This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer File: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer (raw, json) Hash identifier: Clt3w5HuWlv5szxyDZ+wruCJ/WmOPGNCTXYo+elpabI= Subject key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD18482A2FB58040BB756B93AB44B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.197.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d1:84:82:a2:fb:58:04:0b:b7:56:b9:3a:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6157528a9cce92518f36bf0a81b7901a650ae94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:9a:02:70:3b:e5:65:4b:e7:43:96:55:c5: 53:65:e8:57:95:76:60:46:3f:5e:e9:b1:46:94:fe: 9d:98:7e:f2:2b:d9:f3:37:b8:4a:19:f0:9c:04:c1: 08:c7:6c:67:19:08:9e:08:41:04:30:5d:4e:f4:d3: 83:b0:05:1a:c2:28:9e:8e:bc:0e:56:2f:e6:7a:90: c9:69:20:37:ca:0c:eb:85:b5:cc:df:1c:12:1f:2a: 14:57:dc:f4:07:31:b5:05:b7:b7:83:7e:22:7e:04: 53:a8:36:d1:37:f0:ea:34:25:be:ff:c4:f8:78:1c: 01:a8:ec:f5:b6:80:48:c1:b1:a4:9e:36:67:71:78: b9:02:af:df:8c:f4:e8:ae:e0:fa:28:7a:97:2a:38: 61:16:23:f0:e8:46:f8:1b:53:f7:80:0b:7a:91:07: df:3d:b4:ab:74:35:fc:19:a7:28:4a:4b:20:53:fd: c8:f3:20:e8:42:47:37:f7:64:f0:93:f1:ff:ed:42: 55:76:ed:45:61:1e:0a:a9:55:60:ff:e8:a8:1a:a8: b4:72:65:c0:11:5a:d0:e0:8e:62:03:fd:3c:e5:3e: e7:af:89:a7:7b:de:2f:5c:ce:7b:0c:8e:e5:5d:05: 94:b4:75:13:72:7c:e6:ce:07:07:71:65:bd:68:e9: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.197.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:44:16:08:eb:21:84:62:f8:8c:c7:af:7d:b0:21:e5:05:59: 67:f8:d3:92:ab:28:04:a6:e7:80:f3:4a:25:15:6f:54:08:c7: 52:e1:42:c3:16:64:81:31:42:4d:1e:53:66:a7:73:e3:1a:e6: 8b:52:c1:81:f0:41:e4:1f:df:c5:70:a2:43:a9:94:3b:d7:1b: 85:0d:86:36:01:b9:5b:f6:95:02:4d:9a:51:af:7f:87:82:be: 87:ce:e2:bf:4c:c2:2e:92:c2:34:04:88:02:99:03:5b:0b:3e: 57:af:11:fe:2c:5c:c0:af:f1:43:b7:fe:11:be:e6:d8:f9:7d: 6a:8f:d3:e7:85:12:df:6b:fe:bc:94:ba:92:18:fa:a3:3f:42: 36:56:ed:7c:d6:92:cd:7b:1e:79:58:8e:3e:9c:95:b5:44:40: ae:cb:ff:ad:cf:aa:02:83:36:99:91:bb:c3:20:ce:82:ce:6b: 92:7f:f9:21:f5:bc:3a:e2:ee:0e:d8:d6:df:04:cf:93:92:fd: 46:86:4e:a3:89:1d:65:36:ca:7e:d8:89:55:5d:ad:35:c4:4a: 2e:2e:65:96:1c:8d:11:ab:93:66:e7:21:95:cf:9a:9f:20:22: 06:7b:46:ae:f3:a2:dd:7e:82:1d:3f:c2:e7:15:95:2a:9d:df: 8b:18:27:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ytGEgqL7WAQLt1a5OrRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjE1NzUyOGE5Y2NlOTI1MThmMzZiZjBhODFiNzkwMWE2NTBhZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaKaAnA75WVL50OWVcVTZehXlXZg Rj9e6bFGlP6dmH7yK9nzN7hKGfCcBMEIx2xnGQieCEEEMF1O9NODsAUawiiejrwO Vi/mepDJaSA3ygzrhbXM3xwSHyoUV9z0BzG1Bbe3g34ifgRTqDbRN/DqNCW+/8T4 eBwBqOz1toBIwbGknjZncXi5Aq/fjPToruD6KHqXKjhhFiPw6Eb4G1P3gAt6kQff PbSrdDX8GacoSksgU/3I8yDoQkc392Twk/H/7UJVdu1FYR4KqVVg/+ioGqi0cmXA EVrQ4I5iA/085T7nr4mne94vXM57DI7lXQWUtHUTcnzmzgcHcWW9aOmOcwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOYVdSipzOklGPNr8KgbeQGmUK6UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2ViODQ4 NC04OTNmLTQwMGQtOTA4MS03ZDFiMmQ5YTI0MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZWI4NDg0 LTg5M2YtNDAwZC05MDgxLTdkMWIyZDlhMjQwNS8xLzVoVjFLS25NNlNVWTgydndx QnQ1QWFaUXJwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgDFMA0GCSqGSIb3DQEBCwUAA4IBAQAbRBYI 6yGEYviMx699sCHlBVln+NOSqygEpueA80olFW9UCMdS4ULDFmSBMUJNHlNmp3Pj GuaLUsGB8EHkH9/FcKJDqZQ71xuFDYY2Ablb9pUCTZpRr3+Hgr6HzuK/TMIuksI0 BIgCmQNbCz5XrxH+LFzAr/FDt/4RvubY+X1qj9PnhRLfa/68lLqSGPqjP0I2Vu18 1pLNex55WI4+nJW1RECuy/+tz6oCgzaZkbvDIM6CzmuSf/kh9bw64u4O2NbfBM+T kv1Ghk6jiR1lNsp+2IlVXa01xEouLmWWHI0Rq5Nm5yGVz5qfICIGe0au86LdfoId P8LnFZUqnd+LGCdF -----END CERTIFICATE-----Generated at Mon Jan 12 14:57:51 2026 by rpki-client