This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer (raw, json) Hash identifier: hC2emX4XJOtnBa6Raf1CxuLbA81rfJnP/Jb0Nt8sXnw= Subject key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A7F4A03C5ED996D8DDB594EFF10D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43139 AS: 57076 AS: 213724 IP: 80.71.158.0/24 IP: 88.135.69.0/24 IP: 89.22.200.0/21 IP: 91.196.148.0/22 IP: 91.247.182.0/24 IP: 94.158.80.0/20 IP: 109.207.192.0/20 IP: 178.158.192.0/18 IP: 185.199.96.0/22 IP: 195.128.24.0/22 IP: 213.109.148.0/24 IP: 2001:67c:738::/48 IP: 2a0a:9b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a7:f4:a0:3c:5e:d9:96:d8:dd:b5:94:ef:f1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:55:f6:4c:df:ba:3b:59:b1:01:a0:9e:f7:6a: e9:ce:c4:77:40:9a:1e:0f:7f:c7:40:7b:c9:bb:61: 25:bf:f3:17:d9:06:62:b3:3e:76:95:29:99:d6:e2: 0a:08:c6:a6:01:3e:32:b5:78:da:12:a7:67:f4:f0: ad:d7:4f:26:5a:65:da:67:15:ee:ca:f7:b7:32:55: a1:2e:42:b1:2f:19:90:13:8e:29:ba:3d:c8:39:5a: bf:76:68:6b:5b:cc:18:27:ba:a4:ae:9c:5f:b4:99: 80:ca:bb:21:f5:94:4e:c0:70:72:f7:46:bd:bc:ec: 59:a0:eb:42:eb:83:f0:1d:d5:dc:cc:ac:d1:de:c5: 44:03:f6:52:e7:df:d7:5a:fa:42:46:d8:81:76:70: 27:7f:1c:2f:0d:bd:7a:cd:8c:34:e8:0b:88:f4:e5: ab:0a:2d:7a:d8:72:f0:78:e4:9e:9b:16:97:bc:c2: f8:b9:de:bc:c9:41:0d:fe:38:8f:96:4c:0c:03:1c: 9c:35:6e:42:71:44:50:a0:98:10:43:5b:f9:25:85: 78:b3:ee:04:13:c4:b5:62:7e:7b:ef:90:13:8c:96: 04:98:09:de:56:05:92:f4:7e:a3:1f:1d:ab:d1:ae: 9d:3e:f7:c7:81:57:e0:9f:9c:d6:be:57:04:70:66: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.158.0/24 88.135.69.0/24 89.22.200.0/21 91.196.148.0/22 91.247.182.0/24 94.158.80.0/20 109.207.192.0/20 178.158.192.0/18 185.199.96.0/22 195.128.24.0/22 213.109.148.0/24 IPv6: 2001:67c:738::/48 2a0a:9b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43139 57076 213724 Signature Algorithm: sha256WithRSAEncryption 91:d9:9d:b2:22:5b:cc:6d:e4:66:01:94:67:55:ef:a9:06:f7: 19:fa:e5:ab:79:87:28:99:0c:33:10:29:66:01:47:4e:16:c8: 9c:cb:0e:36:2a:55:d2:02:95:7c:a7:0b:dc:97:dc:ae:93:58: 40:81:b5:c1:de:aa:1a:8f:ba:c9:a9:3f:45:54:8f:7d:24:8b: 77:e6:15:f6:2b:c7:7e:01:ed:c0:2f:cd:b8:20:52:9e:4d:66: 5f:29:41:f0:f0:73:56:e3:37:f7:92:d0:86:25:37:d3:55:ea: 5d:1e:d0:b5:9c:98:eb:64:78:03:ea:84:d2:3b:7b:f3:af:4f: 47:dc:df:e9:e1:1a:53:4a:31:a8:12:3e:21:9f:ec:43:9f:ca: 43:2b:4b:30:3c:dd:00:79:08:7c:d4:c6:7f:20:df:cb:06:7d: 18:2d:70:0e:a0:f1:e1:dc:28:15:bc:8d:e3:df:1e:76:85:8a: 8c:ce:9f:db:f1:6f:88:6c:01:66:e0:00:0c:7d:f4:2d:b9:40: c6:85:28:62:4c:7b:ed:23:2b:99:32:6a:2f:67:41:a2:bf:1a: 31:cd:c7:e0:09:30:c7:66:2e:cb:9b:f8:3e:db:e4:ce:4d:c5: f6:f5:78:b7:c7:df:da:6f:f3:1c:41:74:4b:05:8c:b4:f7:46: 2f:f2:03:d1 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZt7Nqf0oDxe2ZbY3bWU7/ENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzkzZGY4NzdiZjJmMGNmMDFhOTcxODk3M2VhZWVlODdiMDY5N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61X2TN+6O1mxAaCe92rpzsR3QJoe D3/HQHvJu2Elv/MX2QZisz52lSmZ1uIKCMamAT4ytXjaEqdn9PCt108mWmXaZxXu yve3MlWhLkKxLxmQE44puj3IOVq/dmhrW8wYJ7qkrpxftJmAyrsh9ZROwHBy90a9 vOxZoOtC64PwHdXczKzR3sVEA/ZS59/XWvpCRtiBdnAnfxwvDb16zYw06AuI9OWr Ci162HLweOSemxaXvML4ud68yUEN/jiPlkwMAxycNW5CcURQoJgQQ1v5JYV4s+4E E8S1Yn5775ATjJYEmAneVgWS9H6jHx2r0a6dPvfHgVfgn5zWvlcEcGYgNwIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFLOT34d78vDPAalxiXPq7uh7BpfZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzkzNzVl My0zNzdlLTRiNzAtYmEzNi0zOTZiYzcyMGUyYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvOTM3NWUz LTM3N2UtNGI3MC1iYTM2LTM5NmJjNzIwZTJiNC8xL3M1UGZoM3Z5OE04QnFYR0pj LXJ1NkhzR2w5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHMGCCsGAQUF BwEHAQH/BGQwYjBIBAIAATBCAwQAUEeeAwQAWIdFAwQDWRbIAwQCW8SUAwQAW/e2 AwQEXp5QAwQEbc/AAwQGsp7AAwQCucdgAwQCw4AYAwQA1W2UMBYEAgACMBADBwAg AQZ8BzgDBQMqCptAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCogwIDAN70AgMD QtwwDQYJKoZIhvcNAQELBQADggEBAJHZnbIiW8xt5GYBlGdV76kG9xn65at5hyiZ DDMQKWYBR04WyJzLDjYqVdIClXynC9yX3K6TWECBtcHeqhqPusmpP0VUj30ki3fm FfYrx34B7cAvzbggUp5NZl8pQfDwc1bjN/eS0IYlN9NV6l0e0LWcmOtkeAPqhNI7 e/OvT0fc3+nhGlNKMagSPiGf7EOfykMrSzA83QB5CHzUxn8g38sGfRgtcA6g8eHc KBW8jePfHnaFiozOn9vxb4hsAWbgAAx99C25QMaFKGJMe+0jK5kyai9nQaK/GjHN x+AJMMdmLsub+D7b5M5Nxfb1eLfH39pv8xxBdEsFjLT3Ri/yA9E= -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:09 2026 by rpki-client