This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer (raw, json) Hash identifier: QceDJlkNEpNMg3CMd89hv+NkNg9SDZBDpnBCWrHexi4= Subject key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB645E23C76CA4A76F56CED667380 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43515 IP: 193.142.125.0/24 IP: 193.186.4.0/24 IP: 193.200.222.0/24 IP: 194.110.194.0/24 IP: 2a00:1450::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b6:45:e2:3c:76:ca:4a:76:f5:6c:ed:66:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=379cd67c0c18959239358553229e91f543cc5a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:1a:be:0a:5a:08:2d:62:4e:98:f4:cf:2c: 81:5a:88:e2:69:2f:b9:5d:74:54:82:87:e0:51:6f: 30:48:11:19:e5:0e:09:87:ea:98:77:e0:f3:8a:10: fa:f8:9d:7b:fa:f3:2d:97:9f:cf:0d:ee:4b:08:18: f9:e0:3f:bc:41:1f:dc:33:bd:2b:3f:bf:40:34:38: d8:c6:1d:f7:01:ee:b0:25:ba:70:4a:87:94:10:f3: f2:79:c6:50:1d:06:a3:eb:f2:a6:9a:8b:d8:28:b1: a0:1f:73:d2:57:1a:c2:b4:a9:e6:d9:d2:c9:84:ca: b8:63:54:7e:28:5b:ce:e6:92:48:37:24:05:68:7b: 67:8f:a3:8f:77:69:e2:74:cd:2a:bd:46:07:66:9e: 20:a1:16:86:27:97:e1:9a:a7:8b:46:84:d2:63:e7: 54:65:03:b0:ee:4c:8f:a2:a9:b4:5a:be:52:6f:15: 24:89:17:ec:b2:3b:bc:56:f9:06:8a:50:6d:a2:35: 66:7f:17:cf:f8:2e:8a:40:e1:e9:77:62:5b:19:ca: 08:96:76:bc:b9:02:53:e8:45:04:c1:38:2b:23:b8: 1b:9a:ff:fb:69:6e:79:30:e5:e2:9a:6a:06:f9:4b: 46:4f:18:35:40:51:4f:4f:20:e5:ba:bc:ed:25:40: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.125.0/24 193.186.4.0/24 193.200.222.0/24 194.110.194.0/24 IPv6: 2a00:1450::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43515 Signature Algorithm: sha256WithRSAEncryption 90:46:0a:31:b3:af:42:b3:b8:bf:1d:b7:1d:84:b2:c3:74:5c: 3d:86:18:73:4a:81:7a:66:68:06:83:ed:f7:8b:13:d6:b8:9b: 60:56:bb:20:6b:36:f8:4a:fc:a8:c6:87:66:c4:c2:06:8d:e5: 50:8d:f0:f2:2e:9f:ce:b8:bd:7c:1a:fd:71:0e:34:b1:20:36: b4:b4:3f:ae:5d:dd:30:8e:d9:60:74:79:cc:19:57:e3:6a:53: a7:bd:2d:32:d4:06:22:af:0a:e7:2b:04:6c:8e:ad:51:17:e3: 56:62:10:22:51:dd:a2:95:fe:90:2c:c8:15:a9:58:61:b2:3a: bf:dd:3f:ea:f2:75:f5:77:03:9e:02:ba:6b:5c:4d:63:47:ec: ea:ca:7a:a6:cb:4f:4c:99:e7:65:ea:8b:90:3a:05:59:b9:d3: 95:33:1a:07:eb:7f:a0:fd:96:aa:04:8a:b9:0d:21:6b:06:36: b2:49:53:3c:d8:c4:c8:ee:ed:d7:0e:f3:5d:c1:03:08:fb:01: 2e:b0:1f:b8:28:7f:04:3c:3f:f9:29:3c:4e:10:97:1c:92:82: 90:ce:3d:a9:11:72:fc:a2:82:19:29:ca:bb:fd:f7:a7:29:25: 2e:74:23:6f:be:1f:a4:ea:16:83:1e:65:ba:30:a9:c6:21:ab: 56:82:36:96 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt57LZF4jx2ykp29WztZnOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzljZDY3YzBjMTg5NTkyMzkzNTg1NTMyMjllOTFmNTQzY2M1YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvggavgpaCC1iTpj0zyyBWojiaS+5 XXRUgofgUW8wSBEZ5Q4Jh+qYd+DzihD6+J17+vMtl5/PDe5LCBj54D+8QR/cM70r P79ANDjYxh33Ae6wJbpwSoeUEPPyecZQHQaj6/KmmovYKLGgH3PSVxrCtKnm2dLJ hMq4Y1R+KFvO5pJINyQFaHtnj6OPd2nidM0qvUYHZp4goRaGJ5fhmqeLRoTSY+dU ZQOw7kyPoqm0Wr5SbxUkiRfssju8VvkGilBtojVmfxfP+C6KQOHpd2JbGcoIlna8 uQJT6EUEwTgrI7gbmv/7aW55MOXimmoG+UtGTxg1QFFPTyDlurztJUBQgwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFDec1nwMGJWSOTWFUyKekfVDzFpfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2E2MGMy OS03NGFhLTRiMmItOTA2Ni05OWJiYmFmZTljNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvYTYwYzI5 LTc0YWEtNGIyYi05MDY2LTk5YmJiYWZlOWM0Yi8xL041eldmQXdZbFpJNU5ZVlRJ cDZSOVVQTVdsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwY59AwQAwboEAwQAwcjeAwQAwm7CMA0EAgAC MAcDBQMqABRQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCp+zANBgkqhkiG9w0B AQsFAAOCAQEAkEYKMbOvQrO4vx23HYSyw3RcPYYYc0qBemZoBoPt94sT1ribYFa7 IGs2+Er8qMaHZsTCBo3lUI3w8i6fzri9fBr9cQ40sSA2tLQ/rl3dMI7ZYHR5zBlX 42pTp70tMtQGIq8K5ysEbI6tURfjVmIQIlHdopX+kCzIFalYYbI6v90/6vJ19XcD ngK6a1xNY0fs6sp6pstPTJnnZeqLkDoFWbnTlTMaB+t/oP2WqgSKuQ0hawY2sklT PNjEyO7t1w7zXcEDCPsBLrAfuCh/BDw/+Sk8ThCXHJKCkM49qRFy/KKCGSnKu/33 pyklLnQjb74fpOoWgx5lujCpxiGrVoI2lg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:57:41 2026 by rpki-client