This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer File: N5FWc7KL362ywgGaxo0EZP0htxo.cer (raw, json) Hash identifier: DptMcuyR0EEceb7YUErmhpA1f4KfSxo+QbKcS2VC47k= Subject key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC0DECD96DC404FB22807EFE3D565 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 145.32.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c0:de:cd:96:dc:40:4f:b2:28:07:ef:e3:d5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:f2:e5:2c:44:6a:90:11:79:d2:73:be:aa: 1b:59:d4:8b:07:8c:cd:0d:a6:23:cf:61:31:46:4c: 89:cb:27:ca:96:06:e2:cb:f2:42:c4:1f:1c:d3:d4: 6a:48:30:05:6d:3d:c2:c6:d8:cf:24:eb:98:5d:e9: 6a:b6:fe:48:4f:15:c4:6e:6d:7a:e4:b1:4e:25:d2: 19:af:b5:db:83:ef:c2:ac:01:77:45:36:9a:68:30: 0e:06:b9:36:7b:01:f7:39:96:6a:7f:19:1d:dc:a5: 26:bb:a4:e7:44:0f:39:06:b5:9e:8b:85:58:99:e7: d6:44:ee:0f:0d:17:27:63:ef:b8:86:c7:1b:86:22: 7e:59:6d:df:6e:8d:c7:70:c5:62:50:fa:be:00:a6: 52:94:6e:19:fd:b2:ed:ff:9a:72:f6:93:3f:8e:af: 09:5c:cb:67:b2:66:15:8f:06:75:12:ee:b5:72:66: 68:17:b3:92:08:df:39:2c:7f:8b:d8:e8:7b:1a:0f: 74:08:15:66:3d:9b:58:be:3a:69:49:f9:6c:5f:19: 52:20:03:37:0f:51:93:c5:68:74:a4:61:31:bd:be: cc:4b:d2:37:83:7d:92:38:fe:5e:98:48:07:ba:0d: d7:e9:b9:c3:0d:aa:42:a8:ab:6f:f6:d4:55:cb:81: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:4e:bb:9e:d4:ed:47:0b:8d:ff:9f:97:04:37:16:b6:dc:aa: 4e:b2:1b:5c:a5:5a:bd:ed:13:d9:76:1f:ad:c2:7a:b9:9b:2a: 03:8f:1a:48:e5:9d:70:aa:11:05:94:0a:d8:9a:02:88:66:41: d2:11:5c:f8:16:e6:0b:6c:36:64:67:bd:28:81:d4:0f:e9:1f: 45:bb:73:a8:2c:18:f8:55:e3:a6:e4:81:92:45:24:e3:05:56: b1:34:ed:21:34:d5:28:e4:7d:ee:c2:dc:64:bb:be:66:96:d2: 08:a4:37:72:e0:08:5e:89:76:43:38:26:ee:d7:41:4b:0a:6a: 4b:0f:b3:dd:cc:cf:ac:d6:fd:6d:dc:48:ea:67:4a:36:4f:7b: da:ed:41:12:8d:3e:25:d3:41:01:84:93:ee:27:be:94:8b:dd: 8a:c2:66:e5:00:40:e8:b2:a2:49:38:08:d9:d1:ed:3e:1a:ff: 72:a3:52:00:7a:92:cd:26:b4:d2:b6:2c:86:68:a4:25:b1:47: 5f:7c:1d:8c:32:aa:89:90:03:6d:4e:12:73:b5:48:01:2c:3a: c4:8d:bc:29:db:45:6a:8d:b5:25:9a:2c:6e:0f:9b:aa:f5:d2: 4a:a4:80:fd:69:dd:9c:dc:68:34:27:df:04:62:0c:01:f0:c4: 2c:f9:f8:da -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt6WsDezZbcQE+yKAfv49VlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzkxNTY3M2IyOGJkZmFkYjJjMjAxOWFjNjhkMDQ2NGZkMjFiNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7y5SxEapARedJzvqobWdSLB4zN DaYjz2ExRkyJyyfKlgbiy/JCxB8c09RqSDAFbT3CxtjPJOuYXelqtv5ITxXEbm16 5LFOJdIZr7Xbg+/CrAF3RTaaaDAOBrk2ewH3OZZqfxkd3KUmu6TnRA85BrWei4VY mefWRO4PDRcnY++4hscbhiJ+WW3fbo3HcMViUPq+AKZSlG4Z/bLt/5py9pM/jq8J XMtnsmYVjwZ1Eu61cmZoF7OSCN85LH+L2Oh7Gg90CBVmPZtYvjppSflsXxlSIAM3 D1GTxWh0pGExvb7MS9I3g32SOP5emEgHug3X6bnDDapCqKtv9tRVy4Hb+wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFDeRVnOyi9+tssIBmsaNBGT9IbcaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzRlYTRm Ny1kNzBlLTQyYTItYWZkNy0zZTNhMTg4ZjQ5ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvNGVhNGY3 LWQ3MGUtNDJhMi1hZmQ3LTNlM2ExODhmNDlkZS8xL041RldjN0tMMzYyeXdnR2F4 bzBFWlAwaHR4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAkSAwDQYJKoZIhvcNAQELBQADggEBAD5Ou57U 7UcLjf+flwQ3Frbcqk6yG1ylWr3tE9l2H63CermbKgOPGkjlnXCqEQWUCtiaAohm QdIRXPgW5gtsNmRnvSiB1A/pH0W7c6gsGPhV46bkgZJFJOMFVrE07SE01Sjkfe7C 3GS7vmaW0gikN3LgCF6JdkM4Ju7XQUsKaksPs93Mz6zW/W3cSOpnSjZPe9rtQRKN PiXTQQGEk+4nvpSL3YrCZuUAQOiyokk4CNnR7T4a/3KjUgB6ks0mtNK2LIZopCWx R198HYwyqomQA21OEnO1SAEsOsSNvCnbRWqNtSWaLG4Pm6r10kqkgP1p3ZzcaDQn 3wRiDAHwxCz5+No= -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:34 2026 by rpki-client