This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer File: V5NTy0LgxPulyuJTpXaLwfJGW5k.cer (raw, json) Hash identifier: dH6qingcFl3YQvL+mae9+1UdKXdjTB7InAH8w3pYJrk= Subject key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C674CAA846496B8984CE3E8D2DC70A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.25.12.0/22 IP: 2a00:7be0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:74:ca:a8:46:49:6b:89:84:ce:3e:8d:2d:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:a1:72:fb:bc:fe:40:8d:1b:7f:bc:d3:b4: 37:75:9e:e2:58:59:ab:30:0a:d0:fe:d9:84:fd:0b: d0:7d:23:39:7f:61:92:7b:c0:d9:49:e2:1c:3c:75: 7a:91:3e:2b:d4:da:14:18:bb:66:7f:b8:8a:5f:3a: 2b:c7:02:53:c1:ba:83:86:d2:1a:e2:ea:36:a0:82: 1c:2f:5e:13:6a:70:c1:41:16:87:e4:87:8e:e1:ca: ca:1c:42:47:f8:b8:0c:81:b2:19:95:4c:c3:7f:c9: 3d:d5:72:74:20:75:64:f8:eb:4f:1d:99:13:9d:eb: 59:24:d6:f0:52:42:db:99:67:dd:13:2f:2a:de:58: 1d:07:c3:46:24:8a:6b:76:cf:41:44:8f:90:61:ea: f8:84:3c:06:fd:f3:88:06:a4:dd:4c:29:ea:30:61: a6:69:eb:4d:8a:c3:84:2d:69:7f:69:27:d8:53:90: bc:51:9d:44:a8:2d:6d:74:4d:5c:92:6a:f0:7a:c6: 56:e7:31:c7:85:49:da:ef:12:83:10:f6:a8:52:ef: 1e:82:ae:c3:60:80:db:32:95:34:25:c0:f0:2b:07: 7c:40:f7:d7:4f:2e:af:b1:0b:64:c8:7a:40:22:70: 2f:da:77:f1:bb:b2:28:29:94:e1:0e:04:68:4f:d5: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.12.0/22 IPv6: 2a00:7be0::/32 Signature Algorithm: sha256WithRSAEncryption 17:6c:1e:fc:88:f1:1b:8d:56:92:cb:f1:61:e8:a5:72:4d:94: 4c:df:e9:81:92:a3:d8:3f:e4:54:0b:18:63:74:29:ad:78:0f: ab:ad:0e:e6:f4:a9:09:90:ae:ec:5b:51:bc:6f:c3:3e:e3:68: ad:9e:09:35:20:2a:a0:10:ec:b3:66:2b:fa:d5:a2:24:8f:d9: da:ec:cb:a0:1f:db:44:8c:2c:d0:22:e7:e3:08:10:07:e1:95: 77:a1:ac:1f:3b:cc:38:c0:7a:04:5f:b2:27:bd:cd:53:9e:d6: d0:0f:54:f0:8d:d1:23:ec:7c:1f:62:ce:4b:9f:83:67:b8:dd: 1f:ea:fd:29:a8:06:f9:d1:2d:f8:70:0e:a5:40:2d:c4:e3:64: 67:9a:d8:00:83:dc:cf:09:b3:53:3c:4c:8a:4d:c5:b7:26:1b: b1:16:6e:eb:a9:b6:5b:38:da:69:ef:a3:bb:a9:37:ec:42:19: 91:72:4c:ed:5e:ac:5a:af:fa:64:3a:dc:c5:47:3d:9c:d9:07: f7:e5:9c:d9:e1:8b:f8:f0:e6:aa:90:94:1f:e9:c7:a4:c5:4a: e8:0a:68:58:02:30:7b:cf:43:cf:f8:0b:41:82:bf:de:aa:25: 95:8d:46:ff:5e:3f:a0:07:79:e0:b6:3d:4d:fb:b8:ae:8f:47: e4:0a:23:63 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xnTKqEZJa4mEzj6NLccKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzkzNTNjYjQyZTBjNGZiYTVjYWUyNTNhNTc2OGJjMWYyNDY1Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne+hcvu8/kCNG3+807Q3dZ7iWFmr MArQ/tmE/QvQfSM5f2GSe8DZSeIcPHV6kT4r1NoUGLtmf7iKXzorxwJTwbqDhtIa 4uo2oIIcL14TanDBQRaH5IeO4crKHEJH+LgMgbIZlUzDf8k91XJ0IHVk+OtPHZkT netZJNbwUkLbmWfdEy8q3lgdB8NGJIprds9BRI+QYer4hDwG/fOIBqTdTCnqMGGm aetNisOELWl/aSfYU5C8UZ1EqC1tdE1ckmrwesZW5zHHhUna7xKDEPaoUu8egq7D YIDbMpU0JcDwKwd8QPfXTy6vsQtkyHpAInAv2nfxu7IoKZThDgRoT9VsowIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFeTU8tC4MT7pcriU6V2i8HyRluZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzAyY2Nj ZC0wNDMzLTQzMzAtOTgxYy1jNjcyZDY3MzY4NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMDJjY2Nk LTA0MzMtNDMzMC05ODFjLWM2NzJkNjczNjg2Zi8xL1Y1TlR5MExneFB1bHl1SlRw WGFMd2ZKR1c1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRkMMA0EAgACMAcDBQAqAHvgMA0GCSqGSIb3 DQEBCwUAA4IBAQAXbB78iPEbjVaSy/Fh6KVyTZRM3+mBkqPYP+RUCxhjdCmteA+r rQ7m9KkJkK7sW1G8b8M+42itngk1ICqgEOyzZiv61aIkj9na7MugH9tEjCzQIufj CBAH4ZV3oawfO8w4wHoEX7Invc1TntbQD1TwjdEj7HwfYs5Ln4NnuN0f6v0pqAb5 0S34cA6lQC3E42RnmtgAg9zPCbNTPEyKTcW3JhuxFm7rqbZbONpp76O7qTfsQhmR ckztXqxar/pkOtzFRz2c2Qf35ZzZ4Yv48OaqkJQf6cekxUroCmhYAjB7z0PP+AtB gr/eqiWVjUb/Xj+gB3ngtj1N+7iuj0fkCiNj -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:55 2026 by rpki-client