This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer File: 5wn3YuCC6tPW1-TK4p77tNEvV14.cer (raw, json) Hash identifier: y/jRqIALcWlpc6vit/IXp3xB3f/ksD8wX6Vp9Y9Zg94= Subject key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB619DBBE37708411729022A526D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62080 IP: 2001:678:310::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b6:19:db:be:37:70:84:11:72:90:22:a5:26:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:72:f8:9f:0c:c2:07:0e:be:64:9a:f7:aa: 0f:11:4f:2d:27:80:48:28:7b:e4:5c:4d:c2:a9:48: 9e:4e:1f:bc:70:c0:a3:d8:c6:51:d5:e0:cc:62:15: 4e:bd:ab:97:7a:c5:32:c3:17:9c:6d:a2:17:8f:f4: ac:55:01:b2:77:f5:de:ac:f0:97:06:48:e4:12:8a: 47:b8:11:f3:aa:f0:19:2b:ad:a6:f2:d0:7e:ff:65: bd:aa:be:d2:31:50:77:eb:8a:29:a3:a8:c2:95:af: 54:d1:9b:6b:db:67:d9:bd:57:dd:d1:05:97:cd:4d: 17:33:36:17:45:0e:fe:7e:d7:5b:a6:ac:47:de:b0: 92:d6:f3:35:bf:d7:1f:0e:88:0c:c8:4b:dd:15:f5: 7e:ef:48:33:b9:62:fa:11:15:fc:17:d7:1d:f5:95: c5:23:e1:71:61:51:75:8f:0d:e5:e3:cb:62:e9:ef: ab:c4:16:35:b1:9f:45:bf:9b:d2:4c:62:1e:46:84: c3:aa:e1:33:f1:dd:54:fb:1f:1e:f7:96:2c:cd:81: 5d:d6:a4:26:56:5d:77:1e:09:43:4e:01:c2:b2:61: c6:36:5d:f8:3a:dd:2b:c3:97:d2:ed:5a:4d:e9:6b: 1f:1d:e6:9e:0e:43:e5:66:cc:41:25:73:44:6f:0b: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:310::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62080 Signature Algorithm: sha256WithRSAEncryption 1e:46:53:27:13:6c:15:7f:39:22:a1:14:5d:e9:bb:fa:9d:58: 53:39:3a:34:10:00:39:42:58:ff:b4:0e:8c:7f:47:6f:0c:0a: f0:ee:a4:05:f1:70:59:b4:84:b2:ed:65:98:af:d1:a6:10:8f: 46:d5:08:4f:35:33:87:ac:37:d7:58:4a:95:0a:d0:2a:8f:ed: 0a:53:5e:c7:a3:52:94:be:dd:4f:80:83:85:6d:08:a8:25:fd: f9:dd:00:3e:bc:fb:67:28:c4:83:62:1c:58:77:18:f3:9b:4d: 28:f1:3e:8f:c0:8a:06:d5:fc:6c:a5:a0:79:19:4b:6e:da:98: 76:9b:55:b7:66:a3:3a:aa:38:68:4b:bf:04:df:ee:f2:f8:e6: 6e:b4:06:bb:31:15:a0:21:9e:89:39:c2:8a:2e:b7:04:03:0c: 2b:c4:ee:3b:b9:5c:d8:37:7f:24:f5:b3:64:b7:fb:fb:ff:fa: 60:af:bc:55:02:f1:8d:45:7b:3b:d7:2e:d3:d7:ce:69:22:53: af:76:47:06:c6:ac:f1:59:9f:53:36:eb:74:69:88:61:63:51: 17:c3:d8:59:9c:d9:32:b5:5b:f3:69:7f:05:63:d8:54:7e:8c: de:1b:ce:32:11:67:7b:56:71:09:88:ab:57:9b:f1:ed:c1:52: 0f:7a:ad:7b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9XLYZ2743cIQRcpAipSbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzA5Zjc2MmUwODJlYWQzZDZkN2U0Y2FlMjllZmJiNGQxMmY1NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5y+J8MwgcOvmSa96oPEU8tJ4BI KHvkXE3CqUieTh+8cMCj2MZR1eDMYhVOvauXesUywxecbaIXj/SsVQGyd/XerPCX BkjkEopHuBHzqvAZK62m8tB+/2W9qr7SMVB364opo6jCla9U0Ztr22fZvVfd0QWX zU0XMzYXRQ7+ftdbpqxH3rCS1vM1v9cfDogMyEvdFfV+70gzuWL6ERX8F9cd9ZXF I+FxYVF1jw3l48ti6e+rxBY1sZ9Fv5vSTGIeRoTDquEz8d1U+x8e95YszYFd1qQm Vl13HglDTgHCsmHGNl34Ot0rw5fS7VpN6WsfHeaeDkPlZsxBJXNEbwuFsQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOcJ92LggurT1tfkyuKe+7TRL1deMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzBiZGE0 YS01YzEwLTQ0ZGItOGY2Mi1hZTRmYTdmMTdmOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMGJkYTRh LTVjMTAtNDRkYi04ZjYyLWFlNGZhN2YxN2Y5Yy8xLzV3bjNZdUNDNnRQVzEtVEs0 cDc3dE5FdlYxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAMQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDygDANBgkqhkiG9w0BAQsFAAOCAQEAHkZTJxNsFX85IqEUXem7+p1YUzk6 NBAAOUJY/7QOjH9HbwwK8O6kBfFwWbSEsu1lmK/RphCPRtUITzUzh6w311hKlQrQ Ko/tClNex6NSlL7dT4CDhW0IqCX9+d0APrz7ZyjEg2IcWHcY85tNKPE+j8CKBtX8 bKWgeRlLbtqYdptVt2ajOqo4aEu/BN/u8vjmbrQGuzEVoCGeiTnCii63BAMMK8Tu O7lc2Dd/JPWzZLf7+//6YK+8VQLxjUV7O9cu09fOaSJTr3ZHBsas8VmfUzbrdGmI YWNRF8PYWZzZMrVb82l/BWPYVH6M3hvOMhFne1ZxCYirV5vx7cFSD3qtew== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:39 2026 by rpki-client