This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer (raw, json) Hash identifier: l3CpPl55+nYHa9QaXqD1CGN4MPmI9NgVAbf7vu4oO+g= Subject key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B65A284EEA0AD1B33881D886F824A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205112 IP: 45.151.164.0/23 IP: 45.151.167.0/24 IP: 45.157.240.0/22 IP: 185.65.240.0/22 IP: 185.232.100.0/22 IP: 2a0c:1700::/29 IP: 2a0f:6480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:65:a2:84:ee:a0:ad:1b:33:88:1d:88:6f:82:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:e2:f0:05:53:e4:2c:2e:2d:fa:c4:43:0e: 03:43:4a:91:51:6e:8c:b4:17:44:51:f8:90:3f:f9: f1:91:7b:7b:b0:b0:fc:7c:f1:c9:b5:12:e3:08:c0: 51:63:1d:cb:e3:4b:f0:50:10:54:40:69:de:2b:71: 68:b4:dc:7f:3e:c4:b3:b5:60:02:07:6c:b6:c3:ec: f7:f0:da:b5:1a:0e:a7:ba:a9:f0:8e:04:c2:56:c5: 6d:74:06:1a:f1:24:45:cf:97:7d:23:c9:22:f7:04: 58:ca:23:d9:52:55:cb:41:c4:2b:f5:d1:4b:8c:d2: 47:f7:11:af:8f:98:fc:99:a6:6f:7f:0e:ec:ee:c9: 95:97:18:39:5d:40:fb:3e:2e:be:04:a3:71:1a:1d: 24:b8:a8:0d:32:eb:8c:23:68:ae:a2:d3:32:04:e1: 64:98:39:9a:07:2f:dd:67:77:b9:35:16:8b:c2:54: 04:5b:dc:cd:05:38:08:a3:3c:e3:3a:94:ae:87:9e: d8:0e:c6:53:d0:f4:84:9a:b8:56:b7:e9:9e:e0:ad: 7e:ec:f3:9a:27:9f:43:7e:49:de:52:79:9f:b8:a0: c1:bd:e0:2b:c7:bc:9f:ee:ae:a7:d2:4d:14:23:da: c8:00:8d:97:e1:89:5e:3f:33:5f:81:32:82:f9:d1: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.164.0/23 45.151.167.0/24 45.157.240.0/22 185.65.240.0/22 185.232.100.0/22 IPv6: 2a0c:1700::/29 2a0f:6480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205112 Signature Algorithm: sha256WithRSAEncryption ad:51:96:95:d5:01:9e:c3:49:03:ac:ef:0a:bb:5b:53:a5:16: d7:b3:d8:6a:91:83:e1:ad:cd:f3:3c:e6:90:24:ca:25:ff:7d: b9:ea:ed:5a:9b:ca:5b:d4:e3:42:0d:25:a7:c8:33:3e:bf:15: 4f:bf:c2:d6:28:9a:9c:cf:3a:7f:95:e8:96:fc:94:44:6d:50: 47:4d:39:d4:ee:3d:1d:cb:cc:44:52:9d:6e:67:ae:66:af:6f: 2d:0c:6a:59:8d:44:da:08:e0:bb:6f:66:2d:0d:85:20:c7:dc: 0d:cf:c0:6b:70:25:24:8e:19:30:f9:6b:07:2c:fc:41:b2:62: 84:ad:9a:5a:35:ac:f2:3b:a4:d2:17:31:b5:27:3c:df:05:7a: d4:a5:f8:45:eb:2f:e3:36:a6:0f:a6:71:25:fe:2f:4c:0b:97: c3:ab:99:43:fb:34:3f:6e:e8:25:c5:bf:3f:f3:4e:d0:1d:ad: d5:82:5e:20:4a:6f:16:88:e7:59:a6:eb:aa:09:9d:ab:d7:89: 85:89:94:7c:05:b9:d7:9b:77:78:9d:5d:22:b6:77:86:94:44: ea:33:fc:7a:c4:c9:1e:a2:06:c0:a0:02:ca:ee:c1:2a:69:71: a5:e8:ce:2b:e9:ec:00:55:af:6f:59:57:4c:42:2d:60:85:4e: 12:92:c6:7e -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt6W2WihO6grRsziB2Ib4JKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNjZjk0MzNlYjgwZmU5MDI3MDg0NTI5YTI1NDEyZGRmZTViZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N7i8AVT5CwuLfrEQw4DQ0qRUW6M tBdEUfiQP/nxkXt7sLD8fPHJtRLjCMBRYx3L40vwUBBUQGneK3FotNx/PsSztWAC B2y2w+z38Nq1Gg6nuqnwjgTCVsVtdAYa8SRFz5d9I8ki9wRYyiPZUlXLQcQr9dFL jNJH9xGvj5j8maZvfw7s7smVlxg5XUD7Pi6+BKNxGh0kuKgNMuuMI2iuotMyBOFk mDmaBy/dZ3e5NRaLwlQEW9zNBTgIozzjOpSuh57YDsZT0PSEmrhWt+me4K1+7POa J59DfkneUnmfuKDBveArx7yf7q6n0k0UI9rIAI2X4YlePzNfgTKC+dFgIwIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFOc8+UM+uA/pAnCEUpolQS3f5b0BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzgxN2Mx NC1iODAwLTRjMTUtYTg5ZS03MDRmMjYzMzg5ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvODE3YzE0 LWI4MDAtNGMxNS1hODllLTcwNGYyNjMzODllMi8xLzV6ejVRejY0RC1rQ2NJUlNt aVZCTGRfbHZRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQBLZekAwQALZenAwQCLZ3wAwQCuUHwAwQCuehk MBQEAgACMA4DBQMqDBcAAwUDKg9kgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD ITgwDQYJKoZIhvcNAQELBQADggEBAK1RlpXVAZ7DSQOs7wq7W1OlFtez2GqRg+Gt zfM85pAkyiX/fbnq7VqbylvU40INJafIMz6/FU+/wtYompzPOn+V6Jb8lERtUEdN OdTuPR3LzERSnW5nrmavby0MalmNRNoI4LtvZi0NhSDH3A3PwGtwJSSOGTD5awcs /EGyYoStmlo1rPI7pNIXMbUnPN8FetSl+EXrL+M2pg+mcSX+L0wLl8OrmUP7ND9u 6CXFvz/zTtAdrdWCXiBKbxaI51mm66oJnavXiYWJlHwFudebd3idXSK2d4aUROoz /HrEyR6iBsCgAsruwSppcaXozivp7ABVr29ZV0xCLWCFThKSxn4= -----END CERTIFICATE-----Generated at Mon Jan 26 13:48:33 2026 by rpki-client