This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer File: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer (raw, json) Hash identifier: mAUdSHxjOQAm+QhZFlOOf5Okttkyg3YbyJmze0otGrI= Subject key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835144E68FF0B1AAFDBF01AF35A253B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.13.96.0/22 IP: 2a0e:e300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:4e:68:ff:0b:1a:af:db:f0:1a:f3:5a:25:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:3a:1a:4a:ed:4e:48:a4:73:cd:9f:b9:7e: 8a:f9:0c:78:73:f8:d5:35:12:e0:c6:14:44:e5:31: a3:de:19:20:78:a9:57:c2:c5:39:1a:25:ab:a9:e6: fe:19:b5:b5:e2:47:31:16:ce:bb:18:0a:a7:06:48: a0:22:1e:b0:54:ae:4a:13:56:19:71:96:7e:22:ce: 48:61:ad:a9:ff:2e:50:79:0b:a1:78:ef:37:d9:77: 47:aa:cd:3f:20:d6:ce:6d:52:49:cf:be:ac:53:15: a8:bc:8b:5c:18:c1:92:91:c5:e1:b3:36:4a:36:fc: 2c:a8:47:6a:2a:98:8c:2e:ba:ad:4a:9c:0d:92:77: 96:a9:22:11:9d:73:3c:82:28:a9:bf:37:91:13:e0: f4:be:1a:f2:75:30:cb:fd:3f:f9:f6:45:d4:b6:58: 5a:2e:4d:5b:c0:92:89:4f:dd:a3:7a:5f:7d:67:1b: 9f:3e:33:c5:7d:51:d9:48:b9:36:c7:a5:da:d0:8a: 7b:4c:7d:85:cf:a2:e1:8f:a0:a3:47:ee:23:db:8e: d3:7a:e7:b8:e1:3f:27:5a:8f:89:c1:ab:39:3c:87: 71:07:0e:20:79:07:0a:23:f3:74:e7:74:2e:a1:59: 8a:3b:4d:a0:af:71:86:2c:64:50:d8:54:57:11:8b: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.96.0/22 IPv6: 2a0e:e300::/29 Signature Algorithm: sha256WithRSAEncryption 0b:d6:92:17:81:22:93:8f:97:4e:0e:60:65:1b:8d:35:57:bc: 52:34:a2:bd:c2:5a:c3:98:d8:d9:70:ab:1b:22:2d:e7:67:99: 48:f3:49:4e:73:7e:f0:7b:c5:81:8d:aa:7f:69:e9:74:2d:c6: 62:d4:42:1a:13:0e:f8:28:08:c6:17:0c:c9:5d:2f:a1:c3:28: 50:5b:9a:7a:42:36:d6:d9:74:b3:ca:73:da:28:c2:cd:92:d3: d0:ca:a9:65:08:43:2c:d2:dc:e4:96:5a:b2:bd:c2:27:cf:54: bd:3e:db:1c:27:3d:0f:72:cf:14:b3:5b:86:29:6c:df:d9:aa: d0:a4:72:64:4f:69:f8:be:c7:be:24:b9:fa:96:db:a6:c1:68: 1f:fc:46:32:13:f6:e3:e9:98:12:cf:23:e1:75:33:e3:55:32: 94:c8:4b:ae:7c:ec:e0:9b:76:32:61:59:5a:1b:7f:36:80:ab: 61:4b:26:d0:04:55:19:a3:e7:2e:1b:ef:b8:6d:5e:e8:a5:53: a3:ec:5f:51:d4:6f:06:da:2e:67:97:fc:63:e0:67:aa:d3:fd: ba:93:ac:b1:ab:7b:f6:d2:a9:25:d0:e3:ce:a2:84:5a:c6:86: a9:d2:a6:03:c4:94:48:9e:e0:fb:d3:ee:56:2f:c3:b7:b1:67: 54:e8:5a:ee -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NRROaP8LGq/b8BrzWiU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTFmM2VmZWQ1N2Y4NWMwNzE3YmE1ODYzODZiY2Q5MmRkYzVjN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3M6GkrtTkikc82fuX6K+Qx4c/jV NRLgxhRE5TGj3hkgeKlXwsU5GiWrqeb+GbW14kcxFs67GAqnBkigIh6wVK5KE1YZ cZZ+Is5IYa2p/y5QeQuheO832XdHqs0/INbObVJJz76sUxWovItcGMGSkcXhszZK NvwsqEdqKpiMLrqtSpwNkneWqSIRnXM8giipvzeRE+D0vhrydTDL/T/59kXUtlha Lk1bwJKJT92jel99ZxufPjPFfVHZSLk2x6Xa0Ip7TH2Fz6Lhj6CjR+4j247Teue4 4T8nWo+Jwas5PIdxBw4geQcKI/N053QuoVmKO02gr3GGLGRQ2FRXEYsicQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOUfPv7Vf4XAcXulhjhrzZLdxce1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2I5NTVm ZC0zOWU4LTQyZTYtYWM1NC1hZjY5NDgwMDgwY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYjk1NWZk LTM5ZTgtNDJlNi1hYzU0LWFmNjk0ODAwODBjZS8xLzVSOC1fdFZfaGNCeGU2V0dP R3ZOa3QzRng3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ1gMA0EAgACMAcDBQMqDuMAMA0GCSqGSIb3 DQEBCwUAA4IBAQAL1pIXgSKTj5dODmBlG401V7xSNKK9wlrDmNjZcKsbIi3nZ5lI 80lOc37we8WBjap/ael0LcZi1EIaEw74KAjGFwzJXS+hwyhQW5p6QjbW2XSzynPa KMLNktPQyqllCEMs0tzkllqyvcInz1S9PtscJz0Pcs8Us1uGKWzf2arQpHJkT2n4 vse+JLn6ltumwWgf/EYyE/bj6ZgSzyPhdTPjVTKUyEuufOzgm3YyYVlaG382gKth SybQBFUZo+cuG++4bV7opVOj7F9R1G8G2i5nl/xj4Geq0/26k6yxq3v20qkl0OPO ooRaxoap0qYDxJRInuD70+5WL8O3sWdU6Fru -----END CERTIFICATE-----Generated at Tue Feb 3 00:11:36 2026 by rpki-client