This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer File: N5fgOfAlolqm6ZI5HZJCYGmbpns.cer (raw, json) Hash identifier: D10tS7f/5c4j6Y4/6jmezUCV6yIY9/RDIAlwiBQRc/4= Subject key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1422211ACD0ABFB964B98DE134D5B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.96.72.0/22 IP: 2a00:4b20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:22:21:1a:cd:0a:bf:b9:64:b9:8d:e1:34:d5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3797e039f025a25aa6e992391d924260699ba67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:3d:80:dd:1a:43:a1:fd:0f:43:d8:a0:4e: 5b:19:f5:be:6e:d6:a9:91:73:31:77:fd:85:07:c5: b5:25:20:af:51:d2:a0:db:17:3e:de:3a:cf:6f:1e: 85:c8:56:ef:b4:04:b4:2c:85:5f:f1:c1:a1:e2:a5: 33:15:53:1c:b6:24:71:60:37:2c:63:0b:cd:33:50: 22:27:d2:86:38:3b:38:32:33:18:4d:95:53:71:34: 54:02:0a:ba:00:be:8d:5b:7f:d1:59:e2:db:0c:b5: 69:38:25:f8:b9:71:c8:f2:bb:4a:bb:8d:09:05:bf: 0f:12:9a:c6:52:44:b4:b4:25:93:49:e1:f1:8a:50: f0:89:27:63:19:38:0d:14:f8:9d:52:67:dc:c3:7a: d9:ee:c9:93:88:31:4a:0c:80:61:d7:af:80:0b:54: 3c:e9:49:54:62:7f:61:c6:72:08:70:91:1a:7f:94: 8e:77:51:01:71:80:7d:b8:3b:78:3b:ad:3e:b8:f0: 29:03:db:68:7d:2b:3c:d4:22:e9:e0:e4:3d:b6:a2: 8b:5f:ca:52:9e:d1:a0:50:4e:ef:fe:70:91:f1:28: 9a:71:93:56:57:3d:5a:71:cf:24:5c:60:38:26:9c: 1d:e3:7d:15:f7:db:f9:bf:ce:32:0c:8a:bf:e8:18: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.72.0/22 IPv6: 2a00:4b20::/32 Signature Algorithm: sha256WithRSAEncryption 0f:b8:fa:27:bf:e3:36:f9:8e:0c:91:d4:4b:ca:24:27:60:fd: 3b:15:46:e4:3c:61:e4:11:ba:e3:47:86:f5:e6:f8:81:f4:67: 18:84:4f:78:8e:78:87:c0:5c:bc:84:b1:28:77:1b:72:13:93: 92:90:47:f1:ba:ad:55:6e:45:e4:31:d9:16:a8:0f:92:2a:e0: 68:7f:56:44:4e:a4:e1:70:60:41:06:2e:0b:67:48:79:d9:79: 7f:46:ba:56:7c:52:ac:02:12:f7:10:2f:9d:56:88:85:29:ca: 07:bd:4b:59:85:72:ab:63:a5:8f:cf:07:4f:b8:23:a2:8b:37: 98:fd:82:39:6e:5a:0a:96:fd:c9:70:97:04:65:d1:ef:7a:e7: 8d:b9:2b:5e:5b:40:01:55:56:76:00:1b:7a:3e:e4:85:ca:ae: a8:3d:fc:99:f4:ea:b5:ae:20:8e:49:79:b0:15:21:06:5f:e8: 06:5d:a9:fd:ce:05:51:33:c2:d3:87:49:e3:f3:a1:ab:49:ce: b8:0a:a7:a8:02:27:c6:bd:03:87:6d:9d:ae:ce:b4:bd:35:43: fb:d1:1c:89:52:08:fd:53:4e:26:ce:13:75:05:e5:2c:47:57: 7c:ac:ec:05:55:36:fd:bd:58:9d:69:56:c5:bb:20:1b:c1:0a: 23:2e:f4:82 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FCIhGs0Kv7lkuY3hNNWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk3ZTAzOWYwMjVhMjVhYTZlOTkyMzkxZDkyNDI2MDY5OWJhNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCM9gN0aQ6H9D0PYoE5bGfW+btap kXMxd/2FB8W1JSCvUdKg2xc+3jrPbx6FyFbvtAS0LIVf8cGh4qUzFVMctiRxYDcs YwvNM1AiJ9KGODs4MjMYTZVTcTRUAgq6AL6NW3/RWeLbDLVpOCX4uXHI8rtKu40J Bb8PEprGUkS0tCWTSeHxilDwiSdjGTgNFPidUmfcw3rZ7smTiDFKDIBh16+AC1Q8 6UlUYn9hxnIIcJEaf5SOd1EBcYB9uDt4O60+uPApA9tofSs81CLp4OQ9tqKLX8pS ntGgUE7v/nCR8SiacZNWVz1acc8kXGA4Jpwd430V99v5v84yDIq/6BjJ1wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDeX4DnwJaJapumSOR2SQmBpm6Z7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzBhYmI4 YS05Nzk4LTRiZjgtYmFlMS1jMWMwNWNkYjc4NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMGFiYjhh LTk3OTgtNGJmOC1iYWUxLWMxYzA1Y2RiNzg0MS8xL041ZmdPZkFsb2xxbTZaSTVI WkpDWUdtYnBucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWBIMA0EAgACMAcDBQAqAEsgMA0GCSqGSIb3 DQEBCwUAA4IBAQAPuPonv+M2+Y4MkdRLyiQnYP07FUbkPGHkEbrjR4b15viB9GcY hE94jniHwFy8hLEodxtyE5OSkEfxuq1VbkXkMdkWqA+SKuBof1ZETqThcGBBBi4L Z0h52Xl/RrpWfFKsAhL3EC+dVoiFKcoHvUtZhXKrY6WPzwdPuCOiizeY/YI5bloK lv3JcJcEZdHveueNuSteW0ABVVZ2ABt6PuSFyq6oPfyZ9Oq1riCOSXmwFSEGX+gG Xan9zgVRM8LTh0nj86GrSc64CqeoAifGvQOHbZ2uzrS9NUP70RyJUgj9U04mzhN1 BeUsR1d8rOwFVTb9vVidaVbFuyAbwQojLvSC -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:22 2026 by rpki-client