This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.cer (raw, json) Hash identifier: A3Ps+Q0tyrpNTrS05brbBSVbyLmIiRG8yBjwHqoeDjo= Subject key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ADF62EB8042564376929A339A4BD9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 129.217.0.0/16 IP: 192.35.63.0 -- 192.35.64.255 IP: 192.35.66.0 -- 192.35.72.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:df:62:eb:80:42:56:43:76:92:9a:33:9a:4b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:3a:97:35:f6:84:d1:63:6b:d0:ea:72:a7: ca:e7:b2:98:7f:d3:bd:6b:ac:78:2d:38:27:99:4f: 7c:d0:68:d5:86:03:1a:ec:1e:78:28:00:50:bd:59: 4c:b0:f3:74:58:c6:47:eb:fe:7f:3e:72:e6:8f:59: b4:ab:a2:53:fc:cf:3f:41:64:ad:14:4c:b4:2f:e8: 74:0c:51:d1:47:c9:1e:82:4c:ac:a5:e9:e3:29:89: 98:79:f3:99:e0:32:fe:4a:f8:e9:c8:33:5b:f3:06: 92:b5:0b:82:e7:5a:88:e5:a1:68:4c:8b:67:0a:c4: 2d:9d:87:b5:1d:47:00:11:01:77:b1:3b:69:fb:ae: e3:d9:a9:b6:64:ea:8d:f9:86:73:86:00:c0:cd:b3: 8a:63:9c:7a:a8:95:ca:f5:a7:70:77:1d:40:fa:dd: 33:c3:d9:66:54:d2:6c:87:76:2d:d9:3a:7a:f7:66: 2d:e8:8f:2a:34:8e:a0:1c:b3:af:80:2c:f8:a5:7e: e3:53:29:e3:e4:ab:86:6c:07:63:fc:f6:18:47:53: ca:03:ac:bf:e2:a5:8b:78:67:c6:40:ba:4a:3e:30: ea:21:29:14:d9:d2:ae:78:ea:5f:cb:a9:00:ac:c0: de:4a:1e:72:e7:e6:90:45:8f:f9:f6:ae:60:92:9e: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.217.0.0/16 192.35.63.0-192.35.64.255 192.35.66.0-192.35.72.255 Signature Algorithm: sha256WithRSAEncryption 52:55:f4:4d:da:5a:ae:07:67:b2:85:c2:ee:c0:e0:25:ad:15: 4d:99:98:a6:90:9e:8a:82:ee:7f:0b:e4:6d:75:ae:1e:a3:a5: 54:62:50:5d:b1:b5:0b:6a:de:f8:63:99:8f:41:52:ab:01:37: e4:67:c0:75:57:cc:04:84:24:fd:e4:ab:f9:95:57:a9:60:e2: 74:1b:49:e6:3d:30:7f:80:1a:7c:75:00:e4:39:1e:34:23:3c: 37:e0:0d:f5:51:05:df:26:45:f0:46:fe:d2:1a:f3:27:e4:94: ad:5d:ed:71:db:1b:1c:57:24:d3:bd:b6:8b:1e:ce:a2:9a:cf: ca:9e:6e:dd:f3:54:7c:9b:05:57:60:f2:b4:74:55:cf:1a:f5: 3a:5a:d2:65:f7:e0:b2:ab:6b:8e:5a:7b:1d:7e:b3:65:6f:07: 0e:78:5b:b2:43:86:71:01:2a:4e:2a:17:82:20:ce:52:2f:30: 28:70:84:21:ce:45:da:5a:bd:2e:e7:04:c9:3d:8f:e8:97:36: 05:34:c0:90:f9:0d:be:84:a3:48:57:1f:e1:7d:bd:4d:63:c8: ec:ee:08:ad:e2:69:77:73:6c:c3:52:97:98:21:dd:7f:d8:8d: 24:4c:38:20:e1:66:82:11:e0:aa:4a:1c:64:e2:4e:c8:e0:2b: bc:98:b2:de -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6Wt9i64BCVkN2kpozmkvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTNhZDliNDMyYmI4M2QxNDFjNDgwZGVlNzhiYzM1ZmY0N2NiNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33E6lzX2hNFja9DqcqfK57KYf9O9 a6x4LTgnmU980GjVhgMa7B54KABQvVlMsPN0WMZH6/5/PnLmj1m0q6JT/M8/QWSt FEy0L+h0DFHRR8kegkyspenjKYmYefOZ4DL+SvjpyDNb8waStQuC51qI5aFoTItn CsQtnYe1HUcAEQF3sTtp+67j2am2ZOqN+YZzhgDAzbOKY5x6qJXK9adwdx1A+t0z w9lmVNJsh3Yt2Tp692Yt6I8qNI6gHLOvgCz4pX7jUynj5KuGbAdj/PYYR1PKA6y/ 4qWLeGfGQLpKPjDqISkU2dKueOpfy6kArMDeSh5y5+aQRY/59q5gkp4X/wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFOU62bQyu4PRQcSA3ueLw1/0fLcsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2U4YmQw Yi1mMzZkLTQ1ZjUtYjk4NS0wOWJiNTI4NzUzMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvZThiZDBi LWYzNmQtNDVmNS1iOTg1LTA5YmI1Mjg3NTMxYi8xLzVUclp0REs3ZzlGQnhJRGU1 NHZEWF9SOHR5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAnBAIAATAhAwMAgdkwDAMEAMAjPwMEAMAjQDAMAwQBwCNCAwQA wCNIMA0GCSqGSIb3DQEBCwUAA4IBAQBSVfRN2lquB2eyhcLuwOAlrRVNmZimkJ6K gu5/C+Rtda4eo6VUYlBdsbULat74Y5mPQVKrATfkZ8B1V8wEhCT95Kv5lVepYOJ0 G0nmPTB/gBp8dQDkOR40Izw34A31UQXfJkXwRv7SGvMn5JStXe1x2xscVyTTvbaL Hs6ims/Knm7d81R8mwVXYPK0dFXPGvU6WtJl9+Cyq2uOWnsdfrNlbwcOeFuyQ4Zx ASpOKheCIM5SLzAocIQhzkXaWr0u5wTJPY/olzYFNMCQ+Q2+hKNIVx/hfb1NY8js 7git4ml3c2zDUpeYId1/2I0kTDgg4WaCEeCqShxk4k7I4Cu8mLLe -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:14 2026 by rpki-client