This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer File: V5Sv215qGIV4CSClT_qCQI6oW6E.cer (raw, json) Hash identifier: 8X1M7nXvFl+cSaSko3VkQ0HL2lgzteNtgPIBnYI01Lw= Subject key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC80EC829AD198D06705C29B500E247 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.236.224.0/20 IP: 185.2.48.0/22 IP: 2a03:f900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0e:c8:29:ad:19:8d:06:70:5c:29:b5:00:e2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:f8:27:c5:46:66:96:4c:68:b7:af:a7:ba: 8b:7f:f4:9d:b4:38:63:a7:af:31:ca:9e:e3:52:16: 9c:f5:ed:d3:a5:7f:65:0f:58:fa:f4:e5:37:ab:d6: 5c:55:6c:63:f3:ab:a9:27:65:86:f7:b9:9a:2c:e0: 05:f2:64:79:57:ea:e0:27:90:8f:0e:6b:85:50:17: 3e:21:37:fd:9f:a1:bb:b9:45:d7:13:5f:2a:73:73: 6a:95:59:18:12:c6:99:82:3b:12:74:81:20:a9:eb: 15:05:f2:65:b1:56:25:0f:6e:3b:d4:06:04:c1:db: 7c:c0:2c:da:9e:9f:f2:11:ce:2c:f6:1f:e6:78:fe: c0:4c:63:32:ce:c5:03:ab:58:2c:3d:41:33:79:c5: 19:ad:29:c5:3d:c7:0a:99:af:75:76:73:9a:6f:af: ec:4e:aa:7b:00:60:34:92:4e:c7:63:e1:e0:de:a1: 72:f6:d8:ab:00:8f:c2:28:3d:34:d2:fa:59:19:06: b7:c3:ba:5d:f6:80:ff:23:a0:52:05:f6:5f:a4:a5: ea:10:a1:b8:22:34:04:b1:aa:9a:f9:93:dd:bb:24: bb:63:3a:49:32:3e:58:03:ba:ee:8d:4e:91:98:e6: 4b:02:d6:57:70:51:51:dd:c1:21:44:30:cb:00:2c: fa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.224.0/20 185.2.48.0/22 IPv6: 2a03:f900::/29 Signature Algorithm: sha256WithRSAEncryption af:2c:54:b6:31:c2:b2:a4:c8:0d:3c:b7:a4:9d:4f:4f:63:33: ad:ef:34:f9:d0:31:61:b0:bd:48:da:68:67:49:77:c8:8a:28: f6:6e:48:a6:e5:c1:ad:11:bc:93:84:87:d1:66:72:b7:58:90: 3b:d9:f2:38:95:b0:ed:54:01:45:59:28:59:1e:64:83:5a:14: 2e:93:e9:91:0d:0c:e4:45:5c:b2:d6:ab:a9:44:55:e6:67:72: d2:13:d2:ef:58:ce:9c:39:39:8b:8b:cd:c8:10:55:73:25:7b: d4:34:6f:43:45:18:d5:89:95:1a:b0:27:44:fe:d7:a6:f1:cf: c7:19:44:85:df:0e:60:b6:53:83:ef:f7:06:f9:03:71:0d:03: 3b:75:f6:91:23:9e:82:59:8b:46:4b:b0:89:1a:d6:a7:79:e9: 46:1b:a3:8d:5c:ab:f8:cb:8f:d2:8a:99:43:76:c1:d7:ef:6f: 61:69:9d:94:b1:e6:fd:82:0a:40:a2:d6:80:cb:96:0b:4f:12: 89:3c:0f:55:ac:57:73:d5:df:4c:d3:15:f9:9c:47:07:78:3d: ce:10:e9:f6:05:ea:90:24:b1:1b:68:0f:25:78:79:04:8c:c3: 0b:05:d4:22:4a:30:a9:90:fe:4d:a5:0c:17:bd:60:dc:69:db: d0:73:bc:56 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6yA7IKa0ZjQZwXCm1AOJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Nzk0YWZkYjVlNmExODg1NzgwOTIwYTU0ZmZhODI0MDhlYTg1YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuz4J8VGZpZMaLevp7qLf/SdtDhj p68xyp7jUhac9e3TpX9lD1j69OU3q9ZcVWxj86upJ2WG97maLOAF8mR5V+rgJ5CP DmuFUBc+ITf9n6G7uUXXE18qc3NqlVkYEsaZgjsSdIEgqesVBfJlsVYlD2471AYE wdt8wCzanp/yEc4s9h/meP7ATGMyzsUDq1gsPUEzecUZrSnFPccKma91dnOab6/s Tqp7AGA0kk7HY+Hg3qFy9tirAI/CKD000vpZGQa3w7pd9oD/I6BSBfZfpKXqEKG4 IjQEsaqa+ZPduyS7YzpJMj5YA7rujU6RmOZLAtZXcFFR3cEhRDDLACz6WQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFFeUr9teahiFeAkgpU/6gkCOqFuhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2RkY2U0 ZC05OTEyLTQ4N2QtYjU1ZC00N2Q4MmE0MWE4ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZGRjZTRk LTk5MTItNDg3ZC1iNTVkLTQ3ZDgyYTQxYThmMy8xL1Y1U3YyMTVxR0lWNENTQ2xU X3FDUUk2b1c2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEsuzgAwQCuQIwMA0EAgACMAcDBQMqA/kAMA0G CSqGSIb3DQEBCwUAA4IBAQCvLFS2McKypMgNPLeknU9PYzOt7zT50DFhsL1I2mhn SXfIiij2bkim5cGtEbyThIfRZnK3WJA72fI4lbDtVAFFWShZHmSDWhQuk+mRDQzk RVyy1qupRFXmZ3LSE9LvWM6cOTmLi83IEFVzJXvUNG9DRRjViZUasCdE/tem8c/H GUSF3w5gtlOD7/cG+QNxDQM7dfaRI56CWYtGS7CJGtaneelGG6ONXKv4y4/SiplD dsHX729haZ2Useb9ggpAotaAy5YLTxKJPA9VrFdz1d9M0xX5nEcHeD3OEOn2BeqQ JLEbaA8leHkEjMMLBdQiSjCpkP5NpQwXvWDcadvQc7xW -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:39 2026 by rpki-client