This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer (raw, json) Hash identifier: TeauV7Uc4W9Hn56ebwbswUNZHDOWvvzeXLigMtnevw0= Subject key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1AF1EDD4C61D4DD56DE83EB9263B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202704 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:af:1e:dd:4c:61:d4:dd:56:de:83:eb:92:63:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:5a:30:0e:ff:14:77:9a:ec:3a:7e:56:bd: 4b:5d:f3:2c:f5:b2:23:34:f2:a0:61:7b:63:72:e8: a1:1f:7c:43:ff:e0:c9:a3:62:b7:8e:6e:ea:87:dd: 69:99:89:be:68:08:d1:4a:d4:2e:0c:e5:af:2b:6b: 9d:8c:3e:82:91:3c:6f:5a:5a:8f:5c:b7:49:9a:e6: 0d:e7:89:bc:bc:40:51:ac:11:81:97:ca:45:ab:43: 7a:3a:43:39:2b:76:59:e1:8f:81:6f:e1:dc:ba:0d: 42:77:45:5e:c5:48:8f:80:4c:71:38:4f:83:2a:e5: c0:21:bc:ec:0f:ab:c8:af:9f:25:fe:5a:53:d4:cf: 2f:3f:a2:dc:a8:e5:51:1b:f3:2c:88:ca:9e:75:40: b0:26:5d:31:f5:ae:0b:1b:b6:f5:8d:df:b4:16:cf: ff:fd:76:c4:25:f7:5b:eb:37:62:ba:b6:09:aa:89: 3d:7e:fa:e5:4e:9a:ba:25:c7:e2:50:fc:e9:97:f3: 35:d0:fc:d4:7b:90:ad:92:2b:a0:cd:6f:06:f1:5e: 1f:04:67:aa:fd:b2:9e:b2:64:d6:7c:23:db:38:45: 3c:0e:71:a8:fa:7d:ea:5e:7a:b1:d2:ec:f8:05:07: 7f:43:eb:a1:c0:44:70:3f:86:fb:62:d6:51:e1:a3: 36:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202704 Signature Algorithm: sha256WithRSAEncryption 4e:31:90:f1:cc:e1:cc:08:2b:e1:2c:f4:13:63:89:63:c8:ad: db:8a:52:28:42:81:0b:f4:c6:71:75:6e:aa:e6:3c:69:95:7c: 67:8c:29:e1:7e:f4:71:1f:39:95:1a:bb:4b:41:a9:ca:3e:82: 6d:d7:84:cb:de:0e:08:d6:35:7e:86:81:7f:3d:74:d8:0d:f5: 58:1f:d3:57:16:09:3f:1b:21:52:5b:25:f9:88:e4:df:2f:18: 51:49:a1:2f:04:dd:42:06:99:7f:95:26:9a:8f:a7:b9:b7:e9: 26:02:07:42:a5:b2:92:cf:db:49:86:3a:2a:8d:82:9b:1f:31: d1:e9:ac:75:39:39:44:ca:06:bf:26:ff:62:a3:b7:13:f2:b8: 88:65:b8:4b:c1:5a:34:9a:18:95:0b:59:85:03:16:32:17:d5: 04:83:de:f6:48:2a:9c:2d:a2:51:4b:e4:00:46:75:79:8c:ab: b6:45:dd:06:08:6a:2f:1f:52:45:a3:d9:3c:e6:39:5b:ad:04: 53:cc:e0:e3:27:49:77:86:ba:3f:cc:85:7c:51:06:fc:e1:3c: e4:e5:6c:c1:7d:5d:a1:84:18:f9:86:1f:cd:7c:1b:ea:fe:e0: d9:53:b7:f8:ab:f8:1f:8e:d1:1e:93:2d:1f:de:51:7f:8c:a0: 65:6d:24:45 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8a8e3Uxh1N1W3oPrkmO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTFkNzE3ZmIyZDQzN2Q0MTFkODcxYWY3YjlmYmNiMDFlODlmOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyNaMA7/FHea7Dp+Vr1LXfMs9bIj NPKgYXtjcuihH3xD/+DJo2K3jm7qh91pmYm+aAjRStQuDOWvK2udjD6CkTxvWlqP XLdJmuYN54m8vEBRrBGBl8pFq0N6OkM5K3ZZ4Y+Bb+Hcug1Cd0VexUiPgExxOE+D KuXAIbzsD6vIr58l/lpT1M8vP6LcqOVRG/MsiMqedUCwJl0x9a4LG7b1jd+0Fs// /XbEJfdb6zdiurYJqok9fvrlTpq6JcfiUPzpl/M10PzUe5CtkiugzW8G8V4fBGeq /bKesmTWfCPbOEU8DnGo+n3qXnqx0uz4BQd/Q+uhwERwP4b7YtZR4aM2mwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOUdcX+y1DfUEdhxr3ufvLAeiflsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzEyZWQ2 NS00MTViLTQ4ZmItYTNkOS0zMTRkNWUyYjY2Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMTJlZDY1 LTQxNWItNDhmYi1hM2Q5LTMxNGQ1ZTJiNjZjYS8xLzVSMXhmN0xVTjlRUjJIR3Zl NS04c0I2Si1Xdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMX0DANBgkqhkiG9w0BAQsFAAOCAQEATjGQ8czhzAgr 4Sz0E2OJY8it24pSKEKBC/TGcXVuquY8aZV8Z4wp4X70cR85lRq7S0Gpyj6CbdeE y94OCNY1foaBfz102A31WB/TVxYJPxshUlsl+Yjk3y8YUUmhLwTdQgaZf5Ummo+n ubfpJgIHQqWyks/bSYY6Ko2Cmx8x0emsdTk5RMoGvyb/YqO3E/K4iGW4S8FaNJoY lQtZhQMWMhfVBIPe9kgqnC2iUUvkAEZ1eYyrtkXdBghqLx9SRaPZPOY5W60EU8zg 4ydJd4a6P8yFfFEG/OE85OVswX1doYQY+YYfzXwb6v7g2VO3+Kv4H47RHpMtH95R f4ygZW0kRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:59 2026 by rpki-client