This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer File: 152FaqqerRL3XLaM2ulqDSyN3h4.cer (raw, json) Hash identifier: KslJylY8HoBZLKpQ5SlmjZRlnUhdv3dtyUUG84F7RJQ= Subject key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36DA1C627B6725A5DA63D030785F25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5584 IP: 193.188.12.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:da:1c:62:7b:67:25:a5:da:63:d0:30:78:5f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:65:72:6a:82:34:b4:7a:17:1b:6f:3e:15: 0c:38:a4:bf:a0:97:95:8e:28:63:f4:c9:5b:9c:f5: 28:a8:64:09:83:63:8b:4c:f7:3d:11:30:6a:63:c4: 76:9b:de:07:ae:23:a8:0c:88:97:cb:7e:ef:09:de: 01:f0:e9:5d:0e:55:8b:7b:07:ef:fe:42:5a:cb:80: d9:1f:d9:99:b5:9f:31:b0:3c:85:37:67:07:56:bd: e4:38:c2:e4:7b:d6:b6:a5:8c:3c:f3:fe:98:03:ca: 15:a7:55:6f:3d:a8:5c:bd:bc:0a:95:d5:cc:67:b1: 32:59:0f:99:22:96:76:30:ed:57:14:f2:ec:03:f9: 31:83:f9:39:de:7c:f4:90:3f:a4:65:6f:cf:56:33: 4c:d3:a8:8d:ab:dd:18:1f:28:84:22:a9:79:54:b4: 8d:d4:9f:72:f8:f1:56:1e:91:5a:92:4d:77:f1:d0: e7:25:e6:c4:cb:f1:aa:6c:34:b5:b4:02:15:9e:82: 71:5f:82:ca:41:92:d9:6f:64:ad:44:3a:b3:0a:1a: fd:dd:b9:f6:21:86:c5:63:ea:db:c2:d7:53:a8:98: f0:b2:44:10:fc:75:1e:b5:ba:80:d3:ae:ec:a5:a5: 4a:75:a8:f7:13:62:b6:15:ea:c7:28:5a:33:82:b5: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.12.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5584 Signature Algorithm: sha256WithRSAEncryption 18:35:e1:ec:cb:ba:c2:ac:0c:b3:ae:8a:20:0e:78:35:e8:dc: dc:49:c6:fc:2a:e6:d9:a9:05:18:07:ee:cf:29:ba:6d:0d:00: 2f:d9:1e:db:c8:a9:b8:c9:19:3e:81:2a:ca:3d:d5:9c:e6:f1: 9f:e0:1a:37:d1:ac:35:00:d0:90:a5:ec:d0:b0:0c:75:88:e1: ac:58:ae:bf:fa:df:31:5e:a2:80:f9:81:a9:d7:88:66:27:1a: 2f:37:23:60:d6:7a:18:4c:51:5e:ad:ba:81:44:c4:1f:bd:b9: 35:c1:a6:14:a6:17:3a:61:8b:b2:88:c2:e7:e8:44:19:d8:98: 37:e7:92:93:73:67:5e:10:cb:13:bb:14:4c:3e:e0:91:a1:97: 38:70:6b:6a:13:9f:bc:3e:bc:42:50:eb:90:6e:f5:62:36:dc: 84:fe:7b:3e:21:ab:59:f4:b9:3d:a2:4c:22:c3:64:bb:c8:db: 26:21:1d:96:0e:3f:68:11:11:01:ab:eb:2d:6c:02:a9:a4:3a: ae:35:6f:66:64:1b:e2:2b:15:92:b3:6b:3c:30:8e:28:c3:81: 89:7c:89:97:6d:78:d9:a1:51:cb:1d:6f:c3:9c:8f:79:99:b7: 04:b8:9b:c3:81:0c:ea:70:63:b1:64:f9:bd:cb:3f:26:1f:be: f4:16:1f:a9 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7NtocYntnJaXaY9AweF8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzlkODU2YWFhOWVhZDEyZjc1Y2I2OGNkYWU5NmEwZDJjOGRkZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xlcmqCNLR6FxtvPhUMOKS/oJeV jihj9MlbnPUoqGQJg2OLTPc9ETBqY8R2m94HriOoDIiXy37vCd4B8OldDlWLewfv /kJay4DZH9mZtZ8xsDyFN2cHVr3kOMLke9a2pYw88/6YA8oVp1VvPahcvbwKldXM Z7EyWQ+ZIpZ2MO1XFPLsA/kxg/k53nz0kD+kZW/PVjNM06iNq90YHyiEIql5VLSN 1J9y+PFWHpFakk138dDnJebEy/GqbDS1tAIVnoJxX4LKQZLZb2StRDqzChr93bn2 IYbFY+rbwtdTqJjwskQQ/HUetbqA067spaVKdaj3E2K2FerHKFozgrVzswIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNedhWqqnq0S91y2jNrpag0sjd4eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2E1YmFh Mi0yYTM1LTRjNzYtYTk0MC01OTkwY2Q0ZGU4OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYTViYWEy LTJhMzUtNGM3Ni1hOTQwLTU5OTBjZDRkZTg4Yi8xLzE1MkZhcXFlclJMM1hMYU0y dWxxRFN5TjNoNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwbwMMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AhXQMA0GCSqGSIb3DQEBCwUAA4IBAQAYNeHsy7rCrAyzroogDng16NzcScb8KubZ qQUYB+7PKbptDQAv2R7byKm4yRk+gSrKPdWc5vGf4Bo30aw1ANCQpezQsAx1iOGs WK6/+t8xXqKA+YGp14hmJxovNyNg1noYTFFerbqBRMQfvbk1waYUphc6YYuyiMLn 6EQZ2Jg355KTc2deEMsTuxRMPuCRoZc4cGtqE5+8PrxCUOuQbvViNtyE/ns+IatZ 9Lk9okwiw2S7yNsmIR2WDj9oEREBq+stbAKppDquNW9mZBviKxWSs2s8MI4ow4GJ fImXbXjZoVHLHW/DnI95mbcEuJvDgQzqcGOxZPm9yz8mH770Fh+p -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:18 2026 by rpki-client