This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer File: d5pKQpXGOP3nYPPNpHbYv8JxErI.cer (raw, json) Hash identifier: Jf12P/gJothbqEybl5pzfD13lj4yPX4Bsu6n8ppxTDU= Subject key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA87D8AA33FCC8FEED53D4F8615408 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56449 IP: 91.225.156.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:87:d8:aa:33:fc:c8:fe:ed:53:d4:f8:61:54:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:53:89:4e:56:f6:c0:a3:33:ce:65:44:00: 4d:1a:91:42:8a:2d:c0:15:a4:5a:ae:26:27:58:d0: 04:3c:7d:b4:48:d0:39:ef:60:80:70:0f:ba:66:6f: 93:b8:90:e7:26:fb:a7:dd:f8:d7:f0:e7:90:6e:2b: 55:79:69:c8:f0:ed:3c:a6:be:52:1a:a1:d1:db:75: d4:c9:72:b6:2e:0e:83:66:a0:a7:f8:a1:f1:c3:79: bf:75:1c:c4:c1:44:08:a3:9f:96:2f:b9:5f:f2:95: c9:57:a0:32:56:7e:94:25:de:36:90:08:1d:e9:d9: 2b:7a:cb:d4:78:8b:f8:cd:e6:fd:55:64:72:55:9c: b5:3c:bb:96:c3:83:c2:53:4c:9b:e1:cf:bf:f0:77: 25:3a:61:5a:81:3a:68:a4:fc:fc:6a:9d:3b:07:9f: 04:74:7a:40:94:83:ad:1c:ff:70:4b:42:6f:35:ae: 10:63:cf:bb:37:77:6f:4f:fd:0e:9a:ef:49:52:19: 25:1a:74:f5:8d:38:d0:da:08:55:bc:2b:4d:01:80: 83:f8:b8:3e:58:ad:0d:62:42:ec:0e:5e:09:ff:1c: 67:6c:6c:98:69:79:09:1d:c3:26:9e:e4:5a:ab:ff: 50:90:8d:62:24:cd:f1:69:f3:b0:61:4e:16:ce:10: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.156.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56449 Signature Algorithm: sha256WithRSAEncryption 8e:a4:8a:d7:44:1b:45:22:58:01:6f:de:c9:45:7c:b0:14:16: c6:66:42:a4:76:f6:e2:9d:aa:8d:c5:c1:5d:a7:df:0d:5e:dc: b9:ae:ff:21:1a:0e:53:19:a9:fc:46:3c:5c:37:98:c2:56:d8: 47:d3:36:5e:b4:2e:38:16:ec:f8:41:15:ce:27:32:a4:1e:d1: e4:34:82:da:4e:a5:04:a9:1e:31:28:84:62:db:ba:53:15:75: 0b:2a:f4:7c:af:82:c4:a4:f4:2a:79:35:57:05:7c:a4:b7:3a: a2:20:bb:6e:28:3f:f1:5f:e9:d2:91:85:97:fd:b7:07:09:8b: e9:f4:24:1f:ab:e3:85:5a:c7:62:33:4c:05:a8:14:b4:59:26: 08:12:85:0b:78:ee:50:4d:74:e9:4a:f9:ce:f2:14:09:a7:0c: e0:5d:b5:46:89:0c:bf:86:80:45:e3:ff:17:f8:66:f8:59:46: 69:d9:17:33:68:ca:fc:9f:7d:61:a4:30:ec:44:ec:cd:7d:23: 95:a5:7a:ca:ae:e0:05:ce:84:f7:04:fe:3e:44:41:0f:cb:34: 11:88:41:c5:77:92:b3:c7:44:20:66:3f:9a:a0:af:b5:f9:af: 23:24:0d:2c:fb:b1:b1:35:45:65:df:cc:2e:c7:13:b8:e3:43: d7:31:f8:36 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yofYqjP8yP7tU9T4YVQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzlhNGE0Mjk1YzYzOGZkZTc2MGYzY2RhNDc2ZDhiZmMyNzExMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4RTiU5W9sCjM85lRABNGpFCii3A FaRariYnWNAEPH20SNA572CAcA+6Zm+TuJDnJvun3fjX8OeQbitVeWnI8O08pr5S GqHR23XUyXK2Lg6DZqCn+KHxw3m/dRzEwUQIo5+WL7lf8pXJV6AyVn6UJd42kAgd 6dkresvUeIv4zeb9VWRyVZy1PLuWw4PCU0yb4c+/8HclOmFagTpopPz8ap07B58E dHpAlIOtHP9wS0JvNa4QY8+7N3dvT/0Omu9JUhklGnT1jTjQ2ghVvCtNAYCD+Lg+ WK0NYkLsDl4J/xxnbGyYaXkJHcMmnuRaq/9QkI1iJM3xafOwYU4WzhAHuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHeaSkKVxjj952DzzaR22L/CcRKyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2ZkODlm OS05OGI2LTQyMTctYmNjZC02MmM2N2Q0YmM1NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvZmQ4OWY5 LTk4YjYtNDIxNy1iY2NkLTYyYzY3ZDRiYzU0Ni8xL2Q1cEtRcFhHT1AzbllQUE5w SGJZdjhKeEVySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW+GcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDcgTANBgkqhkiG9w0BAQsFAAOCAQEAjqSK10QbRSJYAW/eyUV8sBQWxmZCpHb2 4p2qjcXBXaffDV7cua7/IRoOUxmp/EY8XDeYwlbYR9M2XrQuOBbs+EEVzicypB7R 5DSC2k6lBKkeMSiEYtu6UxV1Cyr0fK+CxKT0Knk1VwV8pLc6oiC7big/8V/p0pGF l/23BwmL6fQkH6vjhVrHYjNMBagUtFkmCBKFC3juUE106Ur5zvIUCacM4F21RokM v4aAReP/F/hm+FlGadkXM2jK/J99YaQw7ETszX0jlaV6yq7gBc6E9wT+PkRBD8s0 EYhBxXeSs8dEIGY/mqCvtfmvIyQNLPuxsTVFZd/MLscTuOND1zH4Ng== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:30 2026 by rpki-client