This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.cer (raw, json) Hash identifier: EPs5TNf/+peUMRB/aKP8h4l+fFNcctWfN25v04YbpQs= Subject key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB69C66904B6E1EAC5D6C8533247CC6D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 16:04:54 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213483 IP: 185.219.89.0/24 IP: 2a14:df00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9c:66:90:4b:6e:1e:ac:5d:6c:85:33:24:7c:c6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 16:04:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7f:03:77:1b:9f:5b:23:0e:3c:a9:e3:a8:d6: d0:20:82:11:e5:55:3e:5c:49:73:e9:0a:b6:8a:90: ee:39:6f:aa:cb:d3:a3:87:63:c6:e2:d0:53:2c:74: c4:4a:b9:07:ed:1e:3c:48:4c:2c:c5:f2:93:41:87: ff:8d:5b:fb:36:35:ca:de:68:e6:49:ca:ee:db:5e: 49:ca:25:76:d3:cf:93:41:95:95:ec:4d:e7:86:2c: f7:68:7c:a8:5b:9d:d4:93:a8:a3:38:6a:66:e0:8e: df:95:d8:07:ad:86:2b:8b:41:9f:93:f1:dd:e5:c4: b4:04:68:2f:39:b1:fc:0f:7b:e6:6f:f8:48:0b:1a: cb:59:25:90:c4:60:f3:05:14:42:d1:73:c1:97:c5: fc:2e:60:93:5d:4d:9f:24:07:89:cd:b7:2c:bd:85: d4:9c:49:e7:99:9b:53:04:de:77:9e:72:c9:79:58: 1c:ae:25:a0:ae:22:15:c7:c3:15:ab:1d:e2:10:fa: 17:76:ed:a0:e9:67:16:f8:65:0d:1d:1a:47:c3:d7: ad:12:28:d3:53:b2:60:7f:e6:89:09:3b:da:9d:6b: 5d:d4:28:70:b7:4b:e2:3d:1b:07:f5:07:4f:75:31: 41:f7:1e:7f:1b:e5:6d:44:e3:c8:f9:4c:c5:ab:8c: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.89.0/24 IPv6: 2a14:df00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213483 Signature Algorithm: sha256WithRSAEncryption 21:e9:75:bb:09:1a:72:b6:3b:0a:0f:24:0c:f6:fe:4b:17:5e: f1:77:f3:1b:d9:a1:42:7c:2a:d5:40:5b:a7:d8:c6:4a:f9:16: eb:dc:5a:06:34:85:d6:73:f2:de:bb:d5:84:ec:ce:8e:e8:0d: 8d:8f:e0:42:50:00:be:27:47:53:90:7a:d6:58:e7:5d:d6:60: 0d:45:5c:d2:6a:4e:bc:d1:65:5d:b9:dd:7c:49:81:52:51:d6: 03:55:39:5f:1b:5e:be:b6:2b:2f:94:e8:66:a7:92:59:ea:74: ae:6b:f4:fd:71:14:cb:cb:b8:d2:26:f0:73:2b:3f:5d:a8:63: 9f:65:96:1d:f5:d7:eb:1f:9c:97:33:ad:1d:05:aa:22:7f:e6: 60:9e:5d:50:b3:82:69:23:f9:03:6c:5c:d1:56:c3:63:bc:9a: a5:92:41:2b:5d:3c:57:f2:8c:40:00:0b:a8:d5:88:fa:01:d1: 1b:e1:6f:70:3d:95:c7:90:25:be:b3:d5:35:63:2b:40:d3:96: a2:fb:8c:0c:cd:4b:1c:5a:d2:3e:c7:de:c4:d9:82:02:a8:02: 1e:ff:9f:29:01:96:ec:12:33:51:ab:65:f1:99:b1:3a:7e:01: 93:d2:c4:5f:99:00:85:c7:9a:26:dd:f3:95:63:ce:b2:f9:5d: 0d:d3:91:07 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZq2nGaQS24erF1shTMkfMbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTYwNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWE3MGE4MWFhMDMwOGEzY2JiZjY4NTc4YjE4MGYzNTZiNmVkOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n8DdxufWyMOPKnjqNbQIIIR5VU+ XElz6Qq2ipDuOW+qy9Ojh2PG4tBTLHTESrkH7R48SEwsxfKTQYf/jVv7NjXK3mjm Scru215JyiV208+TQZWV7E3nhiz3aHyoW53Uk6ijOGpm4I7fldgHrYYri0Gfk/Hd 5cS0BGgvObH8D3vmb/hICxrLWSWQxGDzBRRC0XPBl8X8LmCTXU2fJAeJzbcsvYXU nEnnmZtTBN53nnLJeVgcriWgriIVx8MVqx3iEPoXdu2g6WcW+GUNHRpHw9etEijT U7Jgf+aJCTvanWtd1Chwt0viPRsH9QdPdTFB9x5/G+VtROPI+UzFq4y8UwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOWnCoGqAwijy79oV4sYDzVrbtisMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzMxZDFm MC05NGU1LTRmZDQtODdmMi1lZTk2ZTI4ZWE2ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMzFkMWYw LTk0ZTUtNGZkNC04N2YyLWVlOTZlMjhlYTZlOS8xLzVhY0tnYW9EQ0tQTHYyaFhp eGdQTld0dTJLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudtZMA0EAgACMAcDBQAqFN8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNB6zANBgkqhkiG9w0BAQsFAAOCAQEAIel1uwkacrY7 Cg8kDPb+Sxde8XfzG9mhQnwq1UBbp9jGSvkW69xaBjSF1nPy3rvVhOzOjugNjY/g QlAAvidHU5B61ljnXdZgDUVc0mpOvNFlXbndfEmBUlHWA1U5XxtevrYrL5ToZqeS Wep0rmv0/XEUy8u40ibwcys/Xahjn2WWHfXX6x+clzOtHQWqIn/mYJ5dULOCaSP5 A2xc0VbDY7yapZJBK108V/KMQAALqNWI+gHRG+FvcD2Vx5AlvrPVNWMrQNOWovuM DM1LHFrSPsfexNmCAqgCHv+fKQGW7BIzUatl8ZmxOn4Bk9LEX5kAhceaJt3zlWPO svldDdORBw== -----END CERTIFICATE-----Generated at Fri Nov 28 08:57:26 2025 by rpki-client