This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer File: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer (raw, json) Hash identifier: fmzvTj3v1QpPeUovnsAk+fIFKisRmdVcv50slMPUH/M= Subject key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2174F1A7F25901FCE87C942EB0B39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12445 AS: 25002 IP: 79.98.0.0/21 IP: 81.88.224.0/19 IP: 82.115.160.0/19 IP: 83.137.160.0/21 IP: 85.88.192.0/19 IP: 185.39.240.0/22 IP: 195.206.0.0/19 IP: 212.38.32.0/19 IP: 217.146.192.0/20 IP: 2a14:eb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:17:4f:1a:7f:25:90:1f:ce:87:c9:42:eb:0b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:d1:ab:20:91:07:b8:42:22:0c:e2:3c:14: c5:93:f5:bc:cd:74:f3:b1:ac:86:47:49:e9:9d:61: 0a:d3:d4:c9:1d:25:a3:93:3a:1c:aa:da:87:bc:ac: 41:44:2a:dd:25:79:45:0d:72:92:b7:75:8b:9c:da: 4f:ac:e6:25:6a:b0:84:bc:67:ab:5e:db:88:ad:2f: df:57:55:79:14:25:fa:70:c4:3f:5f:68:3a:3a:75: 7e:3f:2b:03:c6:c2:e3:a4:e0:6c:79:f5:b4:22:05: e4:c4:22:5e:3e:56:dc:91:65:7a:7c:28:49:87:68: 70:21:2a:8f:c3:83:25:c9:57:88:cd:a7:3e:58:8b: 34:e7:4f:1d:1f:72:4e:a2:44:2c:87:93:da:c6:56: df:e5:10:7b:9c:b8:0b:52:24:bf:b9:c8:fb:af:1d: 54:af:1c:02:22:80:f0:11:c0:90:62:21:f7:f6:f1: 22:4d:85:6d:5d:4d:e6:fc:01:d7:7b:a1:d1:31:b4: 6b:db:23:df:c1:72:a2:29:e1:e7:63:db:6a:0c:68: ab:fb:4b:93:20:ce:2b:9b:ee:e8:8b:3e:6f:0e:36: 0b:f8:3d:23:70:9f:d6:24:c1:73:13:08:a5:7c:59: 0b:6c:d1:07:93:ec:ba:3e:f5:06:d5:c5:0b:8c:f0: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.0.0/21 81.88.224.0/19 82.115.160.0/19 83.137.160.0/21 85.88.192.0/19 185.39.240.0/22 195.206.0.0/19 212.38.32.0/19 217.146.192.0/20 IPv6: 2a14:eb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12445 25002 Signature Algorithm: sha256WithRSAEncryption 72:02:0f:ec:26:dd:83:7b:9e:0d:2c:b4:03:08:fe:37:33:02: ea:f4:93:6b:0f:ba:e1:de:a0:e5:7f:40:33:c6:b4:f6:98:8f: a9:36:aa:e2:bb:05:cd:0e:32:09:80:5b:1e:83:98:c5:98:d6: 31:fb:ea:44:e4:ed:e3:2f:58:9c:f6:f5:54:28:3f:73:db:ae: 6a:f4:cf:d7:87:7a:30:17:63:27:27:80:9f:a8:f2:90:63:a2: 05:1e:2d:70:c5:72:80:0c:77:0f:97:8d:52:7c:bb:c8:2a:c7: f9:9b:19:0b:99:53:92:4d:4e:09:fb:d6:16:53:a4:68:ed:1b: fb:86:5d:ab:a3:cd:42:fd:6f:e4:f5:6a:c8:06:c1:4a:5f:f4: fd:82:bc:67:72:65:c5:5f:9e:85:42:20:b9:28:0b:24:04:3d: b4:1d:c8:bd:27:5a:42:5d:69:47:c1:17:04:c7:ad:b1:08:5a: c0:43:92:5c:29:20:22:9e:d4:4b:b2:39:2f:86:7c:c1:ec:93: e7:15:5e:1e:e7:f7:16:a4:e6:94:51:80:9e:80:b4:7d:8c:c2: 78:a1:1f:83:ed:d3:6f:46:85:91:68:0d:d2:21:f5:4b:38:7d: 48:91:50:ad:11:e6:1f:6f:ad:8b:a1:9a:9c:95:94:38:4f:df: 23:4a:4d:4c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt/8hdPGn8lkB/Oh8lC6ws5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDY3M2U2ZDZlMWNmNmY2MDExNWUzMDUwOGJlMTViYmJmZTVlYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuobRqyCRB7hCIgziPBTFk/W8zXTz sayGR0npnWEK09TJHSWjkzocqtqHvKxBRCrdJXlFDXKSt3WLnNpPrOYlarCEvGer XtuIrS/fV1V5FCX6cMQ/X2g6OnV+PysDxsLjpOBsefW0IgXkxCJePlbckWV6fChJ h2hwISqPw4MlyVeIzac+WIs0508dH3JOokQsh5Paxlbf5RB7nLgLUiS/ucj7rx1U rxwCIoDwEcCQYiH39vEiTYVtXU3m/AHXe6HRMbRr2yPfwXKiKeHnY9tqDGir+0uT IM4rm+7oiz5vDjYL+D0jcJ/WJMFzEwilfFkLbNEHk+y6PvUG1cULjPCIjQIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFORnPm1uHPb2ARXjBQi+Fbu/5eqtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzFiNTMw MS1lODA3LTQ3OTUtYjk4Yy1jMTU5NGY2MDk2OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMWI1MzAx LWU4MDctNDc5NS1iOThjLWMxNTk0ZjYwOTY4ZS8xLzVHYy1iVzRjOXZZQkZlTUZD TDRWdTdfbDZxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQDT2IAAwQFUVjgAwQFUnOgAwQDU4mgAwQFVVjA AwQCuSfwAwQFw84AAwQF1CYgAwQE2ZLAMA0EAgACMAcDBQMqFOsAMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAjCdAgJhqjANBgkqhkiG9w0BAQsFAAOCAQEAcgIP7Cbd g3ueDSy0Awj+NzMC6vSTaw+64d6g5X9AM8a09piPqTaq4rsFzQ4yCYBbHoOYxZjW MfvqROTt4y9YnPb1VCg/c9uuavTP14d6MBdjJyeAn6jykGOiBR4tcMVygAx3D5eN Uny7yCrH+ZsZC5lTkk1OCfvWFlOkaO0b+4Zdq6PNQv1v5PVqyAbBSl/0/YK8Z3Jl xV+ehUIguSgLJAQ9tB3IvSdaQl1pR8EXBMetsQhawEOSXCkgIp7US7I5L4Z8weyT 5xVeHuf3FqTmlFGAnoC0fYzCeKEfg+3Tb0aFkWgN0iH1Szh9SJFQrRHmH2+ti6Ga nJWUOE/fI0pNTA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:09:13 2026 by rpki-client