This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer File: h5TVZDYKUh21mK7m5qL41mkhtsU.cer (raw, json) Hash identifier: elyfYS1VrH25fFnDCuX2Kl+nIx0ARIebo7avq1hlKoA= Subject key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2D21168A28DA36DC743CE8A96B3A197A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 16:25:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 213.177.179.0/24 IP: 2a14:c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:21:16:8a:28:da:36:dc:74:3c:e8:a9:6b:3a:19:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 16:25:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:89:7a:47:19:bb:b2:30:24:95:54:5d:90: 36:2d:66:78:95:1d:3e:ed:a7:21:a1:12:ba:86:63: c9:3e:ad:be:53:4f:2f:fa:5a:00:fb:9e:0b:01:24: a8:22:68:45:25:f8:77:e4:5d:54:ba:b9:ae:53:00: 80:08:8c:7a:24:7d:46:20:df:90:de:1b:00:14:41: 39:da:b8:cc:a1:14:f2:63:42:73:c9:04:f2:4d:9b: f7:c7:53:8b:b0:ac:a1:e4:62:6f:3d:58:7f:c8:81: b2:17:06:a4:11:c9:a1:ee:8a:25:1e:4a:89:ba:98: 95:1b:03:8a:e3:e8:a9:e5:d7:f5:f1:0f:57:40:96: 09:de:83:42:65:e1:8a:27:ee:40:08:10:7a:b3:90: b8:04:00:bd:e4:ca:80:e9:fa:02:be:a6:38:bb:4a: cf:50:9f:61:ce:2d:0a:18:68:92:ab:e3:bc:5c:d7: 4d:9a:82:73:ea:1d:99:7b:7c:19:64:0d:b1:28:9f: dc:ae:e8:05:fd:af:3f:5e:56:1c:eb:47:60:33:24: 51:a8:6c:67:ce:18:13:88:95:eb:78:95:84:b3:f7: ba:b9:98:1f:31:36:71:e1:30:52:24:9a:30:3a:e8: e1:57:5e:ec:aa:22:ed:4f:cb:d5:21:2a:b7:4e:ec: 21:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.179.0/24 IPv6: 2a14:c00::/29 Signature Algorithm: sha256WithRSAEncryption 40:17:55:90:98:01:3d:84:76:e4:20:56:01:88:71:ed:fe:f7: 0f:57:4a:ff:17:e2:b0:81:b6:2c:38:72:3c:dd:45:ad:89:2d: 85:95:4d:40:87:81:77:48:54:08:ab:bb:33:2b:a0:af:f0:1c: 2b:dd:b3:3e:b3:14:d3:4a:73:9f:6f:44:0d:ab:a4:f4:0c:d4: 86:3f:b0:11:0e:af:11:ee:c6:d3:04:50:5f:4c:b6:91:e4:20: fb:44:47:a6:d6:ed:5c:0e:52:e9:3b:26:67:15:8f:d9:48:c1: 17:57:32:56:82:da:e1:51:c6:cd:83:79:5c:a3:ec:dc:a7:b0: 74:bb:b0:4e:3c:96:c6:6a:c8:d1:e7:11:5c:cf:ee:aa:bc:37: 17:44:67:6a:30:01:1f:72:ff:5d:0c:66:5b:4a:90:8c:c2:ef: a8:88:e5:4b:c4:3d:3d:32:37:5d:87:b6:99:f0:d5:9f:d8:34: b0:16:f6:8b:27:8c:e8:0d:66:d1:75:e9:7b:89:a3:b5:fc:a4: b3:6d:81:2e:7a:24:27:ab:e1:a0:56:72:89:7c:6c:ca:a1:d2: c7:18:d8:68:ee:f9:0d:9e:53:c3:9f:4f:c4:dc:5f:ce:d7:55: f3:d3:b8:ee:c8:f4:97:3e:a1:8e:8f:05:55:9c:85:c6:c6:d4: f9:6e:eb:02 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZstIRaKKNo23HQ86KlrOhl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MTYyNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk0ZDU2NDM2MGE1MjFkYjU5OGFlZTZlNmEyZjhkNjY5MjFiNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47CJekcZu7IwJJVUXZA2LWZ4lR0+ 7achoRK6hmPJPq2+U08v+loA+54LASSoImhFJfh35F1UurmuUwCACIx6JH1GIN+Q 3hsAFEE52rjMoRTyY0JzyQTyTZv3x1OLsKyh5GJvPVh/yIGyFwakEcmh7oolHkqJ upiVGwOK4+ip5df18Q9XQJYJ3oNCZeGKJ+5ACBB6s5C4BAC95MqA6foCvqY4u0rP UJ9hzi0KGGiSq+O8XNdNmoJz6h2Ze3wZZA2xKJ/crugF/a8/XlYc60dgMyRRqGxn zhgTiJXreJWEs/e6uZgfMTZx4TBSJJowOujhV17sqiLtT8vVISq3TuwhUwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIeU1WQ2ClIdtZiu5uai+NZpIbbFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2NhMTY2 Ny1kZThmLTQ1ZGMtOTAwNy01YWZlMGM0MmNmNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvY2ExNjY3 LWRlOGYtNDVkYy05MDA3LTVhZmUwYzQyY2Y3Ny8xL2g1VFZaRFlLVWgyMW1LN201 cUw0MW1raHRzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1bGzMA0EAgACMAcDBQMqFAwAMA0GCSqGSIb3 DQEBCwUAA4IBAQBAF1WQmAE9hHbkIFYBiHHt/vcPV0r/F+KwgbYsOHI83UWtiS2F lU1Ah4F3SFQIq7szK6Cv8Bwr3bM+sxTTSnOfb0QNq6T0DNSGP7ARDq8R7sbTBFBf TLaR5CD7REem1u1cDlLpOyZnFY/ZSMEXVzJWgtrhUcbNg3lco+zcp7B0u7BOPJbG asjR5xFcz+6qvDcXRGdqMAEfcv9dDGZbSpCMwu+oiOVLxD09Mjddh7aZ8NWf2DSw FvaLJ4zoDWbRdel7iaO1/KSzbYEueiQnq+GgVnKJfGzKodLHGNho7vkNnlPDn0/E 3F/O11Xz07juyPSXPqGOjwVVnIXGxtT5busC -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:21 2025 by rpki-client