This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer (raw, json) Hash identifier: KlsuML0yWulYZxSljHAY3FJODVOdT7eRqIxIUu0GCCI= Subject key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C7BCE4108EDC3CECE288923A039A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207618 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7b:ce:41:08:ed:c3:ce:ce:28:89:23:a0:39:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:26:ff:f1:b8:a1:fd:e7:90:ef:ab:98:63: a5:1a:f3:fe:29:8f:00:4d:53:fb:d8:68:18:83:62: 62:2d:4b:fa:cf:f9:af:20:4c:b1:9d:fa:8c:d7:93: 4d:9d:ee:b3:c2:85:67:cd:12:ad:36:16:41:1d:3e: 9d:20:a1:64:97:1b:dc:f2:6b:a5:0d:38:42:6e:e1: 44:48:5f:aa:e8:8c:0c:e7:c8:00:42:bc:fc:f1:e4: aa:80:64:4c:28:7d:46:a8:c4:61:22:e4:5b:92:a0: 87:63:c9:6e:8a:55:4e:7f:e2:82:a8:af:54:7d:52: 38:33:d2:eb:d8:74:d2:58:52:9c:93:d2:56:55:46: 68:9e:52:f4:25:82:bf:cf:45:a2:05:43:97:89:fc: af:94:e7:82:32:0b:79:c4:dc:e8:bc:d0:8f:07:d6: 77:bc:d3:e2:68:8b:98:e5:5f:85:06:54:3b:28:3f: b6:a4:5c:d7:77:db:b7:cd:ba:57:27:76:01:69:cc: 2c:ac:86:f7:be:58:51:36:5c:0c:89:e9:14:ef:2b: a2:7f:b1:d5:f6:97:be:cf:18:87:5f:ac:7b:69:37: 40:ef:3f:08:36:b5:e7:1a:b0:7c:cc:0f:e1:bd:90: 3f:7b:92:3d:0d:c3:43:5c:05:1d:27:06:d5:57:57: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207618 Signature Algorithm: sha256WithRSAEncryption 36:26:d9:b6:a9:1b:b8:00:6c:b6:59:ac:cb:d4:c9:aa:dd:60: 31:58:9e:ff:db:b4:e2:d9:f7:bc:d9:72:14:ce:1f:50:93:dd: 10:52:a1:4f:27:5d:13:60:14:54:36:71:ba:b9:f4:52:ed:1b: 5f:14:1b:10:00:8b:c4:7d:37:73:ca:65:a4:38:02:6d:c2:ee: 40:4e:72:8a:58:1f:67:d6:e1:4f:6e:d9:a6:ca:21:db:d1:39: 2f:37:5d:34:c3:c9:3a:42:a0:a3:4d:0e:69:26:08:d6:b5:c5: 21:ba:97:e2:7d:01:52:69:af:9c:2c:c8:8b:91:62:38:7a:35: 2b:b7:07:ca:60:0a:3d:ae:d1:a7:d7:fe:0c:34:58:a5:60:73: f8:9d:11:60:69:e2:43:aa:54:b3:44:1e:fc:c6:c0:2b:eb:43: 20:ba:96:b4:b5:90:17:d5:6b:71:ce:db:04:32:1e:76:25:08: 2e:44:c4:07:1f:c9:ee:91:77:aa:92:69:bc:b1:a5:bc:aa:27: bc:4a:ad:02:5a:85:7c:4e:4f:a7:21:b4:fc:9d:4e:eb:ee:3a: 38:a7:92:b9:d1:91:e3:62:1e:1b:7d:72:0e:93:ba:c5:2f:38: 8f:54:bf:a0:a3:4a:e4:9d:63:22:5e:fe:0e:e3:87:49:fd:37: 78:81:5f:19 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XHvOQQjtw87OKIkjoDmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjFiOWE1ZDZkOTg3MDNjMzg3MmExYmIzZjkwZDEwMzY4NWNiZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRom//G4of3nkO+rmGOlGvP+KY8A TVP72GgYg2JiLUv6z/mvIEyxnfqM15NNne6zwoVnzRKtNhZBHT6dIKFklxvc8mul DThCbuFESF+q6IwM58gAQrz88eSqgGRMKH1GqMRhIuRbkqCHY8luilVOf+KCqK9U fVI4M9Lr2HTSWFKck9JWVUZonlL0JYK/z0WiBUOXifyvlOeCMgt5xNzovNCPB9Z3 vNPiaIuY5V+FBlQ7KD+2pFzXd9u3zbpXJ3YBacwsrIb3vlhRNlwMiekU7yuif7HV 9pe+zxiHX6x7aTdA7z8INrXnGrB8zA/hvZA/e5I9DcNDXAUdJwbVV1eKMwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOYbml1tmHA8OHKhuz+Q0QNoXL0EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2NiODc5 Yi05Yzk2LTQyOWEtOWJiMy1lMThkOTk4YzY0ZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvY2I4Nzli LTljOTYtNDI5YS05YmIzLWUxOGQ5OThjNjRlZi8xLzVodWFYVzJZY0R3NGNxRzdQ NURSQTJoY3ZRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMrAjANBgkqhkiG9w0BAQsFAAOCAQEANibZtqkbuABs tlmsy9TJqt1gMVie/9u04tn3vNlyFM4fUJPdEFKhTyddE2AUVDZxurn0Uu0bXxQb EACLxH03c8plpDgCbcLuQE5yilgfZ9bhT27Zpsoh29E5LzddNMPJOkKgo00OaSYI 1rXFIbqX4n0BUmmvnCzIi5FiOHo1K7cHymAKPa7Rp9f+DDRYpWBz+J0RYGniQ6pU s0Qe/MbAK+tDILqWtLWQF9Vrcc7bBDIediUILkTEBx/J7pF3qpJpvLGlvKonvEqt AlqFfE5PpyG0/J1O6+46OKeSudGR42IeG31yDpO6xS84j1S/oKNK5J1jIl7+DuOH Sf03eIFfGQ== -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:33 2026 by rpki-client