This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer (raw, json) Hash identifier: PPLF6QFkhz6cUgpKYONsYZcY09WZKYLbA3gRW0zZp+g= Subject key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC9B0C2800FF0AC579BE9BE5980B727DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 17 Jan 2026 02:02:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202142 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:b0:c2:80:0f:f0:ac:57:9b:e9:be:59:80:b7:27:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 17 02:02:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a4d5df233898e04fae3d83e85822d9880e0806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:7d:75:a6:8f:c9:be:b0:44:c0:fa:5d:d1: d0:e5:5a:bd:1a:77:19:cf:2f:5c:83:05:24:92:3b: d7:6e:cf:18:72:c4:25:9c:36:53:d7:df:67:87:a7: 02:fe:53:b4:a1:b2:7c:8e:0a:d7:65:fb:cd:12:c6: cc:b7:86:14:9a:2a:7b:2c:95:03:5c:c6:77:94:85: 3b:74:eb:a8:b0:a9:b3:12:1a:d2:39:06:9c:d7:ea: 3a:ce:ce:73:38:ef:b7:be:f8:73:f9:74:36:38:9a: ff:e4:6d:8a:cb:10:bf:a6:8a:1a:d8:3f:d8:61:26: 98:de:6a:61:d8:67:25:75:5c:83:1d:54:a4:79:09: 30:c9:95:b0:eb:32:6b:8d:a1:74:22:d0:65:ae:d2: c3:a3:d2:06:cc:40:97:0c:f9:c0:df:c1:13:52:d9: d8:3f:52:a4:1e:60:ad:1c:1e:54:c4:f1:d1:8d:46: 3a:33:e1:9b:77:14:7f:27:b9:39:35:27:00:6e:9a: fd:f1:da:ab:a6:c1:aa:94:0c:de:5e:f8:de:e6:34: 3d:b4:70:8b:2b:4b:fd:5a:13:f8:f4:aa:e6:b6:79: 18:cc:36:60:85:89:f1:52:94:84:96:06:5a:98:95: 59:b9:ab:d6:f9:ba:f1:4e:15:d4:2b:2c:ee:57:38: ea:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202142 Signature Algorithm: sha256WithRSAEncryption 32:f0:66:d3:54:44:4a:05:7a:67:90:b5:86:60:fc:7e:1c:a3: e6:56:35:a4:34:5e:f4:dd:f1:0b:0b:c6:0c:2c:e7:49:3a:31: 18:14:01:5a:92:60:6b:e0:14:0b:70:e0:c8:57:b7:ff:44:8e: 85:3b:4f:77:6b:dd:f5:76:92:89:fc:2c:d0:88:49:0d:64:5a: b0:3d:1a:45:c2:28:7d:51:17:db:15:2f:e6:78:07:e9:4d:1a: 6d:53:de:36:7b:4d:01:b9:ef:4e:1d:0a:9b:63:21:8a:8a:79: c9:a6:72:19:68:fa:e4:1f:41:c3:d6:28:2a:08:1d:28:0b:82: 70:5f:45:2c:f7:c4:b8:6d:06:3d:eb:57:85:19:04:9b:86:13: 69:ea:2e:2c:1f:ca:b1:2a:4e:8e:12:37:30:3f:cb:9b:68:9e: 47:d5:aa:c9:bd:8f:64:3e:dd:a9:8b:8c:59:83:37:46:b1:1b: 49:45:b7:17:05:1d:f7:0c:68:01:8b:58:a7:08:71:d4:dc:49: d2:06:a4:f5:7a:da:64:7c:39:26:71:94:39:19:85:59:36:c4: de:1c:64:d8:a8:3c:04:c0:5b:80:b0:2d:10:42:9b:1a:1b:13: cb:25:7d:f5:9f:ee:0e:20:89:34:a1:0f:73:4f:9c:62:b6:66: 05:8f:e7:b5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvJsMKAD/CsV5vpvlmAtyffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE3MDIwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE0ZDVkZjIzMzg5OGUwNGZhZTNkODNlODU4MjJkOTg4MGUwODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+x9daaPyb6wRMD6XdHQ5Vq9GncZ zy9cgwUkkjvXbs8YcsQlnDZT199nh6cC/lO0obJ8jgrXZfvNEsbMt4YUmip7LJUD XMZ3lIU7dOuosKmzEhrSOQac1+o6zs5zOO+3vvhz+XQ2OJr/5G2KyxC/pooa2D/Y YSaY3mph2GcldVyDHVSkeQkwyZWw6zJrjaF0ItBlrtLDo9IGzECXDPnA38ETUtnY P1KkHmCtHB5UxPHRjUY6M+GbdxR/J7k5NScAbpr98dqrpsGqlAzeXvje5jQ9tHCL K0v9WhP49KrmtnkYzDZghYnxUpSElgZamJVZuavW+brxThXUKyzuVzjqNwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOak1d8jOJjgT649g+hYItmIDggGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzYzYWJl Ni0zNTUxLTQxNGYtODc5Mi0xZjlkZmQ4MTRhYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNjNhYmU2 LTM1NTEtNDE0Zi04NzkyLTFmOWRmZDgxNGFiNi8xLzVxVFYzeU00bU9CUHJqMkQ2 RmdpMllnT0NBWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMVnjANBgkqhkiG9w0BAQsFAAOCAQEAMvBm01RESgV6 Z5C1hmD8fhyj5lY1pDRe9N3xCwvGDCznSToxGBQBWpJga+AUC3DgyFe3/0SOhTtP d2vd9XaSifws0IhJDWRasD0aRcIofVEX2xUv5ngH6U0abVPeNntNAbnvTh0Km2Mh iop5yaZyGWj65B9Bw9YoKggdKAuCcF9FLPfEuG0GPetXhRkEm4YTaeouLB/KsSpO jhI3MD/Lm2ieR9Wqyb2PZD7dqYuMWYM3RrEbSUW3FwUd9wxoAYtYpwhx1NxJ0gak 9XraZHw5JnGUORmFWTbE3hxk2Kg8BMBbgLAtEEKbGhsTyyV99Z/uDiCJNKEPc0+c YrZmBY/ntQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:00:23 2026 by rpki-client