This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.cer (raw, json) Hash identifier: ErYIxpxdVHWtwFCNoLXWDIgNpq1opRuhdDcTqtb0s14= Subject key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80776845C75E5CA90E617581CBFBBA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20813 IP: 193.108.160.0/23 IP: 194.24.226.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:77:68:45:c7:5e:5c:a9:0e:61:75:81:cb:fb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:59:b4:02:75:b5:8b:fa:0f:5b:59:6a:df: fd:ab:28:ab:c9:32:bb:9b:0e:06:77:62:16:36:79: b5:ea:08:87:05:b3:82:07:cd:80:a2:28:a4:3c:79: e0:27:9c:e2:78:b3:be:6e:a7:0c:cc:e9:a5:57:79: 5b:b7:25:e0:4d:49:62:8a:6f:96:3a:c6:0f:d3:87: 1c:77:05:59:6c:96:0b:15:9a:6e:ec:ab:f2:43:1d: 6e:15:4e:6d:38:54:7e:38:67:ee:45:4a:c0:c7:27: e6:8f:01:2c:55:53:bb:47:d9:92:b1:ac:a8:d9:20: 10:76:14:66:68:01:12:00:ea:1c:20:1b:55:0d:42: 1b:03:0b:5f:0f:09:6a:28:85:34:09:51:48:3f:0c: 83:77:3f:09:f2:9b:55:97:c8:24:d8:71:18:1f:09: c7:72:6b:78:fb:8d:23:5c:a9:ac:3f:19:5a:01:5c: 30:63:3f:01:b2:61:b9:ab:fc:a9:b4:b9:0d:45:1e: 14:8b:17:43:2e:30:5d:60:99:f8:ea:b2:4c:0f:32: 15:8d:45:89:53:9d:23:22:de:05:99:f5:2a:aa:ab: bb:b7:cb:d2:cc:51:02:c0:90:a5:ca:38:a5:b3:43: f5:cf:46:4d:c1:0b:58:a3:98:3b:26:b9:f0:f1:54: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.160.0/23 194.24.226.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20813 Signature Algorithm: sha256WithRSAEncryption ac:9c:ba:18:84:50:07:d5:39:1f:52:87:a0:ae:74:e0:a8:90: f8:f2:d0:85:88:c0:7f:b9:41:89:b4:48:10:2b:c6:84:7d:e7: db:ff:45:bc:8d:ae:a5:bb:9f:aa:9b:52:88:34:6b:f3:09:e9: ec:44:09:e0:2e:26:53:1a:fd:bd:24:eb:c5:5c:e4:b5:df:46: 34:29:79:e5:1d:11:d5:69:66:60:ce:20:b9:f0:1b:c6:c4:56: 21:14:d6:f7:57:7d:60:15:16:61:1e:6a:85:e4:cc:53:ea:ed: d4:02:66:db:eb:57:de:47:57:12:d4:c5:64:90:42:37:d9:67: 6a:48:31:92:e8:60:18:59:9a:02:e0:d9:5f:a1:0d:6c:f3:44: 44:65:12:e5:4f:50:ad:3d:2c:b4:37:bf:92:26:14:1f:9d:2d: 5f:9b:5c:78:97:be:b1:51:b4:9d:2e:64:b6:f9:be:04:4d:61: 90:ff:80:77:55:3c:69:fb:00:ff:68:60:af:17:0b:c5:b5:33: ea:5a:98:74:33:19:59:10:90:33:5a:dd:5c:f2:ae:fd:45:cc: ad:03:ad:51:dc:7e:19:00:74:b3:69:da:3c:0b:38:9d:91:68: 54:f0:7d:d6:e5:5d:7f:4f:a2:d8:33:21:43:88:62:d9:41:34: 20:51:63:03 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt8gHdoRcdeXKkOYXWBy/u6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQ0ZTI2NmQ0ZWI5Y2M3ZGVkMjkyYzEyYjA2YjFjYTdiY2VhNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYFZtAJ1tYv6D1tZat/9qyiryTK7 mw4Gd2IWNnm16giHBbOCB82AoiikPHngJ5zieLO+bqcMzOmlV3lbtyXgTUliim+W OsYP04ccdwVZbJYLFZpu7KvyQx1uFU5tOFR+OGfuRUrAxyfmjwEsVVO7R9mSsayo 2SAQdhRmaAESAOocIBtVDUIbAwtfDwlqKIU0CVFIPwyDdz8J8ptVl8gk2HEYHwnH cmt4+40jXKmsPxlaAVwwYz8BsmG5q/yptLkNRR4UixdDLjBdYJn46rJMDzIVjUWJ U50jIt4FmfUqqqu7t8vSzFECwJClyjils0P1z0ZNwQtYo5g7Jrnw8VS1CQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFOVE4mbU65zH3tKSwSsGscp7zqd4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2JmZjc5 OS05ZTMyLTQzYmUtODVjZC04MjQ3NjA3MTRkZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYmZmNzk5 LTllMzItNDNiZS04NWNkLTgyNDc2MDcxNGRmYi8xLzVVVGladFRybk1mZTBwTEJL d2F4eW52T3AzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwWygAwQBwhjiMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAlFNMA0GCSqGSIb3DQEBCwUAA4IBAQCsnLoYhFAH1TkfUoegrnTgqJD4 8tCFiMB/uUGJtEgQK8aEfefb/0W8ja6lu5+qm1KINGvzCensRAngLiZTGv29JOvF XOS130Y0KXnlHRHVaWZgziC58BvGxFYhFNb3V31gFRZhHmqF5MxT6u3UAmbb61fe R1cS1MVkkEI32WdqSDGS6GAYWZoC4NlfoQ1s80REZRLlT1CtPSy0N7+SJhQfnS1f m1x4l76xUbSdLmS2+b4ETWGQ/4B3VTxp+wD/aGCvFwvFtTPqWph0MxlZEJAzWt1c 8q79RcytA61R3H4ZAHSzado8CzidkWhU8H3W5V1/T6LYMyFDiGLZQTQgUWMD -----END CERTIFICATE-----Generated at Sun Jan 11 20:16:45 2026 by rpki-client