This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.cer (raw, json) Hash identifier: 4FFkG1ugviiJ/03q4CJRmB99iJ4lkwpgaphrk4vio7w= Subject key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EB562F46850BF3318737608B05FED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2847 AS: 5479 IP: 83.171.0.0/18 IP: 91.207.144.0/23 IP: 91.207.154.0/23 IP: 193.219.32.0 -- 193.219.95.255 IP: 193.219.128.0/18 IP: 2001:778::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b5:62:f4:68:50:bf:33:18:73:76:08:b0:5f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:86:34:ba:7f:41:36:13:35:c1:be:43:9e: ce:24:24:46:63:a0:ba:87:1f:3e:26:d9:bb:fe:e1: 2b:d1:cc:e6:42:3f:ef:95:6a:3c:f5:54:ae:5a:90: 4a:90:39:b1:68:61:74:b7:78:fc:89:92:32:83:f7: 3a:f7:82:c6:62:0e:f9:d5:32:e4:bd:39:2c:93:44: ac:15:fe:a0:81:14:61:6b:98:2b:45:70:13:43:39: 3c:e7:d7:e2:a2:7b:a1:a2:c0:c6:d0:5c:1d:02:4f: 33:58:68:1c:01:19:f0:67:8c:31:51:2d:4a:ee:a3: 68:8e:9b:bb:2d:60:12:4d:27:80:c8:10:ac:85:9c: 9a:82:9c:ae:c4:c2:68:f9:cc:f5:ea:81:b2:31:68: 39:40:dc:8d:a8:53:59:3e:92:51:b1:d1:f3:ee:5b: f6:d4:db:5f:e0:24:4b:44:f9:f0:50:1d:b8:62:dd: 8b:a8:56:4e:a6:85:c4:c5:9a:01:62:c6:5f:4e:6d: 99:20:16:79:9a:b0:78:3e:4e:b9:03:c6:35:2a:94: b2:d2:2d:84:2a:e2:b3:d8:4a:db:f3:cf:cc:d0:ec: 5c:bb:d3:7d:05:ab:fb:2a:6d:48:e1:d9:ec:73:5e: b3:4a:d2:f2:a7:1e:2e:a5:e7:9d:06:43:b5:c5:32: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.0.0/18 91.207.144.0/23 91.207.154.0/23 193.219.32.0-193.219.95.255 193.219.128.0/18 IPv6: 2001:778::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2847 5479 Signature Algorithm: sha256WithRSAEncryption a2:37:f6:e5:6d:db:db:8b:cd:76:91:65:76:fb:68:ff:a2:18: e5:c2:5a:07:d4:e1:ee:7e:58:10:bb:06:0f:f1:de:de:57:8e: 53:f1:53:65:ab:2d:7f:e0:7d:40:a2:be:19:2f:39:c1:f1:56: f8:41:fd:7c:04:90:72:aa:c3:95:55:95:95:66:b5:e0:4b:9d: ef:05:8d:f8:8c:a2:c1:61:8c:3d:53:d1:4b:3e:f7:cb:6f:8f: 5e:be:df:0e:ad:f6:3f:25:01:d6:35:69:b2:02:48:78:e2:b2: c3:2b:80:99:3b:8b:51:03:2d:2e:dc:89:16:f3:a9:1d:d6:31: 27:2e:1c:31:fe:b2:7c:ab:00:e0:16:bc:75:70:62:0f:50:b1: 21:c2:f2:a4:2f:cc:9f:46:be:06:ad:95:64:6d:05:f6:ce:f9: 57:66:2f:a2:1d:cc:06:38:81:12:92:6d:f8:0e:f7:d9:cf:8f: b5:3e:6b:c7:3a:50:36:15:db:7e:32:df:38:39:86:1a:05:05: 4f:58:51:b4:25:7e:35:9f:eb:f6:07:d0:36:b7:63:16:30:57: 36:30:11:3a:5d:50:02:19:48:ea:52:f8:b5:44:8d:4a:0d:22: d9:c7:26:9b:50:67:30:ee:e8:8a:33:60:83:b3:2e:33:81:41: d9:a8:25:74 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt5frVi9GhQvzMYc3YIsF/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDNmMjNkNjg5Mzc0OTQyODhkZmNjN2EwZWZlMWZlNzRhMjAzNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ6GNLp/QTYTNcG+Q57OJCRGY6C6 hx8+Jtm7/uEr0czmQj/vlWo89VSuWpBKkDmxaGF0t3j8iZIyg/c694LGYg751TLk vTksk0SsFf6ggRRha5grRXATQzk859fionuhosDG0FwdAk8zWGgcARnwZ4wxUS1K 7qNojpu7LWASTSeAyBCshZyagpyuxMJo+cz16oGyMWg5QNyNqFNZPpJRsdHz7lv2 1Ntf4CRLRPnwUB24Yt2LqFZOpoXExZoBYsZfTm2ZIBZ5mrB4Pk65A8Y1KpSy0i2E KuKz2Erb88/M0Oxcu9N9Bav7Km1I4dnsc16zStLypx4upeedBkO1xTKkzwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2FiNWZk Yy05ZDZiLTQ2NzUtOWExMy05ZDE4NWY3MzgyMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvYWI1ZmRj LTlkNmItNDY3NS05YTEzLTlkMTg1ZjczODIxMS8xLzVEOGoxb2szU1VLSTM4eDZE djRmNTBvZ051RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQGU6sAAwQBW8+QAwQBW8+aMAwDBAXB2yADBAXB 20ADBAbB24AwDQQCAAIwBwMFAyABB3gwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC Cx8CAhVnMA0GCSqGSIb3DQEBCwUAA4IBAQCiN/blbdvbi812kWV2+2j/ohjlwloH 1OHuflgQuwYP8d7eV45T8VNlqy1/4H1Aor4ZLznB8Vb4Qf18BJByqsOVVZWVZrXg S53vBY34jKLBYYw9U9FLPvfLb49evt8OrfY/JQHWNWmyAkh44rLDK4CZO4tRAy0u 3IkW86kd1jEnLhwx/rJ8qwDgFrx1cGIPULEhwvKkL8yfRr4GrZVkbQX2zvlXZi+i HcwGOIESkm34DvfZz4+1PmvHOlA2Fdt+Mt84OYYaBQVPWFG0JX41n+v2B9A2t2MW MFc2MBE6XVACGUjqUvi1RI1KDSLZxyabUGcw7uiKM2CDsy4zgUHZqCV0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:13 2026 by rpki-client