This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer File: G5gPIqWVKk75pOxKng0MNR_slFQ.cer (raw, json) Hash identifier: GTB/MMn8Ye+9VmdOm6209IBJowZ3yUq/TRqyLFrsxRk= Subject key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB2CAEBFAAA454F17B6B910E7382E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25560 IP: 62.216.160.0/19 IP: 85.199.128.0/18 IP: 95.143.160.0/20 IP: 147.78.108.0/22 IP: 217.24.208.0/20 IP: 2001:1a50::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b2:ca:eb:fa:aa:45:4f:17:b6:b9:10:e7:38:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:41:f4:ac:e5:94:81:2f:72:0e:7c:4f:6c: f0:c9:df:78:2e:76:cb:ed:ec:d2:4d:f1:ad:1f:7d: 7c:9a:92:db:c1:97:60:45:5c:2d:64:13:69:2c:3e: 9f:71:94:77:44:ae:ff:55:33:e1:4c:d3:69:a4:12: 87:5e:cd:e8:c0:6d:8c:0a:57:33:c7:fd:f4:5b:f5: a3:a5:34:9a:72:e4:fa:6b:fe:ff:1e:bc:e8:0c:08: 37:44:24:76:01:2a:0d:92:ef:f1:49:34:ed:89:4a: af:17:2f:27:93:7d:54:de:e2:0d:af:12:f3:f5:39: f8:4d:2e:ba:ef:20:ef:b4:27:75:c1:65:e5:79:92: 45:d2:5d:a4:7f:3f:34:06:40:06:a9:dd:21:24:ea: 6e:35:68:e0:a5:17:c4:88:69:bd:37:56:3e:93:21: f3:b8:9b:2a:15:7e:cb:76:f8:37:9d:c7:1e:27:c1: be:71:75:9e:51:af:c4:bc:07:31:1e:75:e2:d3:21: 19:9d:93:e2:0f:b1:56:92:86:8d:28:22:50:6c:08: 94:73:78:b3:07:fe:9b:c3:c6:64:41:8f:f3:f0:e1: 67:f2:ef:7a:ac:3c:e3:f4:d9:0f:60:67:be:19:d0: 1c:e4:bb:68:45:07:54:8f:d0:5f:f7:71:24:fa:f7: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.216.160.0/19 85.199.128.0/18 95.143.160.0/20 147.78.108.0/22 217.24.208.0/20 IPv6: 2001:1a50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25560 Signature Algorithm: sha256WithRSAEncryption 3c:d6:bf:32:c1:3b:46:ce:e9:d4:8e:84:b7:ad:f4:e5:72:bf: 4f:3d:e0:b3:9e:82:f4:9b:66:e3:35:f0:41:84:6a:2e:89:2b: 19:b3:a7:de:3d:c4:0d:a8:69:13:a8:5e:f3:b4:77:f9:9c:de: 55:c3:ac:d0:7f:f3:54:65:d8:fe:bd:fc:76:82:10:51:7a:a7: 49:7b:33:4b:11:f8:32:f8:d9:39:3f:d5:40:b3:d5:9f:35:af: 3f:fa:46:c1:1d:d5:0e:86:52:b0:f6:59:84:ba:a7:0d:a0:2f: 1c:b3:c4:c9:f3:13:21:b0:31:12:ff:55:54:39:4e:f4:2c:7b: 47:d6:60:49:fe:39:ad:7e:24:ed:2c:a1:ac:38:d9:63:0e:9c: 04:ed:83:91:68:6b:2c:db:0c:86:33:bf:26:47:4b:dc:c1:c3: 09:b4:5d:fd:77:b0:d6:e0:31:8b:6a:64:5d:69:32:42:dc:8e: 55:8a:d8:e3:d8:eb:93:9d:f9:92:4f:e8:da:39:d9:9a:82:51: 07:b3:9f:7b:59:5d:0b:8c:ca:7b:5f:60:92:97:75:cb:8e:41: ac:bf:d7:c9:53:48:0a:fd:4e:0c:0e:4a:8a:bf:53:4f:2e:ba: cb:1c:02:2f:e1:0f:81:ed:9c:ba:65:27:4c:ba:6f:20:e3:23: 6e:ba:e5:3b -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt9XLLK6/qqRU8XtrkQ5zguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjk4MGYyMmE1OTUyYTRlZjlhNGVjNGE5ZTBkMGMzNTFmZWM5NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMpB9KzllIEvcg58T2zwyd94LnbL 7ezSTfGtH318mpLbwZdgRVwtZBNpLD6fcZR3RK7/VTPhTNNppBKHXs3owG2MClcz x/30W/WjpTSacuT6a/7/HrzoDAg3RCR2ASoNku/xSTTtiUqvFy8nk31U3uINrxLz 9Tn4TS667yDvtCd1wWXleZJF0l2kfz80BkAGqd0hJOpuNWjgpRfEiGm9N1Y+kyHz uJsqFX7Ldvg3ncceJ8G+cXWeUa/EvAcxHnXi0yEZnZPiD7FWkoaNKCJQbAiUc3iz B/6bw8ZkQY/z8OFn8u96rDzj9NkPYGe+GdAc5LtoRQdUj9Bf93Ek+venvQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFBuYDyKllSpO+aTsSp4NDDUf7JRUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3Lzc3NGUy Ni1kMDhmLTQ2ZDMtYWQwNi0zNDdiNTY2ZGRiZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNzc0ZTI2 LWQwOGYtNDZkMy1hZDA2LTM0N2I1NjZkZGJkMS8xL0c1Z1BJcVdWS2s3NXBPeEtu ZzBNTlJfc2xGUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFPtigAwQGVceAAwQEX4+gAwQCk05sAwQE2RjQ MA0EAgACMAcDBQAgARpQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmPYMA0GCSqG SIb3DQEBCwUAA4IBAQA81r8ywTtGzunUjoS3rfTlcr9PPeCznoL0m2bjNfBBhGou iSsZs6fePcQNqGkTqF7ztHf5nN5Vw6zQf/NUZdj+vfx2ghBReqdJezNLEfgy+Nk5 P9VAs9WfNa8/+kbBHdUOhlKw9lmEuqcNoC8cs8TJ8xMhsDES/1VUOU70LHtH1mBJ /jmtfiTtLKGsONljDpwE7YORaGss2wyGM78mR0vcwcMJtF39d7DW4DGLamRdaTJC 3I5Vitjj2OuTnfmST+jaOdmaglEHs597WV0LjMp7X2CSl3XLjkGsv9fJU0gK/U4M DkqKv1NPLrrLHAIv4Q+B7Zy6ZSdMum8g4yNuuuU7 -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:54 2026 by rpki-client