:6c:2c:f9:d7:19:d0:c8:b8:4c:83:c7:54:b4:8d:d8:b2:73: cd:3a:20:5d:98:39:00:00:96:d6:3b:30:f2:da:99:50:a8:46: 13:8e:7d:b6:02:6e:b8:c7:c3:7c:1a:8f:f3:b5:18:c5:2d:ce: dc:c6:4d:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZrOuShfs7t4/73WSpH0G2DJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI5MDgyNzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjRkZTNlYjc3NWNhM2JlMmQ1NTAzYzljOWNkM2I3MmJiY2RhNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnrY+vEI/ZgxxOx+4HaWgB6BWD+j ukASOyB8nQayOuqT6mYDSurg9h1IFXGD212IEhCzbOE+IK5ZhjLadYJC6WU0rRI1 Tkwz6yUYnPS5pbOC24pOG5os42eUm+W19w9ZhpboeUe1KxjiIDkPfvg9MJoM9/cQ elDrfpezyW5A6hYw+1ybfAODR35DQI6Tpns1kg6rOuG++M5NuGpaGhqr3UPTXBNR fwvRo7SteTkjh3k+6E0MWM3azjuJ82N18fp6u5UlbhPRJnICZzGCsJ6xhz4Uq/1l 2BGXKw8p/fa8p7CNpgB7oZCsl31GsS2Jo5LRbWwHxWz36aHuTdJp0Iu/awIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOZN4+t3XKO+LVUDycnNO3K7zaSbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzA1Y2U5 ZC02ZGFlLTQ3MDktOTcxZi0zNDE2NTgyNDNiNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMDVjZTlk LTZkYWUtNDcwOS05NzFmLTM0MTY1ODI0M2I0ZS8xLzVrM2o2M2Rjbzc0dFZRUEp5 YzA3Y3J2TnBKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuZvlMA0GCSqGSIb3DQEBCwUAA4IBAQBejGRE jdyen1X0E/QRxCpQQDnu5wvsXjqVRQGJhGMtWjcBRJUHPKAQDKX1hTLDxm7/dBNd QFNHpTwA8uwvqLDCwfXxTzhVh/0AQzpNNyC9o3T6D40ZO8LZfSw0cURdmX+JSIRh fOfe+YaqEWCQMlUpoAFxvPlX/acvNSSBVrrVPuQEMCv6EDPXUxEkfs9UVLBHYZDU rRL4NQfK6ekE9yItqO0ztDmL7w4n7qv9vmjRbcb5bnjd2no52zDI/Ml+MpKUl5PA A6JBbCz51xnQyLhMg8dUtI3YsnPNOiBdmDkAAJbWOzDy2plQqEYTjn22Am64x8N8 Go/ztRjFLc7cxk3r -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:07 2025 by rpki-client