This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer File: g5ka_NRV6xsXT8-J-OEOr39ws1U.cer (raw, json) Hash identifier: sMa4Kk3wUhtbHVek8GN0fJLnOaEU0I97YX+AmbiytoI= Subject key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4EE1561C6DA33BA64522E725C8751 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47602 IP: 2.58.76.0/22 IP: 45.67.4.0/22 IP: 92.119.168.0/22 IP: 103.110.160.0/22 IP: 103.113.29.0/24 IP: 103.195.144.0/22 IP: 103.219.212.0/23 IP: 137.59.4.0/22 IP: 185.72.240.0/22 IP: 213.173.60.0/22 IP: 2a04:2b80::/29 IP: 2a09:4200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ee:15:61:c6:da:33:ba:64:52:2e:72:5c:87:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:ea:4c:e0:b4:c8:b2:43:44:21:33:a6:90: a8:5b:ff:9a:bf:96:0b:51:6f:ab:ad:8b:9b:4d:c7: 6d:97:8f:93:79:28:30:7f:1f:fd:ac:14:10:8c:54: 51:05:a1:77:07:a8:6a:ac:20:e1:8f:61:42:40:87: 3c:84:96:f4:60:47:04:5e:0d:52:7b:53:3e:74:7a: 33:de:50:95:f8:08:14:67:21:18:d2:d4:b4:ba:29: 2b:c5:40:95:86:bc:1d:71:36:20:b7:07:d5:ec:52: 7c:46:52:bd:a4:6a:a4:59:7e:c0:8d:49:f4:30:07: 25:b6:67:3b:3c:19:b7:52:27:dd:f8:15:1d:1d:ba: 2f:5d:4a:76:cc:c1:45:59:64:45:4c:86:36:fc:2c: b0:89:0c:c7:d7:2b:ee:50:3e:8c:27:b6:2c:67:86: aa:c6:d5:70:a8:33:81:e0:8d:fe:fb:09:94:dd:15: bb:fc:ae:4f:03:2c:a5:45:d9:c4:0c:c0:46:b3:47: b6:dc:0d:56:c3:5f:be:c3:d4:a7:15:19:16:76:b0: af:b7:00:85:4c:3d:39:81:4f:ad:14:6b:65:8b:f5: b7:2c:df:8f:ea:42:8c:62:72:e3:c5:14:ab:cc:cc: 2e:5a:69:8f:13:d2:d0:ab:3b:d6:03:f5:b5:c2:b2: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.76.0/22 45.67.4.0/22 92.119.168.0/22 103.110.160.0/22 103.113.29.0/24 103.195.144.0/22 103.219.212.0/23 137.59.4.0/22 185.72.240.0/22 213.173.60.0/22 IPv6: 2a04:2b80::/29 2a09:4200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47602 Signature Algorithm: sha256WithRSAEncryption 64:ac:f1:9c:c4:b2:77:ff:9c:c3:67:ef:11:43:0e:a3:44:af: 03:04:46:21:fe:73:9a:5e:9d:da:15:50:96:12:be:0b:59:b6: f3:1f:a0:29:c8:95:3f:56:b0:c9:7f:52:e0:ec:05:24:64:15: 31:8f:fb:ab:df:23:b1:06:df:1f:df:c2:fe:9f:fe:f6:da:6f: b4:d2:05:41:5b:ee:2a:9a:73:f2:9a:86:71:a6:77:f0:96:8c: 67:90:01:a8:3f:c8:f9:87:e6:42:fc:60:a7:83:a4:92:86:c1: 7c:5a:10:ec:d9:67:8f:bd:50:7e:3c:c8:7d:47:e1:4c:b3:36: 50:d3:51:e4:27:d0:d4:32:eb:c4:2d:62:c5:aa:29:ca:7d:95: 30:45:e4:21:c9:6e:b7:17:32:92:c8:a5:c9:1f:2e:b6:5a:01: 33:e2:8e:c1:b3:78:60:3e:89:a5:a5:f4:1e:d4:f5:94:f6:44: 6e:45:33:6b:b2:23:69:a0:ab:38:a7:dd:7f:a3:e2:91:ab:c8: 5b:37:74:c7:29:77:aa:96:97:2a:5b:88:1f:4a:fa:8c:ba:8b: ed:87:b6:6e:82:b0:1e:bf:ff:33:7c:d4:30:65:0b:8b:6f:aa: cf:32:a4:d5:e1:19:2d:bf:e3:4e:88:3d:61:1d:d6:71:5b:e4: af:49:a5:69 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISAZt7pO4VYcbaM7pkUi5yXIdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk5MWFmY2Q0NTVlYjFiMTc0ZmNmODlmOGUxMGVhZjdmNzBiMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNjqTOC0yLJDRCEzppCoW/+av5YL UW+rrYubTcdtl4+TeSgwfx/9rBQQjFRRBaF3B6hqrCDhj2FCQIc8hJb0YEcEXg1S e1M+dHoz3lCV+AgUZyEY0tS0uikrxUCVhrwdcTYgtwfV7FJ8RlK9pGqkWX7AjUn0 MAcltmc7PBm3Uifd+BUdHbovXUp2zMFFWWRFTIY2/CywiQzH1yvuUD6MJ7YsZ4aq xtVwqDOB4I3++wmU3RW7/K5PAyylRdnEDMBGs0e23A1Ww1++w9SnFRkWdrCvtwCF TD05gU+tFGtli/W3LN+P6kKMYnLjxRSrzMwuWmmPE9LQqzvWA/W1wrL//wIDAQAB o4IC7DCCAugwHQYDVR0OBBYEFIOZGvzUVesbF0/PifjhDq9/cLNVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzY5ZWQy OS1hZjRlLTQ1MjQtYWRmYi1lMTU0MzczODAwOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvNjllZDI5 LWFmNGUtNDUyNC1hZGZiLWUxNTQzNzM4MDA5OS8xL2c1a2FfTlJWNnhzWFQ4LUot T0VPcjM5d3MxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQCAjpMAwQCLUMEAwQCXHeoAwQCZ26gAwQAZ3Ed AwQCZ8OQAwQBZ9vUAwQCiTsEAwQCuUjwAwQC1a08MBQEAgACMA4DBQMqBCuAAwUD KglCADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAufIwDQYJKoZIhvcNAQELBQAD ggEBAGSs8ZzEsnf/nMNn7xFDDqNErwMERiH+c5pendoVUJYSvgtZtvMfoCnIlT9W sMl/UuDsBSRkFTGP+6vfI7EG3x/fwv6f/vbab7TSBUFb7iqac/KahnGmd/CWjGeQ Aag/yPmH5kL8YKeDpJKGwXxaEOzZZ4+9UH48yH1H4UyzNlDTUeQn0NQy68QtYsWq Kcp9lTBF5CHJbrcXMpLIpckfLrZaATPijsGzeGA+iaWl9B7U9ZT2RG5FM2uyI2mg qzin3X+j4pGryFs3dMcpd6qWlypbiB9K+oy6i+2Htm6CsB6//zN81DBlC4tvqs8y pNXhGS2/406IPWEd1nFb5K9JpWk= -----END CERTIFICATE-----Generated at Sun Jan 25 07:47:23 2026 by rpki-client