This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer File: 5XXe8Yp160XEQHcaziRsUOip0xY.cer (raw, json) Hash identifier: Vw2LuX1dotUDRCS7zurX1dNZSDxovugpf8y7JWy+riM= Subject key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3638593310312F5FBCC47E350CCF72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57601 IP: 91.233.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:38:59:33:10:31:2f:5f:bc:c4:7e:35:0c:cf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e575def18a75eb45c440771ace246c50e8a9d316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:77:2f:24:c9:f2:07:c1:1f:65:7d:54:b9: 31:81:ff:ea:b8:bc:d4:52:86:b6:f7:e6:37:ea:1e: 7c:bf:2d:ef:13:91:88:72:53:be:2a:41:e3:4f:61: aa:95:a7:6f:ed:a4:07:5e:64:ce:56:d1:7b:1b:44: 2a:0b:a2:cc:3f:61:bd:9f:71:ac:7d:12:bb:df:1f: 8d:22:e1:f6:85:c3:59:71:b7:a5:48:fa:b6:72:11: c6:10:b6:fb:90:2a:4b:c0:8c:25:aa:e2:93:54:9e: 60:e6:35:4f:2f:b7:fc:10:0e:9d:e0:53:d8:63:a7: f3:83:8b:39:c1:bf:2d:f1:f1:50:a4:f2:2d:4f:4c: 3c:6f:9c:ed:73:e2:7c:90:04:37:62:60:5c:a2:2c: ee:06:a7:0e:c4:df:c7:4f:87:32:52:42:09:41:9a: b6:5c:bd:33:30:8e:6d:e7:3a:dc:12:d9:a0:3e:8b: c9:28:f9:40:ff:f6:a6:fc:43:1f:9b:8c:f1:0a:6a: 4b:17:a0:3d:8f:95:b5:a4:1d:23:6e:dc:ff:0b:3e: 47:15:20:87:7b:38:e9:00:47:f7:f8:4f:4f:01:c0: 51:43:4e:6b:4d:c7:c0:9e:6e:4c:54:81:4d:6f:10: 53:27:52:b1:de:e2:44:ed:27:6e:96:0a:5b:a9:eb: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.103.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57601 Signature Algorithm: sha256WithRSAEncryption 7e:42:64:8a:87:d3:95:32:36:5c:db:37:d2:6c:01:42:41:af: 7a:bd:d1:73:fc:bb:6f:f9:73:73:1e:3a:65:62:d7:23:83:17: 61:a8:18:32:5b:d5:55:8b:2e:52:da:ee:84:e4:cf:11:20:c9: d0:56:be:1b:1c:08:7b:33:07:39:cf:89:54:7b:65:c0:cf:25: 82:7e:0d:d6:61:af:ab:98:5d:e5:40:22:bc:f8:ae:b2:db:00: bb:bd:14:4f:f3:28:02:7a:14:9a:eb:ad:51:a7:c7:8e:aa:67: 27:0d:75:7c:94:eb:9e:32:9d:7c:ef:79:4f:a3:d8:c2:cd:4d: 21:00:46:f6:7c:9f:08:98:74:46:68:5e:b0:0d:68:b6:25:5d: 13:33:ae:d5:9f:b4:26:88:14:d5:b3:80:23:0d:a8:15:0d:a2: 4b:89:5d:13:7e:69:0a:36:97:10:7e:d3:fc:96:6e:29:48:76: 6e:85:4e:f3:cc:db:0a:27:f3:49:c7:cf:ac:eb:97:41:9e:06: 02:e0:e4:b3:5e:06:ba:14:c6:9f:04:0e:da:76:c6:de:37:ab: ae:8f:5b:91:a4:82:86:f6:20:a1:fb:6f:b2:be:4a:93:bb:0a: 3b:96:2a:64:49:e8:35:ca:bc:79:68:46:3f:5c:e5:cc:1e:07: be:19:4d:c2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NjhZMxAxL1+8xH41DM9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTc1ZGVmMThhNzVlYjQ1YzQ0MDc3MWFjZTI0NmM1MGU4YTlkMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKV3LyTJ8gfBH2V9VLkxgf/quLzU Uoa29+Y36h58vy3vE5GIclO+KkHjT2Gqladv7aQHXmTOVtF7G0QqC6LMP2G9n3Gs fRK73x+NIuH2hcNZcbelSPq2chHGELb7kCpLwIwlquKTVJ5g5jVPL7f8EA6d4FPY Y6fzg4s5wb8t8fFQpPItT0w8b5ztc+J8kAQ3YmBcoizuBqcOxN/HT4cyUkIJQZq2 XL0zMI5t5zrcEtmgPovJKPlA//am/EMfm4zxCmpLF6A9j5W1pB0jbtz/Cz5HFSCH ezjpAEf3+E9PAcBRQ05rTcfAnm5MVIFNbxBTJ1Kx3uJE7SdulgpbqetIRQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOV13vGKdetFxEB3Gs4kbFDoqdMWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2NhMDg5 OC0yOTc5LTQzYWUtOGI4OS1mYjk3NDEzNTk3MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvY2EwODk4 LTI5NzktNDNhZS04Yjg5LWZiOTc0MTM1OTcyNy8xLzVYWGU4WXAxNjBYRVFIY2F6 aVJzVU9pcDB4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+lnMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDhATANBgkqhkiG9w0BAQsFAAOCAQEAfkJkiofTlTI2XNs30mwBQkGver3Rc/y7 b/lzcx46ZWLXI4MXYagYMlvVVYsuUtruhOTPESDJ0Fa+GxwIezMHOc+JVHtlwM8l gn4N1mGvq5hd5UAivPiustsAu70UT/MoAnoUmuutUafHjqpnJw11fJTrnjKdfO95 T6PYws1NIQBG9nyfCJh0RmhesA1otiVdEzOu1Z+0JogU1bOAIw2oFQ2iS4ldE35p CjaXEH7T/JZuKUh2boVO88zbCifzScfPrOuXQZ4GAuDks14GuhTGnwQO2nbG3jer ro9bkaSChvYgoftvsr5Kk7sKO5YqZEnoNcq8eWhGP1zlzB4HvhlNwg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:15:27 2026 by rpki-client