This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.cer (raw, json) Hash identifier: sjgk2r7604Flwq8klw36tQi/ZWx9XvKebpujdXLv01M= Subject key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153C66CA9E2B0A770BD77D76AFA03C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.8.170.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3c:66:ca:9e:2b:0a:77:0b:d7:7d:76:af:a0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:c2:55:cd:f4:b4:c1:eb:2b:18:7c:4d:8f: bd:87:d8:7c:25:c8:bb:a8:d7:58:9e:a1:16:4e:30: 74:b0:0d:0e:b5:a8:44:2b:09:ce:04:13:99:94:12: 78:b5:2d:cd:3b:12:08:76:23:34:35:32:0a:36:d9: 5f:7e:b4:06:21:c8:55:3d:51:ec:94:f3:a1:20:d5: 64:e9:5a:f8:32:25:1e:fe:64:19:e3:3e:5b:80:9a: 86:78:53:02:79:e6:88:44:9b:0c:19:08:e5:d6:95: 17:43:5e:6d:89:16:0a:8f:0b:86:6c:2e:c0:8a:1d: 44:2b:1a:76:01:c5:cd:8f:c7:b1:6a:e1:a9:cd:d2: fc:e6:0d:ef:ff:f4:b9:21:3c:d4:3b:b1:41:bd:ec: 1e:c6:4d:71:9c:0a:70:cc:07:8c:de:29:46:8e:d5: bc:f4:f7:99:78:a8:dd:90:cc:42:3e:ed:f6:85:ee: d8:57:df:4b:db:6d:22:e0:98:fb:0d:87:70:e9:8a: f1:56:a7:79:06:dc:c0:93:4c:0e:c4:c7:46:b8:a9: bc:35:9f:fe:53:03:42:1b:96:9e:a4:33:8a:5f:39: 47:15:c0:39:a1:27:ea:e0:4a:38:13:d5:56:19:9f: 6d:4c:7d:f3:08:e7:42:f7:95:ba:db:0b:85:f7:a7: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.170.0/24 Signature Algorithm: sha256WithRSAEncryption a6:25:5c:3e:50:65:39:14:a3:d9:5f:f2:a4:fb:56:56:9e:24: 10:ac:71:f1:f7:70:17:8e:ab:01:71:90:49:fc:06:c2:35:a8: 96:2c:47:de:a7:66:5a:ea:c1:ca:11:8e:90:64:a0:a4:5b:af: a1:ea:93:07:10:b9:0d:5c:15:2d:5f:50:e4:d1:8f:0f:56:8e: af:c4:bd:41:b6:cb:d4:71:a9:b8:b5:d7:0c:fa:b9:ff:d2:eb: 73:57:d7:86:49:7c:70:08:59:8f:a6:d5:e9:76:85:92:5c:04: 4b:27:dd:03:f9:7e:37:2d:8c:4f:2e:43:c4:53:cf:ae:c1:22: d1:da:d2:b2:5c:9e:ee:05:fb:93:d8:2a:93:29:66:11:1f:6d: d2:0f:82:a8:72:5c:a2:84:df:05:ae:93:3d:8d:bd:6f:1a:43: 8a:de:be:c5:5f:4e:5a:ef:3c:57:b0:eb:5b:f6:0b:e7:3a:75: 74:0e:13:ad:dc:77:9c:3a:a8:3d:df:c7:35:74:2f:17:48:85: 18:c4:f0:62:b2:f4:6b:b0:7e:75:6f:cb:e2:8a:fb:c2:09:69: a8:9c:5a:5b:f4:66:54:35:60:9d:20:98:21:e1:99:55:f6:13: b5:fa:0a:76:05:cf:4e:32:0c:93:1f:6e:db:1e:6d:08:dc:b9: 22:c8:16:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FTxmyp4rCncL1312r6A8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmUxYWYzN2E2MGE5OTg2OGVmYmJhYTA4MTdiNDk4MGYxOWE1NGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaTCVc30tMHrKxh8TY+9h9h8Jci7 qNdYnqEWTjB0sA0OtahEKwnOBBOZlBJ4tS3NOxIIdiM0NTIKNtlffrQGIchVPVHs lPOhINVk6Vr4MiUe/mQZ4z5bgJqGeFMCeeaIRJsMGQjl1pUXQ15tiRYKjwuGbC7A ih1EKxp2AcXNj8exauGpzdL85g3v//S5ITzUO7FBvewexk1xnApwzAeM3ilGjtW8 9PeZeKjdkMxCPu32he7YV99L220i4Jj7DYdw6YrxVqd5BtzAk0wOxMdGuKm8NZ/+ UwNCG5aepDOKXzlHFcA5oSfq4Eo4E9VWGZ9tTH3zCOdC95W62wuF96fi2wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFObhrzemCpmGjvu6oIF7SYDxmlT7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2U2NTgw Yi1iZmY3LTQxZTgtYjMxNC0xNDA0NWI2NGFlMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvZTY1ODBi LWJmZjctNDFlOC1iMzE0LTE0MDQ1YjY0YWUyOS8xLzV1R3ZONllLbVlhTy03cWdn WHRKZ1BHYVZQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQiqMA0GCSqGSIb3DQEBCwUAA4IBAQCmJVw+ UGU5FKPZX/Kk+1ZWniQQrHHx93AXjqsBcZBJ/AbCNaiWLEfep2Za6sHKEY6QZKCk W6+h6pMHELkNXBUtX1Dk0Y8PVo6vxL1BtsvUcam4tdcM+rn/0utzV9eGSXxwCFmP ptXpdoWSXARLJ90D+X43LYxPLkPEU8+uwSLR2tKyXJ7uBfuT2CqTKWYRH23SD4Ko clyihN8FrpM9jb1vGkOK3r7FX05a7zxXsOtb9gvnOnV0DhOt3HecOqg938c1dC8X SIUYxPBisvRrsH51b8viivvCCWmonFpb9GZUNWCdIJgh4ZlV9hO1+gp2Bc9OMgyT H27bHm0I3LkiyBZN -----END CERTIFICATE-----Generated at Sat Jan 3 02:19:22 2026 by rpki-client