This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer File: S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer (raw, json) Hash identifier: PRe/+hPkzoQMpdbW6jefEDQpfouZWHcAlnD7PmkwF20= Subject key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82A187A16238E6FF7D001B4888ED81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 140.150.0.0 -- 140.150.47.255 IP: 146.103.64.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a1:87:a1:62:38:e6:ff:7d:00:1b:48:88:ed:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b9331fa7be470dc179e16c306e98c6c731a575c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:2c:eb:ce:12:64:b4:bf:9c:9b:54:f3:76: ec:23:6f:31:98:4c:53:25:fc:07:df:0c:28:14:a5: de:65:b0:ed:17:6f:c0:91:9e:21:18:61:f6:10:7c: 4e:c1:5a:31:c9:b4:73:65:9b:0e:27:ef:4f:ab:4d: 8c:12:17:6d:80:7e:83:bd:45:30:48:01:1c:73:be: 79:d7:c3:85:4b:11:db:85:87:04:d8:01:a7:dd:8a: 19:90:af:d5:a0:5d:91:d7:30:8a:58:0d:7b:1d:f9: fe:60:76:32:c0:d4:33:d1:df:6b:ca:11:2a:97:d2: 0d:18:24:2f:6b:55:da:74:ca:19:4f:04:7f:41:95: 12:fe:04:6c:c9:7b:b5:80:7e:b3:e5:9c:c0:01:01: 1c:26:0f:9b:6a:4e:f7:a0:62:c4:cd:f1:d2:37:f2: 73:6c:c8:8b:66:ba:02:54:f4:88:f4:de:4d:d1:6d: 0c:dd:c3:fb:ae:77:56:7a:70:83:26:8c:9a:4b:fe: 29:ec:e1:3f:ff:29:67:02:a7:8e:d3:f0:71:33:68: b0:61:1f:e9:49:75:28:b2:cd:3e:e4:dd:d9:a7:f4: 8f:05:0b:ec:e0:c2:25:c4:c9:91:03:8d:be:3f:6b: e5:99:b1:3e:1e:e8:96:f9:5c:a1:17:2a:43:40:8a: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.0.0-140.150.47.255 146.103.64.0/19 Signature Algorithm: sha256WithRSAEncryption 06:fb:b8:98:ee:db:48:fa:13:de:80:4e:f9:79:e9:36:8c:a8: 88:c9:b9:47:d5:0a:d0:4c:75:a5:7f:4d:e6:45:6c:ca:cb:e6: 15:14:06:6f:f2:f9:07:a2:ec:4e:dd:bb:ac:4b:8c:44:f5:16: e9:ed:ce:c2:d0:f8:5a:e7:98:4d:5f:72:62:d8:c7:7f:f5:f0: 14:e9:58:31:e5:fb:31:40:b7:ba:cb:77:d0:56:f1:72:ff:19: c2:1e:6f:fd:57:f2:69:1e:1a:ca:53:98:ee:1e:a9:51:40:8b: db:b2:72:24:91:dd:01:15:7f:b8:07:72:db:fc:d2:fb:79:6f: 76:52:db:9b:87:1a:87:af:a1:17:b2:7c:fa:3b:67:f7:3a:9b: 58:e3:46:25:76:7b:be:6c:30:63:13:94:62:94:42:c3:5c:d1: cf:7b:2f:46:a8:c4:3d:68:cf:a7:15:f6:cd:99:21:dd:33:5e: 2a:fd:a7:bc:61:75:2a:99:90:d0:c1:6c:f0:95:bf:6e:36:0a: a4:f6:17:f7:39:3e:62:80:6c:7d:f5:c2:c2:a2:7e:5d:26:8b: 90:57:14:c8:1d:b5:1a:c1:f9:14:34:29:d0:af:cf:c0:85:9c: 05:7a:c0:ea:d0:d5:cb:f2:9e:5e:14:78:71:0e:00:0f:97:f8: 6d:42:53:34 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISAZt/gqGHoWI45v99ABtIiO2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjkzMzFmYTdiZTQ3MGRjMTc5ZTE2YzMwNmU5OGM2YzczMWE1NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf4s684SZLS/nJtU83bsI28xmExT JfwH3wwoFKXeZbDtF2/AkZ4hGGH2EHxOwVoxybRzZZsOJ+9Pq02MEhdtgH6DvUUw SAEcc75518OFSxHbhYcE2AGn3YoZkK/VoF2R1zCKWA17Hfn+YHYywNQz0d9ryhEq l9INGCQva1XadMoZTwR/QZUS/gRsyXu1gH6z5ZzAAQEcJg+bak73oGLEzfHSN/Jz bMiLZroCVPSI9N5N0W0M3cP7rndWenCDJoyaS/4p7OE//ylnAqeO0/BxM2iwYR/p SXUoss0+5N3Zp/SPBQvs4MIlxMmRA42+P2vlmbE+HuiW+VyhFypDQIpdYQIDAQAB o4ICkTCCAo0wHQYDVR0OBBYEFEuTMfp75HDcF54WwwbpjGxzGldcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzViNDhh Ny1hMGQ3LTQzZjItYTM2Mi04YjJiNDczOGIxY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNWI0OGE3 LWEwZDctNDNmMi1hMzYyLThiMmI0NzM4YjFjYy8xL1M1TXgtbnZrY053WG5oYkRC dW1NYkhNYVYxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUF BwEHAQH/BB0wGzAZBAIAATATMAsDAwGMlgMEBIyWIAMEBZJnQDANBgkqhkiG9w0B AQsFAAOCAQEABvu4mO7bSPoT3oBO+XnpNoyoiMm5R9UK0Ex1pX9N5kVsysvmFRQG b/L5B6LsTt27rEuMRPUW6e3OwtD4WueYTV9yYtjHf/XwFOlYMeX7MUC3ust30Fbx cv8Zwh5v/VfyaR4aylOY7h6pUUCL27JyJJHdARV/uAdy2/zS+3lvdlLbm4cah6+h F7J8+jtn9zqbWONGJXZ7vmwwYxOUYpRCw1zRz3svRqjEPWjPpxX2zZkh3TNeKv2n vGF1KpmQ0MFs8JW/bjYKpPYX9zk+YoBsffXCwqJ+XSaLkFcUyB21GsH5FDQp0K/P wIWcBXrA6tDVy/KeXhR4cQ4AD5f4bUJTNA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:30 2026 by rpki-client