This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer File: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer (raw, json) Hash identifier: 7tz0+j0P3wOsjbFgyQMFljhG9NGJPbUb/tPxi47SdrY= Subject key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBB7E73FF8591604C6F2ED787E4F34B27 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 07:53:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207084 IP: 2001:678:170::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:7e:73:ff:85:91:60:4c:6f:2e:d7:87:e4:f3:4b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 07:53:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e59469565f719bed86adc73fb6e6c886f60bdaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:43:fb:68:c6:a5:ec:71:d4:6b:16:b2:bf: 9f:6c:42:70:20:cd:1d:7b:6e:fb:9b:3b:91:92:2a: c6:be:0f:d6:7b:71:54:05:d5:88:4c:0f:92:75:99: fa:7d:93:d8:b9:12:74:06:21:df:1a:11:bf:c6:94: a3:cd:4e:af:96:b9:ba:7d:80:09:f9:72:f1:28:73: 56:cf:9c:b2:42:82:40:a8:fe:e7:0b:e8:bb:9d:1c: 0c:88:c3:cf:40:3b:54:24:f1:8c:2a:94:75:ee:22: 6f:53:65:ea:ca:44:68:b1:71:a4:3f:c3:a2:6b:06: 6e:b9:70:90:8f:0e:d6:2d:36:92:c7:20:05:fa:96: 98:47:d8:11:12:81:f3:84:e0:56:1e:45:a4:2c:e4: 9f:1a:b2:8c:f9:a2:22:17:c5:a6:27:8a:df:05:71: 87:4c:dc:2a:af:0b:e4:df:0f:a2:8a:77:47:65:f4: ce:59:3a:d1:e4:c5:5a:e6:ad:84:ce:cc:40:ca:f4: 9a:c7:65:5a:d5:55:60:77:c3:f4:5d:c8:a5:78:55: ae:b8:51:69:5f:9e:f9:88:6c:87:03:c7:41:95:c0: cc:b6:85:89:49:9a:d6:77:31:e5:e4:b2:56:7e:e7: 17:5c:fd:46:40:38:66:5c:44:6e:32:c8:da:bb:92: a3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:170::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207084 Signature Algorithm: sha256WithRSAEncryption 33:9c:1e:a8:00:72:72:4f:60:d0:2b:7d:aa:16:0d:cc:92:1f: cf:50:0e:b2:1e:c3:e4:53:6b:d3:07:57:49:0b:27:54:89:f9: 2f:d6:f8:c0:69:c5:29:e5:31:f2:c7:cd:90:af:e9:99:2f:d9: f2:53:49:5e:d8:22:f7:46:2d:13:38:14:28:8f:ed:22:b6:b1: d7:c9:3e:4c:fb:ad:d5:f0:df:f1:f4:a6:3d:c2:95:f4:6a:50: 32:80:02:2e:20:7d:7c:40:d7:a7:6b:73:7b:03:b4:89:e5:e1: 09:8e:6c:7e:a8:95:e8:c0:b0:27:4c:01:81:6a:3c:c4:9b:d1: 7a:a8:5c:49:45:7c:0c:d4:86:83:a7:d7:37:a1:0d:68:ba:55: c1:9d:e8:c2:7b:cc:41:17:a2:e6:2c:58:e7:fe:3b:96:ed:46: 7a:88:32:95:6c:86:5f:88:45:92:2e:1b:cd:9f:d7:37:92:38: 1c:9a:0f:ee:f3:b7:9c:e4:9a:b7:18:66:b9:a0:8a:03:1e:1a: 37:b5:ad:70:a3:73:cc:d3:33:d2:fd:31:37:da:10:ef:78:ac: 00:53:4b:dd:90:3f:0f:ae:ca:e9:38:92:9b:4d:37:b6:d8:61: a8:c3:cb:50:72:35:7f:bf:fa:49:90:af:e3:d3:a6:d4:0c:26: 14:e1:fc:bf -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZu7fnP/hZFgTG8u14fk80snMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MDc1MzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTk0Njk1NjVmNzE5YmVkODZhZGM3M2ZiNmU2Yzg4NmY2MGJkYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsehD+2jGpexx1GsWsr+fbEJwIM0d e277mzuRkirGvg/We3FUBdWITA+SdZn6fZPYuRJ0BiHfGhG/xpSjzU6vlrm6fYAJ +XLxKHNWz5yyQoJAqP7nC+i7nRwMiMPPQDtUJPGMKpR17iJvU2XqykRosXGkP8Oi awZuuXCQjw7WLTaSxyAF+paYR9gREoHzhOBWHkWkLOSfGrKM+aIiF8WmJ4rfBXGH TNwqrwvk3w+iindHZfTOWTrR5MVa5q2EzsxAyvSax2Va1VVgd8P0XcileFWuuFFp X575iGyHA8dBlcDMtoWJSZrWdzHl5LJWfucXXP1GQDhmXERuMsjau5KjlQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOWUaVZfcZvthq3HP7bmyIb2C9qrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzhkODMw Ny00YTBlLTQ0NTMtYTk0Yi02ODY2YTQwMWE2N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvOGQ4MzA3 LTRhMGUtNDQ1My1hOTRiLTY4NjZhNDAxYTY3ZC8xLzVaUnBWbDl4bS0yR3JjY190 dWJJaHZZTDJxcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAFwMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMo7DANBgkqhkiG9w0BAQsFAAOCAQEAM5weqAByck9g0Ct9qhYNzJIfz1AO sh7D5FNr0wdXSQsnVIn5L9b4wGnFKeUx8sfNkK/pmS/Z8lNJXtgi90YtEzgUKI/t Irax18k+TPut1fDf8fSmPcKV9GpQMoACLiB9fEDXp2tzewO0ieXhCY5sfqiV6MCw J0wBgWo8xJvReqhcSUV8DNSGg6fXN6ENaLpVwZ3ownvMQRei5ixY5/47lu1Geogy lWyGX4hFki4bzZ/XN5I4HJoP7vO3nOSatxhmuaCKAx4aN7WtcKNzzNMz0v0xN9oQ 73isAFNL3ZA/D67K6TiSm003tthhqMPLUHI1f7/6SZCv49Om1AwmFOH8vw== -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:54 2026 by rpki-client