This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer File: CASs5pRvtwG7LEXjCsr-pm2sL3o.cer (raw, json) Hash identifier: c7mLNfw5gViOCzWU2K5XctyYunj6iolZadQrXh9dxzU= Subject key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB525C466D9C056B52D0E8A5BC19DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216352 IP: 2001:67c:c4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:52:5c:46:6d:9c:05:6b:52:d0:e8:a5:bc:19:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:f7:17:38:b6:f2:5c:20:b5:1e:03:dd:41: 0a:75:49:87:76:ba:26:b5:35:8b:e1:39:5b:24:82: c3:26:1a:1b:e6:ab:7b:da:f7:a7:5f:aa:a9:51:0c: 77:36:28:53:5f:78:75:87:7c:36:30:55:07:6b:ae: 56:7e:e4:4c:d4:78:19:bf:d2:69:8e:8e:e1:7a:2d: cd:68:b9:1a:10:70:12:af:39:2b:5c:12:9e:c0:d1: 0c:50:1d:d3:74:8a:26:b1:e0:4e:73:95:a2:de:25: 2b:ea:6d:f6:f8:18:ab:d8:96:e8:d7:80:81:f7:99: 33:f4:35:8b:7f:10:db:49:ff:03:03:e6:db:b1:f2: ee:40:7e:ed:3d:93:af:5c:6e:3d:de:09:f3:dc:9c: da:8c:07:3e:e1:ea:5e:57:55:68:e0:ea:45:e7:a9: e9:34:17:aa:ff:6b:04:b7:14:d5:dd:0e:62:d9:64: ab:bf:ff:91:6f:e0:7c:f9:e2:c4:de:8d:8e:c8:ca: 78:b4:24:bc:80:d0:70:69:31:30:1b:0b:fa:60:b4: 30:bf:f4:51:0a:fb:6a:32:22:34:f5:0a:be:6d:0c: 68:74:07:dc:66:fb:18:d6:6d:3a:8d:2e:44:3b:1d: b3:b5:f4:46:37:35:ce:87:b6:c5:99:37:a8:93:46: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216352 Signature Algorithm: sha256WithRSAEncryption 2d:bb:a9:65:80:78:45:2f:f2:90:3e:c3:d8:15:c2:ce:59:2f: 1c:10:20:47:78:ab:82:2e:07:a0:7e:cb:39:e4:d5:9a:97:71: 09:d8:f2:35:01:eb:9e:c4:45:c9:48:49:15:9b:66:d4:65:d4: 28:39:81:2b:d4:79:55:2d:ca:75:5f:0e:55:33:85:a9:77:03: d6:99:e1:61:3d:12:28:b2:59:49:4c:18:dd:51:a6:b9:c4:ab: db:33:8e:10:4b:6e:5e:08:67:85:92:b9:50:9a:ec:27:f1:06: 89:df:94:0f:a0:26:0f:92:1e:74:7e:fb:aa:24:45:42:91:e0: 52:48:9a:b2:38:89:1b:cb:24:03:53:ff:af:59:4a:ad:9a:bb: bd:f7:c2:76:fa:46:0a:57:13:8f:c2:34:d5:78:ba:6d:e5:2d: f5:b8:ef:e9:98:61:ee:f8:2e:58:54:bf:a7:1a:47:88:d0:08: 34:4c:51:42:64:16:71:d1:b5:5b:23:28:22:fb:67:fa:e3:ec: 32:04:35:8c:d7:eb:52:3a:31:4d:61:70:8b:d7:7f:99:7c:1d: 5a:d8:64:db:3e:65:ef:a1:51:13:af:f7:a8:87:37:c8:27:4e: a2:16:b1:46:9e:22:17:67:92:41:f9:2c:5e:44:ed:ad:b1:f1: d7:9b:d0:51 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt261JcRm2cBWtS0OilvBnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODA0YWNlNjk0NmZiNzAxYmIyYzQ1ZTMwYWNhZmVhNjZkYWMyZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnD3Fzi28lwgtR4D3UEKdUmHdrom tTWL4TlbJILDJhob5qt72venX6qpUQx3NihTX3h1h3w2MFUHa65WfuRM1HgZv9Jp jo7hei3NaLkaEHASrzkrXBKewNEMUB3TdIomseBOc5Wi3iUr6m32+Bir2Jbo14CB 95kz9DWLfxDbSf8DA+bbsfLuQH7tPZOvXG493gnz3JzajAc+4epeV1Vo4OpF56np NBeq/2sEtxTV3Q5i2WSrv/+Rb+B8+eLE3o2OyMp4tCS8gNBwaTEwGwv6YLQwv/RR CvtqMiI09Qq+bQxodAfcZvsY1m06jS5EOx2ztfRGNzXOh7bFmTeok0Yz7wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFAgErOaUb7cBuyxF4wrK/qZtrC96MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzViY2Vl MC01MTJlLTQxZjQtOGQ2Yi05NWQxNjM2NGRiYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNWJjZWUw LTUxMmUtNDFmNC04ZDZiLTk1ZDE2MzY0ZGJiOS8xL0NBU3M1cFJ2dHdHN0xFWGpD c3ItcG0yc0wzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfADEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNNIDANBgkqhkiG9w0BAQsFAAOCAQEALbupZYB4RS/ykD7D2BXCzlkvHBAg R3irgi4HoH7LOeTVmpdxCdjyNQHrnsRFyUhJFZtm1GXUKDmBK9R5VS3KdV8OVTOF qXcD1pnhYT0SKLJZSUwY3VGmucSr2zOOEEtuXghnhZK5UJrsJ/EGid+UD6AmD5Ie dH77qiRFQpHgUkiasjiJG8skA1P/r1lKrZq7vffCdvpGClcTj8I01Xi6beUt9bjv 6Zhh7vguWFS/pxpHiNAINExRQmQWcdG1WyMoIvtn+uPsMgQ1jNfrUjoxTWFwi9d/ mXwdWthk2z5l76FRE6/3qIc3yCdOohaxRp4iF2eSQfksXkTtrbHx15vQUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:10 2026 by rpki-client