This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer File: 51B9sIinyBoNvsjxrdtS-VvRAUM.cer (raw, json) Hash identifier: u6eZWkQUii/IjYkpO99yMqawmG1iWSDV5vsj7FXYrZg= Subject key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB589A4FC734D6320AC997B50A532B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.141.28.0/22 IP: 91.199.167.0/24 IP: 185.36.229.0/24 IP: 2a07:cd40::/29 IP: 2a0e:c9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:58:9a:4f:c7:34:d6:32:0a:c9:97:b5:0a:53:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:80:44:f8:df:85:f1:d6:bf:3a:cb:0f:cf: 78:31:2a:d9:47:1b:52:23:3a:70:9f:75:00:4d:86: 30:1c:e3:f2:05:7d:b9:fe:89:9b:69:05:07:4f:65: fc:ae:a2:51:89:72:b8:28:5c:09:e4:1f:2c:ee:8a: 1d:f0:3f:6f:f2:2c:bb:ac:98:45:51:d1:d7:f3:a7: 7a:6e:8f:cf:d6:4a:4a:a2:26:2e:b9:cb:7c:14:23: 81:58:af:83:64:a2:ce:6f:a2:1b:90:cb:27:9d:4f: 06:21:14:46:29:87:40:66:25:c3:1b:b6:24:36:93: d4:e7:e5:03:7f:30:a6:c8:5f:bd:e0:a8:71:f1:b2: ed:c6:40:1e:e2:2d:24:56:6c:63:91:26:09:a0:e2: 4d:8c:84:f9:c6:13:ff:96:05:ae:ad:32:58:7e:1a: 29:29:9b:e8:c5:76:62:e0:f7:cb:bc:cd:37:96:03: b2:2a:b7:58:b1:d1:21:f4:66:ba:9b:ec:3b:c2:32: 47:1a:84:72:9b:2b:29:0b:ea:53:6a:68:1d:a9:4e: c0:d2:a4:3e:b2:5e:96:30:16:b2:30:ef:05:20:7f: cd:99:40:1a:99:ad:0a:3f:20:87:9c:44:32:94:dd: ae:d4:55:2a:56:f0:19:0d:49:f3:d5:0c:77:e9:ce: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.28.0/22 91.199.167.0/24 185.36.229.0/24 IPv6: 2a07:cd40::/29 2a0e:c9c0::/29 Signature Algorithm: sha256WithRSAEncryption 32:a0:7a:1d:2e:14:e0:f5:37:6d:e1:8e:8e:df:41:67:a4:e5: b7:3e:f5:51:fc:52:97:81:8b:a5:c7:1d:1a:e6:0f:e2:78:38: 86:ea:10:0a:25:e1:ad:18:c3:30:2f:f3:0d:1f:10:70:4c:16: 50:ab:ee:b0:74:3d:24:e5:84:35:db:57:c1:bb:f0:34:c7:6e: 42:6b:12:14:0d:6a:06:f4:0f:87:40:ec:c3:e1:40:72:f7:7d: e1:01:2d:30:b5:a0:77:07:04:ec:2f:af:be:9f:3f:5e:8a:4c: 9a:e8:ff:1c:88:95:c8:66:95:bc:a2:67:63:39:80:91:30:fd: 06:b9:3b:9f:c9:85:f5:ba:4c:76:d2:c8:2a:49:d4:2e:dd:77: fc:4f:ae:cb:c9:21:05:cb:f2:f1:b2:53:f2:d6:28:1b:0e:dc: 32:43:83:0c:19:b6:10:e2:29:6c:05:36:3f:52:74:2a:6b:73: f2:2a:f1:19:bd:5a:0d:a6:09:dd:2f:a9:0c:56:49:89:29:7c: 02:dc:f3:e2:db:77:3b:ba:4c:52:2f:d1:87:26:5b:34:b9:e4: cc:e4:dc:2f:39:12:e6:4f:69:6d:b0:21:c6:4b:17:a3:34:bb: 4f:f9:4f:31:d7:55:a0:00:15:e7:c1:e9:bf:59:bb:13:53:21: 14:bf:2f:c0 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9y1iaT8c01jIKyZe1ClMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzUwN2RiMDg4YTdjODFhMGRiZWM4ZjFhZGRiNTJmOTViZDEwMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IaARPjfhfHWvzrLD894MSrZRxtS Izpwn3UATYYwHOPyBX25/ombaQUHT2X8rqJRiXK4KFwJ5B8s7ood8D9v8iy7rJhF UdHX86d6bo/P1kpKoiYuuct8FCOBWK+DZKLOb6IbkMsnnU8GIRRGKYdAZiXDG7Yk NpPU5+UDfzCmyF+94Khx8bLtxkAe4i0kVmxjkSYJoOJNjIT5xhP/lgWurTJYfhop KZvoxXZi4PfLvM03lgOyKrdYsdEh9Ga6m+w7wjJHGoRymyspC+pTamgdqU7A0qQ+ sl6WMBayMO8FIH/NmUAama0KPyCHnEQylN2u1FUqVvAZDUnz1Qx36c7jFwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOdQfbCIp8gaDb7I8a3bUvlb0QFDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2Y0MTNj Mi1jMmVjLTQxZjEtOWQ4NS01ZDg2MzRhYjdkOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZjQxM2My LWMyZWMtNDFmMS05ZDg1LTVkODYzNGFiN2Q5MS8xLzUxQjlzSWlueUJvTnZzanhy ZHRTLVZ2UkFVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCLY0cAwQAW8enAwQAuSTlMBQEAgACMA4DBQMq B81AAwUDKg7JwDANBgkqhkiG9w0BAQsFAAOCAQEAMqB6HS4U4PU3beGOjt9BZ6Tl tz71UfxSl4GLpccdGuYP4ng4huoQCiXhrRjDMC/zDR8QcEwWUKvusHQ9JOWENdtX wbvwNMduQmsSFA1qBvQPh0Dsw+FAcvd94QEtMLWgdwcE7C+vvp8/XopMmuj/HIiV yGaVvKJnYzmAkTD9Brk7n8mF9bpMdtLIKknULt13/E+uy8khBcvy8bJT8tYoGw7c MkODDBm2EOIpbAU2P1J0Kmtz8irxGb1aDaYJ3S+pDFZJiSl8Atzz4tt3O7pMUi/R hyZbNLnkzOTcLzkS5k9pbbAhxksXozS7T/lPMddVoAAV58Hpv1m7E1MhFL8vwA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:33:15 2026 by rpki-client