This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer File: 5v-BaTR_UwcrLRGtGNmiU8r--uc.cer (raw, json) Hash identifier: 9Moi34YEc9onIzRqaVDSQ8e9ei8iaK+fTnveWgVNf7I= Subject key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AB79EACF99E97359FFA8D54A36478 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207236 IP: 185.162.0.0/22 IP: 2a07:cb00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b7:9e:ac:f9:9e:97:35:9f:fa:8d:54:a3:64:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:5a:ee:2b:2f:5a:76:d9:62:a2:22:85:63: 86:df:0b:c1:07:47:17:dd:1a:4a:d4:2a:54:44:be: c2:ea:0f:3e:27:88:62:a2:d9:85:d1:f4:56:77:a2: 18:cf:37:e7:c5:1e:fb:2a:1f:db:c4:4c:4f:ce:e5: 3d:04:03:2b:5f:e1:58:d8:3d:c3:76:86:cd:5c:16: f6:07:c7:a0:03:b8:b1:9a:75:da:c8:23:f0:84:65: 3c:d6:49:b3:bb:c4:e2:d3:44:75:d8:02:59:aa:3f: 85:46:27:54:20:a3:6d:de:68:9e:65:32:3f:4e:d5: c8:85:5a:55:98:e0:02:77:33:ad:17:4d:8e:c4:d3: 70:7a:15:a1:c2:d0:e3:ac:0e:f1:72:bc:49:f4:56: f9:ab:53:8c:08:3b:37:30:61:c7:1d:e6:b4:7e:49: e3:92:b2:49:1c:01:ac:99:0a:e9:a0:a9:4e:7a:cb: e4:fe:d8:71:78:31:05:2c:cd:b8:f0:77:96:77:9e: 37:a2:a1:f3:c3:0a:ff:2b:ad:4e:ff:44:37:20:ac: a4:ff:63:fd:f4:28:2b:08:70:f3:4c:ca:b3:5f:0c: a8:0e:f8:59:4f:af:69:3b:18:64:61:08:d4:6f:1b: de:58:24:e2:d6:8d:73:9d:05:ba:75:53:03:5b:0e: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.0.0/22 IPv6: 2a07:cb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207236 Signature Algorithm: sha256WithRSAEncryption 18:8b:7c:79:61:7c:f5:24:33:ce:c5:e3:5a:cd:b2:65:1c:35: 15:11:2c:3a:36:36:fb:39:2d:a6:14:19:81:74:17:df:1b:9d: 51:df:a7:0c:5d:de:c2:91:d4:0e:c8:cb:b0:20:ea:40:4b:75: 8e:d5:4e:8f:9a:4a:29:e2:cc:e6:df:53:6f:7a:86:52:b1:a3: c4:20:65:72:57:fb:34:9f:66:a9:9e:6a:22:37:3e:2b:da:44: 89:6f:6f:f2:ae:ad:ca:f5:43:d5:61:b5:ee:3f:c4:33:cc:9d: cd:05:05:a3:92:f3:0a:07:9b:e5:3d:8b:8a:28:be:ef:f0:06: 80:86:a6:33:6f:72:48:3d:91:11:c2:c3:01:f2:35:02:d8:ec: a2:a2:28:38:9b:10:b6:c5:df:71:7a:13:81:fd:e1:f8:69:6d: 35:3d:1c:55:6d:cf:95:53:a5:49:82:3d:d9:ba:5b:ea:44:68: 38:6a:01:8d:96:43:44:55:0c:ae:e0:ca:58:3d:56:b1:58:a1: bd:82:48:f1:d7:f7:16:a0:f0:79:03:b8:47:1a:71:18:a9:87: 37:9f:81:a4:71:4a:5a:5b:21:c1:bd:cc:45:be:b3:19:cb:fe: 72:b8:e0:ce:86:09:7b:f3:5a:a2:55:9b:4e:f2:ee:17:16:81: 98:65:57:0e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WreerPmelzWf+o1Uo2R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmZmODE2OTM0N2Y1MzA3MmIyZDExYWQxOGQ5YTI1M2NhZmVmYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oNa7isvWnbZYqIihWOG3wvBB0cX 3RpK1CpURL7C6g8+J4hiotmF0fRWd6IYzzfnxR77Kh/bxExPzuU9BAMrX+FY2D3D dobNXBb2B8egA7ixmnXayCPwhGU81kmzu8Ti00R12AJZqj+FRidUIKNt3mieZTI/ TtXIhVpVmOACdzOtF02OxNNwehWhwtDjrA7xcrxJ9Fb5q1OMCDs3MGHHHea0fknj krJJHAGsmQrpoKlOesvk/thxeDEFLM248HeWd543oqHzwwr/K61O/0Q3IKyk/2P9 9CgrCHDzTMqzXwyoDvhZT69pOxhkYQjUbxveWCTi1o1znQW6dVMDWw5JywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOb/gWk0f1MHKy0RrRjZolPK/vrnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzUwZjc0 OS01NTgxLTQ2MDEtYWU0MS05ZmIwM2QwM2VmZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNTBmNzQ5 LTU1ODEtNDYwMS1hZTQxLTlmYjAzZDAzZWZmOS8xLzV2LUJhVFJfVXdjckxSR3RH Tm1pVThyLS11Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaIAMA0EAgACMAcDBQAqB8sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMphDANBgkqhkiG9w0BAQsFAAOCAQEAGIt8eWF89SQz zsXjWs2yZRw1FREsOjY2+zktphQZgXQX3xudUd+nDF3ewpHUDsjLsCDqQEt1jtVO j5pKKeLM5t9Tb3qGUrGjxCBlclf7NJ9mqZ5qIjc+K9pEiW9v8q6tyvVD1WG17j/E M8ydzQUFo5LzCgeb5T2Liii+7/AGgIamM29ySD2REcLDAfI1AtjsoqIoOJsQtsXf cXoTgf3h+GltNT0cVW3PlVOlSYI92bpb6kRoOGoBjZZDRFUMruDKWD1WsVihvYJI 8df3FqDweQO4RxpxGKmHN5+BpHFKWlshwb3MRb6zGcv+crjgzoYJe/NaolWbTvLu FxaBmGVXDg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:26 2026 by rpki-client