This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer (raw, json) Hash identifier: X9wGhSGHXwCBNvHi+LcJRtt+Y0bOqSgWcWDyThk4V4U= Subject key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80B472BBBC763678D61140EBA2DC5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207489 IP: 80.244.4.0/24 IP: 194.76.145.0/24 IP: 194.76.149.0 -- 194.76.150.255 IP: 194.76.186.0/24 IP: 2a0f:ae40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b4:72:bb:bc:76:36:78:d6:11:40:eb:a2:dc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:93:ee:c9:ee:72:54:7c:79:8b:8c:ce:07: a2:5d:47:e9:59:48:16:14:20:94:95:23:39:24:d1: 0d:e1:0f:f1:76:e2:14:0e:dc:af:e9:3f:9d:13:a5: fd:76:9e:ff:15:8d:d9:45:24:bc:64:8a:a2:3c:b2: 3c:bb:eb:18:88:50:a4:22:77:20:01:b6:0d:b4:34: 21:0d:42:bf:06:af:0e:c3:fd:ce:87:f9:59:ee:ab: a6:b1:8e:f7:5e:8f:e3:62:f1:90:d3:ca:4b:c4:13: d7:37:c8:82:34:d0:2d:57:89:0d:67:1b:4b:d7:91: c0:1b:26:06:60:f3:35:ae:6c:3b:23:0a:2f:6c:2d: f5:7d:93:71:8b:1a:bd:76:db:f1:f2:39:d0:65:a6: af:33:f8:64:66:02:92:47:89:0d:5f:c6:e3:48:2a: f3:24:85:95:64:c1:c2:55:f8:c1:4d:85:98:fa:49: 31:d7:3e:b9:0a:04:5f:27:f0:b1:ca:a7:77:f1:c2: 38:81:70:d9:a3:b3:e5:96:c5:5e:e8:16:09:80:b1: d2:8e:92:fc:3d:95:a5:e1:a6:cc:3b:aa:eb:64:00: c8:ec:67:de:4e:9b:1f:08:3f:4a:c3:1c:ba:d9:26: 7a:e3:93:d0:bc:69:b2:5f:3b:6e:c7:74:bb:b0:2e: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.4.0/24 194.76.145.0/24 194.76.149.0-194.76.150.255 194.76.186.0/24 IPv6: 2a0f:ae40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207489 Signature Algorithm: sha256WithRSAEncryption 35:ef:4e:32:20:bf:38:9e:e3:3f:c2:62:01:5a:cd:60:48:ae: ff:06:66:c2:54:f4:9e:df:5e:d2:bb:57:27:64:b0:37:ce:aa: 51:56:c9:bf:d5:e0:59:22:7d:2b:62:a2:ab:3f:06:50:5c:97: 66:17:74:45:df:18:cc:7a:9e:c5:6f:50:b6:82:6a:e7:5d:4f: e7:47:37:51:79:60:38:02:75:06:e5:20:f1:8e:12:5b:bb:9e: 54:45:01:c6:df:e0:d2:b9:d7:6e:38:c2:74:29:7c:81:5a:0f: 99:75:9d:8e:a6:45:61:ab:0d:e9:d5:d8:d3:5b:61:42:be:67: 5c:e8:29:6c:7e:f6:4a:5d:fb:64:eb:75:e7:16:6c:c6:ce:36: 46:d8:00:47:36:54:65:80:f2:a3:70:ae:5e:c6:9c:12:28:3d: 4b:19:c9:e6:94:bc:cf:21:a6:bb:86:c5:0b:f4:5b:3c:a8:a1: a4:cb:3f:16:51:e4:cb:10:53:a1:a0:6f:83:35:2f:bf:a4:8f: 28:5d:9f:c6:08:eb:fa:e9:7c:67:2d:2d:51:fd:55:8e:09:f3: 7b:07:67:2e:c1:d8:11:eb:8d:57:f8:44:eb:24:e2:0e:12:81: 60:79:31:43:2d:b8:d7:c9:66:33:2e:8b:7f:b3:01:4b:73:4e: 29:b7:9d:6d -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt8gLRyu7x2NnjWEUDrotxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDY3ZGJlNmFjNzU1YTkwNjNjMzYwYjE1MjVlODQ0ZmQyYTU3YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW+T7snuclR8eYuMzgeiXUfpWUgW FCCUlSM5JNEN4Q/xduIUDtyv6T+dE6X9dp7/FY3ZRSS8ZIqiPLI8u+sYiFCkIncg AbYNtDQhDUK/Bq8Ow/3Oh/lZ7qumsY73Xo/jYvGQ08pLxBPXN8iCNNAtV4kNZxtL 15HAGyYGYPM1rmw7IwovbC31fZNxixq9dtvx8jnQZaavM/hkZgKSR4kNX8bjSCrz JIWVZMHCVfjBTYWY+kkx1z65CgRfJ/Cxyqd38cI4gXDZo7PllsVe6BYJgLHSjpL8 PZWl4abMO6rrZADI7GfeTpsfCD9Kwxy62SZ645PQvGmyXztux3S7sC6itQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFORn2+asdVqQY8NgsVJehE/SpXuTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzcxNmY0 Ny0xMGI4LTRmMzktODU5Zi1lY2U1NzdlMzA3YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNzE2ZjQ3 LTEwYjgtNGYzOS04NTlmLWVjZTU3N2UzMDdhZC8xLzVHZmI1cXgxV3BCancyQ3hV bDZFVDlLbGU1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQAUPQEAwQAwkyRMAwDBADCTJUDBADCTJYDBADC TLowDQQCAAIwBwMFACoPrkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyqBMA0G CSqGSIb3DQEBCwUAA4IBAQA1704yIL84nuM/wmIBWs1gSK7/BmbCVPSe317Su1cn ZLA3zqpRVsm/1eBZIn0rYqKrPwZQXJdmF3RF3xjMep7Fb1C2gmrnXU/nRzdReWA4 AnUG5SDxjhJbu55URQHG3+DSudduOMJ0KXyBWg+ZdZ2OpkVhqw3p1djTW2FCvmdc 6ClsfvZKXftk63XnFmzGzjZG2ABHNlRlgPKjcK5expwSKD1LGcnmlLzPIaa7hsUL 9Fs8qKGkyz8WUeTLEFOhoG+DNS+/pI8oXZ/GCOv66XxnLS1R/VWOCfN7B2cuwdgR 641X+ETrJOIOEoFgeTFDLbjXyWYzLot/swFLc04pt51t -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:37 2026 by rpki-client