This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer (raw, json) Hash identifier: 1Z67dtHg1dXzSuJcht4XzcAOke5IDM8h7EGaWFm90Ow= Subject key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7210A197372DA92A1836536C3658C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34564 IP: 194.126.228.0/24 IP: 2001:67c:2310::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:21:0a:19:73:72:da:92:a1:83:65:36:c3:65:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:e2:b9:6a:f1:0c:5d:fa:d2:81:3e:0b:4f: 60:c4:7f:f2:d8:1b:1e:b2:81:f2:4c:db:0a:f1:3f: b2:dc:25:4f:df:b3:96:00:09:59:ef:57:7e:25:cd: f9:48:93:f2:18:1b:94:06:77:9f:59:ad:29:4f:49: 13:62:f5:1c:f7:34:d9:ea:4d:00:4a:df:4f:29:28: 4d:12:98:54:e8:de:6a:ff:73:fe:2f:af:ea:27:ee: de:f5:55:f3:e2:63:7e:5e:cd:fd:91:7c:35:61:93: 3b:fa:bc:9a:f5:77:1b:16:cf:f8:43:55:de:32:05: 4d:8c:23:bf:6d:d9:a2:45:84:69:17:8e:3e:87:2a: c9:cf:de:81:ae:55:45:6f:23:ab:53:2f:ee:67:ec: 24:77:8c:d9:2d:a1:7b:49:69:f5:1c:43:f3:9e:2a: e0:04:f3:08:5a:f9:36:df:a3:c6:bd:30:39:51:b6: 5c:1c:1a:d7:09:33:d3:a7:cf:ca:e0:5f:b4:37:9f: 58:ea:27:8a:7a:82:13:38:3e:1b:55:c7:77:b9:34: ff:03:c7:f7:02:82:b2:28:43:e0:61:68:bd:39:16: 7a:20:1d:1d:7b:2b:66:90:d5:d2:cb:c6:2b:5b:99: b2:d9:a0:f6:10:04:16:13:5d:6d:bf:89:bf:e3:ec: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.228.0/24 IPv6: 2001:67c:2310::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34564 Signature Algorithm: sha256WithRSAEncryption b1:31:5e:61:8d:54:a9:ce:6e:d8:63:36:7f:d3:12:8c:c5:3f: c7:b9:3c:bf:ce:1b:ca:17:fc:48:0c:a0:32:38:21:37:f4:60: 7c:cf:1c:36:05:f4:87:0c:2d:60:60:df:c3:77:23:27:b2:46: 4e:a0:e0:d5:a4:e5:02:94:d8:dc:29:fe:cf:81:7f:c3:f7:14: 47:a8:84:eb:40:4b:9a:6d:fb:20:40:af:20:f2:53:fd:73:7a: c7:77:e2:b5:a3:e4:e0:89:1b:d6:39:09:2c:39:b3:58:d2:46: b6:ea:7e:be:81:bf:85:d4:d2:9c:24:95:70:1c:62:f8:47:0c: 7c:25:38:78:ad:ed:e6:ea:e1:48:9d:00:49:d1:63:b1:3d:9e: 5d:23:ba:99:1d:ec:79:8f:73:68:12:bb:91:f0:97:e5:9d:33: 07:ee:d9:90:88:20:09:46:d0:6f:cd:4f:86:46:1d:b2:97:6e: 13:92:37:ca:0c:52:f7:d9:9f:0e:93:db:28:70:0c:88:33:91: 2f:f3:b9:03:76:20:f8:80:21:62:c7:4e:de:21:b5:da:d1:e1: ec:e8:e7:32:75:31:9d:20:24:f8:c0:8b:ea:89:e9:46:2f:2b: 7c:0b:85:b6:e0:33:23:36:c8:2f:02:82:1c:eb:cd:a4:43:c2: 9f:2e:f6:86 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+pyEKGXNy2pKhg2U2w2WMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjdjMTE0NWQxODU1NDY5OGVkZDk5ZDdjZDE5OWNkM2MwMmIyYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRviuWrxDF360oE+C09gxH/y2Bse soHyTNsK8T+y3CVP37OWAAlZ71d+Jc35SJPyGBuUBnefWa0pT0kTYvUc9zTZ6k0A St9PKShNEphU6N5q/3P+L6/qJ+7e9VXz4mN+Xs39kXw1YZM7+rya9XcbFs/4Q1Xe MgVNjCO/bdmiRYRpF44+hyrJz96BrlVFbyOrUy/uZ+wkd4zZLaF7SWn1HEPznirg BPMIWvk236PGvTA5UbZcHBrXCTPTp8/K4F+0N59Y6ieKeoITOD4bVcd3uTT/A8f3 AoKyKEPgYWi9ORZ6IB0deytmkNXSy8YrW5my2aD2EAQWE11tv4m/4+yUHwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFOZ8EUXRhVRpjt2Z180ZnNPAKyoVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2U2MmUw Yy0yNWViLTRjOTUtODAwMi04N2YxY2Y3M2E0M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZTYyZTBj LTI1ZWItNGM5NS04MDAyLTg3ZjFjZjczYTQzYS8xLzVud1JSZEdGVkdtTzNablh6 Um1jMDhBcktoVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwn7kMA8EAgACMAkDBwAgAQZ8IxAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAIcEMA0GCSqGSIb3DQEBCwUAA4IBAQCxMV5hjVSp zm7YYzZ/0xKMxT/HuTy/zhvKF/xIDKAyOCE39GB8zxw2BfSHDC1gYN/DdyMnskZO oODVpOUClNjcKf7PgX/D9xRHqITrQEuabfsgQK8g8lP9c3rHd+K1o+TgiRvWOQks ObNY0ka26n6+gb+F1NKcJJVwHGL4Rwx8JTh4re3m6uFInQBJ0WOxPZ5dI7qZHex5 j3NoEruR8JflnTMH7tmQiCAJRtBvzU+GRh2yl24TkjfKDFL32Z8Ok9socAyIM5Ev 87kDdiD4gCFix07eIbXa0eHs6OcydTGdICT4wIvqielGLyt8C4W24DMjNsgvAoIc 682kQ8KfLvaG -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:35 2026 by rpki-client