This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer File: i5PlZ68ZipTh_PBf4P58khCVqEo.cer (raw, json) Hash identifier: GBmLIxgrYgBGSyOxiTD83q1Tpf1BV8hBoetJKbMkNt4= Subject key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758CD4EF051181E7BB6BC2777CB2AB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:1bf4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cd:4e:f0:51:18:1e:7b:b6:bc:27:77:cb:2a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:ac:b4:64:54:c3:70:21:2c:14:8b:f2:8b: fa:8e:56:21:d6:7f:9e:51:25:c2:a8:84:2f:85:0c: b1:98:33:87:38:ce:86:62:57:d9:c0:76:19:d6:dc: 59:c6:8b:75:93:c3:05:2c:b7:50:2f:71:85:a8:9c: 38:ba:9f:02:cf:4e:38:2a:1a:e1:f7:90:3f:a3:37: 64:6f:e1:37:29:20:f8:f6:81:c7:1c:ae:8d:55:97: 54:c3:bf:7b:01:6d:94:4d:17:64:99:c7:db:c7:24: f3:89:69:4e:b8:6b:88:0b:37:fe:a6:3c:7a:ab:9a: 51:01:e8:6a:6b:40:17:09:6c:e7:92:d3:1c:5b:9e: 3e:bb:cb:c6:88:b6:2c:3f:78:a0:23:49:2e:92:22: 7e:da:16:6f:0c:f6:fa:30:42:eb:5d:f5:d2:a4:f4: 46:2c:ed:95:b6:ae:34:fa:3a:b6:d2:8f:fb:92:aa: b5:d7:54:39:2b:43:ae:20:e2:31:ff:ad:07:21:b6: e9:cd:fa:5f:48:3d:8e:45:49:fd:37:36:84:69:36: 01:e9:6c:35:d3:1a:c9:ed:de:e4:06:1f:2d:5f:86: da:8a:cf:bc:3b:8a:a1:f6:b0:da:0f:01:f2:99:db: 41:fc:a2:be:dc:af:54:91:1d:38:b3:29:94:7b:b3: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1bf4::/48 Signature Algorithm: sha256WithRSAEncryption a6:84:67:e3:e3:4c:c1:f6:92:57:cd:f6:53:99:8b:b8:25:7f: 12:4b:dd:4c:d5:e2:25:c3:d1:9d:fc:0f:3e:57:5f:e2:96:a6: 8a:e4:8b:55:0d:3e:63:3d:62:d6:a2:37:95:f1:4e:06:c6:11: 55:2f:f0:c4:dd:ae:cd:7f:33:99:25:8e:4e:61:29:39:bf:f3: 7e:22:a0:79:bc:87:86:d3:c9:a7:2b:56:c6:8f:5b:42:3a:de: 52:09:42:d3:f9:4f:5c:5c:ef:0b:05:7d:2c:9f:92:0e:e7:e4: 2c:e7:1a:50:fe:f6:04:41:d6:13:14:45:f6:7b:a6:3c:a4:d4: 49:6b:e0:d0:91:d1:8f:00:29:15:ef:9c:af:9f:83:f5:28:4a: b6:7a:25:73:7f:06:74:5c:3a:32:e6:ee:72:48:35:97:05:ab: 28:b3:3a:6e:98:48:12:18:ac:c2:db:de:05:60:dd:61:84:29: 33:4e:67:24:fc:1f:04:5f:20:93:bb:e4:97:60:77:36:ed:b2: 4a:3d:2a:1c:d7:21:c0:91:cd:9c:2e:ce:ea:b7:73:73:84:6a: 1c:b2:72:3a:95:a2:01:7d:59:30:15:9f:ff:63:28:80:23:e4: a5:1e:42:7c:a2:25:1c:6f:a5:79:3a:85:80:07:fa:df:6c:ce: f2:a3:af:b6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt3WM1O8FEYHnu2vCd3yyqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjkzZTU2N2FmMTk4YTk0ZTFmY2YwNWZlMGZlN2M5MjEwOTVhODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwustGRUw3AhLBSL8ov6jlYh1n+e USXCqIQvhQyxmDOHOM6GYlfZwHYZ1txZxot1k8MFLLdQL3GFqJw4up8Cz044Khrh 95A/ozdkb+E3KSD49oHHHK6NVZdUw797AW2UTRdkmcfbxyTziWlOuGuICzf+pjx6 q5pRAehqa0AXCWznktMcW54+u8vGiLYsP3igI0kukiJ+2hZvDPb6MELrXfXSpPRG LO2Vtq40+jq20o/7kqq111Q5K0OuIOIx/60HIbbpzfpfSD2ORUn9NzaEaTYB6Ww1 0xrJ7d7kBh8tX4bais+8O4qh9rDaDwHymdtB/KK+3K9UkR04symUe7OmcwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFIuT5WevGYqU4fzwX+D+fJIQlahKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2NmMTMw ZC1lZmQ0LTRkZmItYTFhMy1hMmJmMGExOGNkZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvY2YxMzBk LWVmZDQtNGRmYi1hMWEzLWEyYmYwYTE4Y2RkYy8xL2k1UGxaNjhaaXBUaF9QQmY0 UDU4a2hDVnFFby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBv0MA0GCSqGSIb3DQEBCwUAA4IBAQCm hGfj40zB9pJXzfZTmYu4JX8SS91M1eIlw9Gd/A8+V1/ilqaK5ItVDT5jPWLWojeV 8U4GxhFVL/DE3a7NfzOZJY5OYSk5v/N+IqB5vIeG08mnK1bGj1tCOt5SCULT+U9c XO8LBX0sn5IO5+Qs5xpQ/vYEQdYTFEX2e6Y8pNRJa+DQkdGPACkV75yvn4P1KEq2 eiVzfwZ0XDoy5u5ySDWXBasoszpumEgSGKzC294FYN1hhCkzTmck/B8EXyCTu+SX YHc27bJKPSoc1yHAkc2cLs7qt3NzhGocsnI6laIBfVkwFZ//YyiAI+SlHkJ8oiUc b6V5OoWAB/rfbM7yo6+2 -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:59 2026 by rpki-client