This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer File: X5K_96iahZDmq7rsAoKw8k4K_rI.cer (raw, json) Hash identifier: 1K2v9WCqAmxSQfZPAf2Y7uFGpgxiRLJEPqFMpOD3sIA= Subject key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6748A3CC1E27D23878BC6FEDBA771 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57920 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:74:8a:3c:c1:e2:7d:23:87:8b:c6:fe:db:a7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:29:25:49:f8:80:70:98:15:45:ad:ea:d5: 62:09:9c:6e:d1:c7:0f:f4:50:12:d4:28:52:b6:18: 30:07:72:31:f4:c8:f7:d5:7d:35:d9:f0:d6:95:b3: ef:2e:8a:f3:ce:f1:21:cc:6d:f4:18:d8:92:8f:ab: 2b:cc:fe:4c:e6:59:74:42:0b:1b:28:c1:00:05:2d: ac:6d:8a:b6:86:00:6f:4f:a5:ed:d8:84:fc:cd:e0: 7d:83:8f:5d:b3:b9:bb:b5:89:43:aa:6c:6d:ca:80: a8:07:28:d9:32:20:a6:11:d3:30:a4:ff:51:16:94: ac:32:9d:e0:07:61:67:ba:ef:0a:c7:f8:07:e2:66: ff:10:0a:78:cf:ab:a6:2c:b3:d6:3d:4b:a2:9f:46: ab:42:59:42:7f:ae:b6:85:03:c3:a0:3d:b7:8d:78: 24:05:c6:15:4a:f0:1c:c4:77:7f:6a:f6:c3:a3:40: d9:e2:38:eb:c8:c4:06:74:57:44:b3:96:9c:3c:54: f6:22:ad:8d:b4:24:ae:18:7f:8a:37:f2:b7:bc:fb: be:64:95:2f:75:1d:68:12:70:7d:c9:2d:91:fd:f0: 9c:ba:ce:9e:56:7e:f1:ab:30:d4:92:c4:99:11:90: bf:64:a9:48:f0:ba:67:c6:d9:e4:a2:e0:04:a5:4e: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 57920 Signature Algorithm: sha256WithRSAEncryption 43:ca:40:24:95:cd:0a:86:bc:9c:7e:bf:4a:e4:a0:80:54:3f: ef:f5:a5:40:fc:12:7b:81:05:b3:27:fe:08:b4:45:cb:9e:80: 04:0a:39:1e:ab:b7:61:9d:a7:d3:86:38:38:11:01:7a:73:e0: 49:b3:c3:d0:a4:af:ad:c8:94:45:3b:1b:7a:3a:72:a9:0e:e9: 0c:46:ec:a4:7d:d8:24:fa:9e:e0:39:ec:cc:f4:44:42:e0:81: 5f:3d:6d:c7:6a:5b:98:16:42:83:96:43:10:ef:d0:ab:79:1a: 0c:01:ab:84:a1:4e:9b:69:82:75:ad:74:ed:ff:92:2c:e1:07: a8:b7:12:71:d4:7c:aa:f8:c1:f3:50:c6:8f:74:78:ee:4b:85: 4e:e4:f1:38:ec:c9:96:3b:11:54:77:ba:5f:34:d2:d2:f9:51: 4d:d7:34:b3:d8:a0:77:0a:9b:eb:45:9d:74:e5:6c:50:5f:d7: dc:bb:bf:c4:8f:68:2e:07:c3:38:1a:35:72:c5:57:8b:81:98: 94:d0:1a:e5:31:8a:fa:15:3f:56:ef:41:1f:d0:1a:7f:e8:b7: 11:6e:47:5c:5f:e8:5b:d6:50:6b:84:94:b7:a9:f1:b2:5e:c3: 7a:0d:5b:7d:18:ae:bd:3f:8a:ee:2e:ec:d3:0f:fd:b1:b3:d7: 08:7f:10:0a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xnSKPMHifSOHi8b+26dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjkyYmZmN2E4OWE4NTkwZTZhYmJhZWMwMjgyYjBmMjRlMGFmZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjYpJUn4gHCYFUWt6tViCZxu0ccP 9FAS1ChSthgwB3Ix9Mj31X012fDWlbPvLorzzvEhzG30GNiSj6srzP5M5ll0Qgsb KMEABS2sbYq2hgBvT6Xt2IT8zeB9g49ds7m7tYlDqmxtyoCoByjZMiCmEdMwpP9R FpSsMp3gB2Fnuu8Kx/gH4mb/EAp4z6umLLPWPUuin0arQllCf662hQPDoD23jXgk BcYVSvAcxHd/avbDo0DZ4jjryMQGdFdEs5acPFT2Iq2NtCSuGH+KN/K3vPu+ZJUv dR1oEnB9yS2R/fCcus6eVn7xqzDUksSZEZC/ZKlI8LpnxtnkouAEpU7N0wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFF+Sv/eomoWQ5qu67AKCsPJOCv6yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2E3OGVm MS1jM2M5LTQzYTAtOWIxYy0xZDlkOGQwMDQxMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvYTc4ZWYx LWMzYzktNDNhMC05YjFjLTFkOWQ4ZDAwNDExMS8xL1g1S185NmlhaFpEbXE3cnNB b0t3OGs0S19ySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDiQDANBgkqhkiG9w0BAQsFAAOCAQEAQ8pAJJXNCoa8 nH6/SuSggFQ/7/WlQPwSe4EFsyf+CLRFy56ABAo5Hqu3YZ2n04Y4OBEBenPgSbPD 0KSvrciURTsbejpyqQ7pDEbspH3YJPqe4DnszPREQuCBXz1tx2pbmBZCg5ZDEO/Q q3kaDAGrhKFOm2mCda107f+SLOEHqLcScdR8qvjB81DGj3R47kuFTuTxOOzJljsR VHe6XzTS0vlRTdc0s9igdwqb60WddOVsUF/X3Lu/xI9oLgfDOBo1csVXi4GYlNAa 5TGK+hU/Vu9BH9Aaf+i3EW5HXF/oW9ZQa4SUt6nxsl7Deg1bfRiuvT+K7i7s0w/9 sbPXCH8QCg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:10 2026 by rpki-client