This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer (raw, json) Hash identifier: KP/Gbi37mdf14ux+z+1icm5nrWs57ARWe2P5WJ8z1fM= Subject key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDC1EBB69A2AC3D51B026FC0429559F61 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 15:56:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44008 IP: 193.36.16.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:1e:bb:69:a2:ac:3d:51:b0:26:fc:04:29:55:9f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 15:56:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:e2:6c:ff:6f:26:8c:16:74:97:0f:1c:9f: 89:c4:ff:61:4a:85:91:7c:55:a6:65:12:fe:5e:c3: 91:51:b5:be:4d:26:e8:d1:64:9b:72:3f:de:12:9f: 50:3f:4b:97:cf:a8:4d:c8:a1:f2:98:26:68:02:53: f7:a9:4f:dd:52:aa:30:e4:07:bc:b7:ed:39:0e:ee: 2e:a4:b6:83:2e:0c:c3:36:88:4b:01:38:b7:4b:ef: e0:f3:97:1e:0f:c1:9c:a3:4a:46:59:9a:ae:5d:da: 0e:00:e6:9b:63:12:d2:a1:8c:ae:7f:e1:a6:74:63: 7f:bc:b4:6b:c0:78:fe:0c:08:6a:c9:2f:a9:8e:73: 36:8c:9f:41:4d:c5:98:e9:90:1a:84:63:48:f2:ce: 42:da:d5:2c:77:88:d4:33:3c:09:f6:1a:3c:3a:22: 32:d7:0f:12:90:1c:1f:e6:a2:52:32:8a:c6:46:f5: 77:d5:e6:9f:5d:1d:02:07:80:38:56:4d:9b:90:48: f2:52:f9:fa:65:73:ec:9d:6e:98:dd:50:02:0f:0c: a6:2c:73:88:45:08:39:fd:58:1a:3d:cf:e1:a4:77: 65:47:5b:1e:63:0f:34:21:03:f6:55:80:f8:77:c5: da:11:f7:42:c8:89:05:46:3a:c4:ed:98:45:a3:c5: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44008 Signature Algorithm: sha256WithRSAEncryption 01:e9:3a:07:02:24:7a:1b:94:fb:30:de:97:9b:5d:d2:ff:15: 49:fa:13:c6:ba:04:80:15:8a:e2:c3:7b:ff:13:1b:5a:00:4c: 4a:0b:8e:44:2a:cc:46:65:95:c3:cb:65:e3:13:20:db:1d:24: bd:e6:69:0d:09:79:94:17:f3:eb:15:d5:06:fa:85:f2:ab:9e: e0:11:58:da:62:f9:fc:f9:4e:88:b1:17:3b:88:1c:2c:b3:dc: cf:9b:6f:a9:e5:b4:3e:57:fc:0e:15:b1:bd:13:97:dc:41:91: b2:07:ad:ff:46:28:40:50:cc:31:09:34:f6:fc:2f:a4:7b:39: 95:e8:36:fc:94:18:ee:ef:4b:af:d1:cc:c2:ba:87:f8:6f:8c: 58:1e:75:49:5d:65:9e:d5:ca:15:54:ee:c1:5e:22:f6:b4:a0: e8:02:36:26:b7:fa:07:3d:d8:ed:3f:4a:14:d1:aa:bb:f8:cc: 65:dd:a4:16:ae:9b:45:72:6c:90:64:9e:58:d9:31:e4:4d:af: 40:f6:fd:93:23:1a:21:84:a1:b6:0f:ce:cd:8e:fd:78:56:15: ba:8c:6b:2c:cd:34:98:38:c3:95:f6:41:56:76:7d:14:30:f6: dd:1c:03:c5:7d:e8:a2:a2:dd:84:95:bb:2e:dd:64:94:a2:18: f3:1d:4b:26 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZvcHrtpoqw9UbAm/AQpVZ9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTU1NjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmI1ZGM5N2I4MDFmYTBmZmI5MzAwNWNjYmY0ZDY3MjdiNzUxOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTbibP9vJowWdJcPHJ+JxP9hSoWR fFWmZRL+XsORUbW+TSbo0WSbcj/eEp9QP0uXz6hNyKHymCZoAlP3qU/dUqow5Ae8 t+05Du4upLaDLgzDNohLATi3S+/g85ceD8Gco0pGWZquXdoOAOabYxLSoYyuf+Gm dGN/vLRrwHj+DAhqyS+pjnM2jJ9BTcWY6ZAahGNI8s5C2tUsd4jUMzwJ9ho8OiIy 1w8SkBwf5qJSMorGRvV31eafXR0CB4A4Vk2bkEjyUvn6ZXPsnW6Y3VACDwymLHOI RQg5/VgaPc/hpHdlR1seYw80IQP2VYD4d8XaEfdCyIkFRjrE7ZhFo8UfxwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOa13Je4AfoP+5MAXMv01nJ7dRkqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2I5OGJk YS1kM2M5LTRkMGMtYTE5NS02OTk2MjFlMDBmNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvYjk4YmRh LWQzYzktNGQwYy1hMTk1LTY5OTYyMWUwMGY0Ni8xLzVyWGNsN2dCLWdfN2t3QmN5 X1RXY250MUdTby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwSQQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCr6DANBgkqhkiG9w0BAQsFAAOCAQEAAek6BwIkehuU+zDel5td0v8VSfoTxroE gBWK4sN7/xMbWgBMSguORCrMRmWVw8tl4xMg2x0kveZpDQl5lBfz6xXVBvqF8que 4BFY2mL5/PlOiLEXO4gcLLPcz5tvqeW0Plf8DhWxvROX3EGRsget/0YoQFDMMQk0 9vwvpHs5leg2/JQY7u9Lr9HMwrqH+G+MWB51SV1lntXKFVTuwV4i9rSg6AI2Jrf6 Bz3Y7T9KFNGqu/jMZd2kFq6bRXJskGSeWNkx5E2vQPb9kyMaIYShtg/OzY79eFYV uoxrLM00mDjDlfZBVnZ9FDD23RwDxX3ooqLdhJW7Lt1klKIY8x1LJg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:18 2026 by rpki-client