This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer (raw, json) Hash identifier: U8E88oVatO+mZnXfJALlgmmrtEWDK3ltAuCclUOq580= Subject key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791126243BBDE1CAC543E7FA8F3AD01D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.243.129.0/24 IP: 2a04:96c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:26:24:3b:bd:e1:ca:c5:43:e7:fa:8f:3a:d0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e46a3f838688843758d28057007dc6cd2898ecca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:07:7d:44:49:27:e0:45:b9:ee:ba:70:bc:b7: cb:5e:38:88:e6:b1:95:48:1b:05:05:f3:0a:84:e0: 9e:5f:88:7a:dd:8b:42:d4:fd:f4:52:3d:00:c1:7a: a4:e4:7d:7e:25:29:a3:c2:90:2b:84:a1:2b:be:ad: b7:54:fc:33:c1:fa:a0:6b:35:ab:f3:bb:50:ae:1c: e8:63:f4:2d:ce:3c:e1:11:aa:86:3e:4e:ea:74:62: d6:44:9d:19:cb:e3:7e:56:d4:e7:89:a9:2c:ce:3d: a2:eb:93:f2:8f:8c:ab:d1:36:5a:54:0c:13:bf:ef: cd:f5:41:2b:ac:d3:a1:9d:70:b4:78:ae:4e:aa:83: 40:65:83:56:87:94:18:3e:c8:80:bc:52:2e:35:5a: 4f:cd:fa:d5:e7:5e:1c:90:7e:85:ef:44:ab:29:4b: 2c:83:d3:43:4f:85:6d:bd:4b:bf:e8:f6:90:44:11: 6f:79:84:a4:50:02:ab:7b:ea:1f:17:dc:12:d7:3e: 39:31:2e:47:41:b7:31:41:57:f9:87:19:fc:03:6e: 27:e5:f5:b5:07:11:e2:da:64:91:65:f1:05:32:e4: b6:8f:32:f5:5d:8d:c3:41:0c:cd:47:6b:4f:75:f4: 55:54:92:34:5b:a7:6e:b7:81:7f:56:f8:50:d7:37: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.243.129.0/24 IPv6: 2a04:96c0::/29 Signature Algorithm: sha256WithRSAEncryption 9a:9a:58:1d:d7:22:ee:3b:a6:26:f9:f6:1a:4d:8f:12:8e:ac: 3d:b2:9f:10:b8:1e:dc:38:88:db:d9:51:ed:30:ab:90:e7:c8: 9c:c7:d2:87:c7:bd:02:77:3f:75:ed:42:af:4f:89:21:b2:25: a1:20:c5:11:41:bc:64:ad:6c:c2:a6:2c:25:71:03:c7:77:28: 20:e6:38:f4:6b:c9:2a:30:26:59:19:03:aa:e3:b3:d5:6e:68: 18:bb:97:0e:17:bd:94:b1:82:43:65:b4:a2:19:9a:2b:39:82: 86:3c:3a:1b:49:0e:f4:ff:66:69:82:03:7f:c0:42:49:f1:0c: c1:cd:36:a1:d8:52:1f:00:a2:06:07:d2:58:54:d4:c5:4a:3f: 69:33:4c:a9:87:a0:7a:7e:b5:0d:5c:41:a8:35:4d:d3:73:9f: 14:d7:48:a3:8d:23:23:4b:84:25:4a:3c:ba:85:f5:8e:f1:8b: a9:36:73:00:05:23:12:92:66:74:89:a2:00:02:5c:76:3f:62: 1a:79:51:ee:80:64:1d:bf:07:87:76:56:67:39:6d:a7:1d:98: 3f:67:7f:72:57:e9:fb:1d:d0:2a:f1:76:ea:5c:ad:c0:9d:7b: 99:bb:a3:11:57:b3:27:78:41:38:05:32:3b:61:30:ed:69:f3: 1e:02:51:b9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5ESYkO73hysVD5/qPOtAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDZhM2Y4Mzg2ODg4NDM3NThkMjgwNTcwMDdkYzZjZDI4OThlY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gd9REkn4EW57rpwvLfLXjiI5rGV SBsFBfMKhOCeX4h63YtC1P30Uj0AwXqk5H1+JSmjwpArhKErvq23VPwzwfqgazWr 87tQrhzoY/QtzjzhEaqGPk7qdGLWRJ0Zy+N+VtTniakszj2i65Pyj4yr0TZaVAwT v+/N9UErrNOhnXC0eK5OqoNAZYNWh5QYPsiAvFIuNVpPzfrV514ckH6F70SrKUss g9NDT4VtvUu/6PaQRBFveYSkUAKre+ofF9wS1z45MS5HQbcxQVf5hxn8A24n5fW1 BxHi2mSRZfEFMuS2jzL1XY3DQQzNR2tPdfRVVJI0W6dut4F/VvhQ1zfpfQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFORqP4OGiIQ3WNKAVwB9xs0omOzKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzUyY2Y5 OS1lNzk4LTRjYWItYTMwMy1hM2IwNmQ0ZTQ3NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNTJjZjk5 LWU3OTgtNGNhYi1hMzAzLWEzYjA2ZDRlNDc3NS8xLzVHb19nNGFJaERkWTBvQlhB SDNHelNpWTdNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwfOBMA0EAgACMAcDBQMqBJbAMA0GCSqGSIb3 DQEBCwUAA4IBAQCamlgd1yLuO6Ym+fYaTY8Sjqw9sp8QuB7cOIjb2VHtMKuQ58ic x9KHx70Cdz917UKvT4khsiWhIMURQbxkrWzCpiwlcQPHdygg5jj0a8kqMCZZGQOq 47PVbmgYu5cOF72UsYJDZbSiGZorOYKGPDobSQ70/2ZpggN/wEJJ8QzBzTah2FIf AKIGB9JYVNTFSj9pM0yph6B6frUNXEGoNU3Tc58U10ijjSMjS4QlSjy6hfWO8Yup NnMABSMSkmZ0iaIAAlx2P2IaeVHugGQdvweHdlZnOW2nHZg/Z39yV+n7HdAq8Xbq XK3AnXuZu6MRV7MneEE4BTI7YTDtafMeAlG5 -----END CERTIFICATE-----Generated at Thu Jan 1 14:09:51 2026 by rpki-client