This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer File: D-cy5rJJCT55oaUHy82BlvAYF_o.cer (raw, json) Hash identifier: pm5OeWFUBOI8d2rUlI8vUJJSw3FtJeETu/6RTCETpYo= Subject key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE692D2DDF2B2F83D390717EFD052 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 157.239.128.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e6:92:d2:dd:f2:b2:f8:3d:39:07:17:ef:d0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:3d:81:32:6d:86:97:aa:9a:13:98:73:b8: 8f:2c:d8:7e:d0:bc:fd:28:94:b7:29:7a:92:c5:69: 2f:86:a1:8e:24:e8:54:32:bb:d6:f5:9f:ac:b2:65: 0b:e2:aa:b5:f1:83:55:a0:8a:33:30:8e:4c:6a:f6: a2:29:fd:fd:25:d1:b9:a0:fa:d0:b9:8a:ce:58:d9: 77:e3:73:e0:d9:6a:e0:16:d6:1e:4a:72:38:e8:d1: 53:c0:02:70:88:45:ac:c8:20:63:bb:d3:c0:13:ea: 5e:8c:f5:b5:48:0b:df:f2:9b:71:c6:f2:83:3e:c3: 3a:63:fe:f4:32:b4:52:8e:f1:a7:58:1a:bd:de:d9: 46:1e:2d:42:15:46:c6:1f:05:aa:34:26:6a:6f:2f: ba:17:f0:af:2a:60:b4:ea:c3:14:20:fd:4a:1f:48: e6:04:0b:3a:6b:57:c9:3d:e7:86:f1:95:2c:9e:c0: 7a:55:29:7d:b8:f7:b1:a3:10:4e:94:51:f0:c3:5d: 17:a9:67:f5:f5:f8:3b:fd:59:d3:80:42:d0:e7:f8: ad:81:b6:a6:6d:d9:40:6a:7b:98:78:3f:f7:aa:55: 55:8d:f7:c9:c5:66:c6:ef:cf:b4:04:0a:47:95:62: 57:0c:6b:62:1c:6c:44:13:56:98:40:bb:e3:e8:d7: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.239.128.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:ae:55:42:eb:ba:af:32:c8:bb:b4:5c:4f:e7:59:04:c2:22: af:2f:f3:31:32:79:ed:f6:d1:ed:ce:c6:97:a5:3b:d5:ad:f4: 72:29:2c:b9:a2:23:77:22:9b:32:e7:ed:b1:3d:27:8a:f5:c7: 5c:5b:57:83:91:a1:ac:5b:66:79:a6:12:f3:f5:e6:b3:47:e0: f4:b2:c5:e5:11:fc:91:be:89:c5:5a:e5:0a:ba:fa:8e:73:33: b4:55:8c:0a:7d:a7:69:98:ef:00:05:04:9b:9d:4c:61:5a:ca: f4:66:32:08:85:12:2a:b0:bf:cc:66:4c:a2:df:55:1a:fd:b4: 78:a7:82:e1:94:e0:89:e8:b8:25:20:33:5e:9c:c5:6d:74:e2: 3d:72:62:97:c3:45:e8:40:8b:fe:c9:a1:b2:d2:77:2b:20:02: 8a:4d:92:70:bd:3e:9b:5f:6d:01:dd:5b:ba:d6:e8:9e:cf:37: f5:a4:b5:76:8a:bb:89:a2:00:f3:56:56:09:79:e6:74:1e:2f: 53:ac:28:8d:2a:68:38:b5:7f:82:6d:c9:cc:39:b9:46:70:3c: 23:d5:c4:d2:51:ff:bd:ca:da:6f:02:02:21:0c:fd:aa:13:ab: c3:66:39:6a:1f:85:c4:71:c0:de:8f:c7:52:66:c4:f0:83:86: f8:83:38:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fuaS0t3ysvg9OQcX79BSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmU3MzJlNmIyNDkwOTNlNzlhMWE1MDdjYmNkODE5NmYwMTgxN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEU9gTJthpeqmhOYc7iPLNh+0Lz9 KJS3KXqSxWkvhqGOJOhUMrvW9Z+ssmUL4qq18YNVoIozMI5MavaiKf39JdG5oPrQ uYrOWNl343Pg2WrgFtYeSnI46NFTwAJwiEWsyCBju9PAE+pejPW1SAvf8ptxxvKD PsM6Y/70MrRSjvGnWBq93tlGHi1CFUbGHwWqNCZqby+6F/CvKmC06sMUIP1KH0jm BAs6a1fJPeeG8ZUsnsB6VSl9uPexoxBOlFHww10XqWf19fg7/VnTgELQ5/itgbam bdlAanuYeD/3qlVVjffJxWbG78+0BApHlWJXDGtiHGxEE1aYQLvj6NeeTwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA/nMuaySQk+eaGlB8vNgZbwGBf6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzA4YTlk ZS1jODhkLTRhNDUtOTU4ZS1hMjc3ODk4MjkzYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMDhhOWRl LWM4OGQtNGE0NS05NThlLWEyNzc4OTgyOTNiOS8xL0QtY3k1ckpKQ1Q1NW9hVUh5 ODJCbHZBWUZfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBne+AMA0GCSqGSIb3DQEBCwUAA4IBAQCarlVC 67qvMsi7tFxP51kEwiKvL/MxMnnt9tHtzsaXpTvVrfRyKSy5oiN3Ipsy5+2xPSeK 9cdcW1eDkaGsW2Z5phLz9eazR+D0ssXlEfyRvonFWuUKuvqOczO0VYwKfadpmO8A BQSbnUxhWsr0ZjIIhRIqsL/MZkyi31Ua/bR4p4LhlOCJ6LglIDNenMVtdOI9cmKX w0XoQIv+yaGy0ncrIAKKTZJwvT6bX20B3Vu61uiezzf1pLV2iruJogDzVlYJeeZ0 Hi9TrCiNKmg4tX+CbcnMOblGcDwj1cTSUf+9ytpvAgIhDP2qE6vDZjlqH4XEccDe j8dSZsTwg4b4gzh/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:15 2026 by rpki-client