This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer File: m5fCLQsziopFqhNFsJF7oNyXM5A.cer (raw, json) Hash identifier: AOywkZ9u1CyCmd48ccZgFmKfuN9YaKs+QxzC1HCuqAw= Subject key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8481296B40FF74618EB68A9C6B7F7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210654 AS: 213035 IP: 185.28.36.0/22 IP: 185.126.34.0/24 IP: 2a00:9c20::/32 IP: 2a10:1440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:81:29:6b:40:ff:74:61:8e:b6:8a:9c:6b:7f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:b8:7b:b7:b7:d1:99:38:a9:51:6b:c2:6f: c4:20:52:83:08:2d:21:b0:75:aa:73:4c:9b:b2:03: e7:45:b7:3f:1b:84:f6:d6:f3:fc:ef:01:98:fb:44: 30:de:b4:e6:a3:cc:e0:7c:95:1f:cb:30:10:56:2f: 6a:53:30:d4:bb:b3:a2:2a:ec:fb:29:c2:4e:a1:96: ff:5d:38:bf:52:51:be:65:0c:d8:51:81:5e:b7:c0: b5:a8:99:47:2e:4f:70:13:f9:0f:df:2f:40:a5:37: 56:48:e8:ab:71:82:e0:fd:4d:73:8c:55:59:b9:fc: 7e:65:69:ef:5c:69:08:8b:45:20:a7:25:1d:e6:6f: 6d:3a:56:8e:69:0f:d6:61:01:50:cd:2d:94:00:fa: ca:53:17:76:06:f2:87:4f:f4:c7:fe:f3:1b:26:da: a9:4a:79:72:e5:d2:81:cc:82:1f:5a:d3:f5:f8:45: 3d:d3:78:68:0e:21:a3:99:8a:e2:50:dc:e7:9e:18: db:7b:14:25:30:0b:0a:af:13:ab:8c:e0:89:21:61: 84:de:01:cd:59:5c:55:38:14:66:b6:08:d2:7e:40: 59:2a:43:66:b0:cb:c4:17:2b:35:66:a0:c7:4c:c8: 76:ff:5c:7c:e7:85:54:87:d6:ef:fd:4a:42:a1:1f: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.36.0/22 185.126.34.0/24 IPv6: 2a00:9c20::/32 2a10:1440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210654 213035 Signature Algorithm: sha256WithRSAEncryption 56:0e:07:85:4c:31:a5:7f:5b:77:4e:81:c2:20:c1:a5:e6:11: 99:bd:11:08:eb:25:ea:94:5f:b9:bf:c9:bf:b4:ba:7b:78:f4: 7c:09:83:f4:da:c4:e7:9d:c2:4a:f6:38:31:2c:02:b9:c7:85: 51:ef:44:32:34:7a:77:ee:02:c5:05:15:45:60:0d:9b:40:50: 47:0d:9f:6a:57:de:6b:bf:7e:d1:7f:aa:a7:79:97:24:72:ba: 5d:46:e5:b8:4a:80:80:9d:e3:ec:6b:1b:10:db:f4:69:de:07: f3:0b:b3:5b:e9:77:7a:1c:d2:90:de:e4:a1:ad:0e:ff:16:9f: f3:54:e4:80:b6:38:53:5a:07:58:f1:28:c5:a9:41:0a:15:c8: 41:10:f7:fe:75:6a:b8:de:83:e4:b2:71:e1:5e:6f:4b:cc:3d: 7f:a3:9b:f6:8b:bd:e0:59:33:c3:4f:b0:0d:3f:ad:72:5c:43: 4f:c3:79:80:74:3f:ad:ed:fd:33:de:0e:08:d2:13:c7:b3:06: f2:41:b4:70:33:73:f4:6a:61:21:54:07:c3:49:9a:fb:48:51: ad:78:2c:27:bf:f8:82:bb:6c:0c:84:d2:98:fb:c8:94:6c:f0: ef:ae:5a:92:30:8d:d1:c4:27:27:e3:6b:1d:d5:b7:6e:2f:12: a5:7e:4f:db -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/hIEpa0D/dGGOtoqca39+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk3YzIyZDBiMzM4YThhNDVhYTEzNDViMDkxN2JhMGRjOTczMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL24e7e30Zk4qVFrwm/EIFKDCC0h sHWqc0ybsgPnRbc/G4T21vP87wGY+0Qw3rTmo8zgfJUfyzAQVi9qUzDUu7OiKuz7 KcJOoZb/XTi/UlG+ZQzYUYFet8C1qJlHLk9wE/kP3y9ApTdWSOircYLg/U1zjFVZ ufx+ZWnvXGkIi0UgpyUd5m9tOlaOaQ/WYQFQzS2UAPrKUxd2BvKHT/TH/vMbJtqp Snly5dKBzIIfWtP1+EU903hoDiGjmYriUNznnhjbexQlMAsKrxOrjOCJIWGE3gHN WVxVOBRmtgjSfkBZKkNmsMvEFys1ZqDHTMh2/1x854VUh9bv/UpCoR8LmwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJuXwi0LM4qKRaoTRbCRe6DclzOQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2UyMjU4 ZC04YmM1LTQ0ZWQtODA3My1hZTk5OWVkN2M1ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZTIyNThk LThiYzUtNDRlZC04MDczLWFlOTk5ZWQ3YzVkNC8xL201ZkNMUXN6aW9wRnFoTkZz SkY3b055WE01QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuRwkAwQAuX4iMBQEAgACMA4DBQAqAJwgAwUD KhAUQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDNt4CAwNAKzANBgkqhkiG9w0B AQsFAAOCAQEAVg4HhUwxpX9bd06BwiDBpeYRmb0RCOsl6pRfub/Jv7S6e3j0fAmD 9NrE553CSvY4MSwCuceFUe9EMjR6d+4CxQUVRWANm0BQRw2falfea79+0X+qp3mX JHK6XUbluEqAgJ3j7GsbENv0ad4H8wuzW+l3ehzSkN7koa0O/xaf81TkgLY4U1oH WPEoxalBChXIQRD3/nVquN6D5LJx4V5vS8w9f6Ob9ou94Fkzw0+wDT+tclxDT8N5 gHQ/re39M94OCNITx7MG8kG0cDNz9GphIVQHw0ma+0hRrXgsJ7/4grtsDITSmPvI lGzw765akjCN0cQnJ+NrHdW3bi8SpX5P2w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:11 2026 by rpki-client