This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.cer (raw, json) Hash identifier: 3wci3I991ieCkh3LVENDsRZfaDZevhkblJbdkj0Qry8= Subject key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C142C8419EA2A7384CEF22B23FF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34521 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:42:c8:41:9e:a2:a7:38:4c:ef:22:b2:3f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:5b:85:d2:b3:d5:59:9f:03:ef:a3:ff:da: a7:74:74:09:ed:1a:45:ce:de:76:fd:a7:f8:3c:23: cf:92:84:16:3a:92:92:4e:99:d4:5b:05:52:2c:ce: 0d:01:69:74:3f:0c:0d:4e:53:c9:d9:b3:17:69:dd: b8:90:5b:b3:9f:24:5e:67:b2:e9:db:62:20:cc:36: 1e:3e:75:e9:d2:f9:fa:80:ab:4e:01:28:1c:fb:fc: e1:f7:cf:0f:88:e0:ea:78:f5:2e:eb:e6:fb:24:ba: b0:4a:e3:ef:1c:6d:a6:8c:ca:18:e2:03:a7:28:5e: 3d:ca:bf:32:7d:bc:14:d6:3e:61:75:4d:80:a4:39: a6:92:c9:bd:9b:60:79:a2:43:1d:46:f2:88:99:63: c4:09:27:3f:17:5a:b3:37:70:7f:00:10:a4:a0:f3: 3a:64:db:eb:9f:8f:b9:8b:4d:65:db:fb:84:94:1d: 6e:87:a9:83:1d:6e:d7:1b:97:37:3d:fb:a4:8c:73: 82:47:43:e3:90:d1:e0:d9:de:c5:69:dd:e4:77:00: cc:d5:79:71:65:83:59:1f:37:83:c3:f9:8b:2e:3d: 40:95:b4:9e:a6:31:e4:af:fe:d6:f6:17:8c:f8:a4: 79:6d:25:f4:90:66:4a:d4:80:ac:81:92:d4:0c:67: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 34521 Signature Algorithm: sha256WithRSAEncryption 18:4a:f5:a6:36:d7:5b:de:88:65:8d:d6:21:e5:ee:f8:05:2e: 9b:06:5f:85:9c:78:70:87:e9:5f:6e:1d:c9:ba:68:bb:f6:9a: 04:ed:bf:8f:7e:73:ba:4f:8a:60:2f:d3:e4:03:f9:05:62:73: 25:bf:0a:8a:9e:0b:85:ac:4d:57:09:43:35:f9:71:78:5f:ec: 0a:45:66:a7:c0:09:51:a0:7d:28:51:48:b8:63:ff:0a:7d:24: 80:d3:7b:45:c8:4e:13:1b:8c:7a:a6:fa:b3:5d:f5:22:47:30: 28:f1:8f:55:b0:71:b2:16:ac:3a:a4:46:cc:ef:d8:95:9b:78: 35:bd:24:89:e9:f9:bf:3f:80:8f:aa:c6:50:e9:cf:17:e6:c2: 78:2b:f7:95:e0:54:b5:23:75:fc:97:b5:2a:a8:c6:a4:71:dc: 17:0c:13:68:19:4a:0d:be:0f:f5:3b:31:63:ec:a3:64:3d:ed: f6:fa:b8:53:79:18:eb:1d:78:a9:ee:f7:df:26:db:02:68:4a: 01:e9:54:41:3e:60:86:ff:62:16:78:03:53:9d:d9:f4:69:82: de:56:bd:c1:71:3c:36:17:7b:50:d5:61:98:7d:5e:3d:d3:9d: c8:bd:f0:d0:86:19:c4:d5:43:38:32:62:4b:14:d1:b1:16:ee: d3:51:84:7c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NcFCyEGeoqc4TO8isj/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzM3MGZiMDllNTIyM2FkMWU0NDhmNGMwZjE2MmZlYTk5NWE3YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5RbhdKz1VmfA++j/9qndHQJ7RpF zt52/af4PCPPkoQWOpKSTpnUWwVSLM4NAWl0PwwNTlPJ2bMXad24kFuznyReZ7Lp 22IgzDYePnXp0vn6gKtOASgc+/zh988PiODqePUu6+b7JLqwSuPvHG2mjMoY4gOn KF49yr8yfbwU1j5hdU2ApDmmksm9m2B5okMdRvKImWPECSc/F1qzN3B/ABCkoPM6 ZNvrn4+5i01l2/uElB1uh6mDHW7XG5c3PfukjHOCR0PjkNHg2d7Fad3kdwDM1Xlx ZYNZHzeDw/mLLj1AlbSepjHkr/7W9heM+KR5bSX0kGZK1ICsgZLUDGeCAQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOc3D7CeUiOtHkSPTA8WL+qZWntWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzhmMjI5 My03ZGJhLTQzN2ItYWY4NS05N2UzNTVlNTFlZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvOGYyMjkz LTdkYmEtNDM3Yi1hZjg1LTk3ZTM1NWU1MWVmMy8xLzV6Y1BzSjVTSTYwZVJJOU1E eFl2NnBsYWUxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCG2TANBgkqhkiG9w0BAQsFAAOCAQEAGEr1pjbXW96I ZY3WIeXu+AUumwZfhZx4cIfpX24dybpou/aaBO2/j35zuk+KYC/T5AP5BWJzJb8K ip4LhaxNVwlDNflxeF/sCkVmp8AJUaB9KFFIuGP/Cn0kgNN7RchOExuMeqb6s131 IkcwKPGPVbBxshasOqRGzO/YlZt4Nb0kien5vz+Aj6rGUOnPF+bCeCv3leBUtSN1 /Je1KqjGpHHcFwwTaBlKDb4P9TsxY+yjZD3t9vq4U3kY6x14qe733ybbAmhKAelU QT5ghv9iFngDU53Z9GmC3la9wXE8Nhd7UNVhmH1ePdOdyL3w0IYZxNVDODJiSxTR sRbu01GEfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:46 2026 by rpki-client