This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer File: w5VnlKe5iREVrTr5RXPnlhsWS6w.cer (raw, json) Hash identifier: bGo5bTm0GobBwxG91ZwjvEKpHC8nhLYUpGa+KTJ+Ik4= Subject key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59C3CF35CA05DD2408856017E9F96F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200252 IP: 193.107.48.0/24 IP: 2a01:f200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c3:cf:35:ca:05:dd:24:08:85:60:17:e9:f9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3956794a7b9891115ad3af94573e7961b164bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:b1:a0:23:80:6d:46:66:3f:cf:13:ea:6e: 1f:0d:4f:a7:77:ec:ec:61:12:1c:68:85:54:25:b5: 2d:a2:4b:ed:fd:68:92:d4:d8:70:a4:32:b5:91:af: aa:53:d8:fd:46:33:4a:c0:d4:fd:3a:d7:e1:19:44: f7:bb:a6:71:80:5a:09:0d:a0:f0:ae:38:49:69:c0: df:71:ed:ee:fb:af:24:85:f2:11:97:43:74:6f:ad: 82:ef:12:f2:61:ff:43:dd:ae:30:94:a8:41:11:23: a5:34:f2:a7:78:eb:51:ab:52:33:18:47:ae:08:b1: 82:ab:e7:eb:35:8a:f9:33:5a:30:2b:a1:48:77:31: d9:92:49:79:85:ef:dd:16:d4:89:4e:e9:2d:a2:15: 51:59:3c:30:9b:6c:a3:0a:b5:bc:62:73:81:06:d5: 84:41:01:b2:d5:dd:a1:0f:62:5d:2b:55:5e:6f:3c: 41:b7:e8:91:94:ba:2d:71:df:f7:89:8c:b1:11:af: b0:85:a0:cc:e7:d3:af:7d:c5:ec:a6:5d:f6:8a:a1: 04:9e:21:b5:35:3a:91:0a:b6:b6:04:e1:74:0a:a6: 57:07:cc:c9:f6:74:7e:dd:fb:c7:cf:66:fa:75:e5: f2:0a:e9:b3:85:24:7f:17:05:69:b1:b2:ae:e5:84: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.48.0/24 IPv6: 2a01:f200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200252 Signature Algorithm: sha256WithRSAEncryption 82:8f:46:98:06:bb:18:66:a5:17:e6:29:98:a9:60:e8:d8:26: 0b:2b:0a:a0:1d:1b:f4:09:66:8f:22:f8:88:b6:b8:ba:1b:27: 0f:b8:f8:0c:cd:4e:df:8b:f7:8e:85:bf:0d:7a:28:78:a0:2b: 78:aa:ae:26:63:53:8f:f5:d8:10:9e:34:13:4d:73:66:60:86: 8f:ef:12:25:f4:20:55:47:5b:1c:a9:dc:16:23:f9:5a:4e:18: d9:f8:8b:55:a6:7d:50:66:e7:92:08:01:f6:76:ec:12:67:b6: 7a:92:c4:b2:58:3b:de:7b:8d:7c:09:67:28:76:33:c6:43:ed: 65:8b:c8:28:7f:42:4c:6d:95:dd:d5:a3:14:8b:d1:0a:e6:5a: ca:5c:f3:26:2e:a0:ec:d1:d1:e5:79:7d:5b:f0:64:d3:21:95: 1d:c9:eb:e9:ca:33:0f:9a:6a:79:10:b9:65:5e:25:3d:89:80: 80:ba:aa:2a:c3:19:1b:90:b8:c6:47:c3:cf:8a:d5:6b:1f:c6: 0d:e7:7f:0c:ad:f5:d0:a4:39:26:e6:41:29:2d:23:29:3f:f2: ab:aa:66:ed:6c:c3:a0:e9:6e:17:5a:e4:4a:95:77:9c:84:63: e0:2d:c7:6a:3b:cf:35:a4:50:11:7b:59:57:74:d1:32:ec:cf: cb:46:13:e9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WcPPNcoF3SQIhWAX6flvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzk1Njc5NGE3Yjk4OTExMTVhZDNhZjk0NTczZTc5NjFiMTY0YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBuxoCOAbUZmP88T6m4fDU+nd+zs YRIcaIVUJbUtokvt/WiS1NhwpDK1ka+qU9j9RjNKwNT9OtfhGUT3u6ZxgFoJDaDw rjhJacDfce3u+68khfIRl0N0b62C7xLyYf9D3a4wlKhBESOlNPKneOtRq1IzGEeu CLGCq+frNYr5M1owK6FIdzHZkkl5he/dFtSJTuktohVRWTwwm2yjCrW8YnOBBtWE QQGy1d2hD2JdK1VebzxBt+iRlLotcd/3iYyxEa+whaDM59OvfcXspl32iqEEniG1 NTqRCra2BOF0CqZXB8zJ9nR+3fvHz2b6deXyCumzhSR/FwVpsbKu5YSMBQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMOVZ5SnuYkRFa06+UVz55YbFkusMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2U4OTM1 Yi1lOTU5LTQ2MjktYmVlZi01MDA0ZmIyODg4NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZTg5MzVi LWU5NTktNDYyOS1iZWVmLTUwMDRmYjI4ODg0ZS8xL3c1Vm5sS2U1aVJFVnJUcjVS WFBubGhzV1M2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwWswMA0EAgACMAcDBQMqAfIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMOPDANBgkqhkiG9w0BAQsFAAOCAQEAgo9GmAa7GGal F+YpmKlg6NgmCysKoB0b9AlmjyL4iLa4uhsnD7j4DM1O34v3joW/DXooeKAreKqu JmNTj/XYEJ40E01zZmCGj+8SJfQgVUdbHKncFiP5Wk4Y2fiLVaZ9UGbnkggB9nbs Eme2epLEslg73nuNfAlnKHYzxkPtZYvIKH9CTG2V3dWjFIvRCuZaylzzJi6g7NHR 5Xl9W/Bk0yGVHcnr6cozD5pqeRC5ZV4lPYmAgLqqKsMZG5C4xkfDz4rVax/GDed/ DK310KQ5JuZBKS0jKT/yq6pm7WzDoOluF1rkSpV3nIRj4C3HajvPNaRQEXtZV3TR MuzPy0YT6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:33 2026 by rpki-client