This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer File: a5p0BaYIXJq6zwg9yQpJX80mjPg.cer (raw, json) Hash identifier: Gs4BMyJlXViJRBw2tYiEeU9tmdiWRzO80H/i5Hhh4Rw= Subject key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B62218F67238C577F00E996DEDFDC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59915 IP: 2a01:6f40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:62:21:8f:67:23:8c:57:7f:00:e9:96:de:df:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9e:d1:ec:44:90:8c:51:ca:a6:76:a2:72:d8: dc:1d:aa:dd:35:6e:f6:50:a0:87:cb:bd:eb:c5:1d: 3d:08:d5:c2:aa:8b:20:a2:28:5a:38:d3:37:fb:b7: 33:bc:ca:06:ad:60:0f:18:15:fd:1c:c1:74:26:d9: 8a:c1:6d:77:ad:09:cf:5a:e9:ff:a8:89:cc:be:f7: ad:f5:7c:79:23:0c:e7:54:21:bd:69:0a:e9:4d:c7: 15:af:7f:5e:8a:56:97:4b:60:2e:8c:a8:1a:aa:b7: d7:d5:e3:e2:e7:1f:0f:b5:56:f5:6d:c8:c5:21:51: 20:24:91:5a:18:3d:36:ae:ec:6e:b1:95:bc:04:8b: 6e:31:f9:78:5e:57:10:f4:dd:01:db:34:10:0f:60: 66:1f:8c:4c:9d:f5:e5:40:48:73:d3:88:6d:dc:70: 6c:ae:e1:ec:f4:8d:27:6d:d8:af:1a:1c:27:ec:22: 3e:35:69:83:cc:47:e6:3c:9a:8a:c1:20:13:34:5a: af:ba:81:67:d2:2c:51:d4:2e:af:b3:34:48:7c:21: 58:2e:dc:0b:3c:51:76:28:58:6e:c7:3a:9e:c2:8b: 82:03:dd:00:7e:41:49:9d:f7:fe:fc:90:45:99:77: f7:a5:e8:3a:39:ad:31:13:05:a6:5d:11:c0:b1:de: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:6f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59915 Signature Algorithm: sha256WithRSAEncryption 8f:82:ab:8f:6a:74:3e:e9:ef:21:87:82:28:e2:e1:0f:73:bc: d6:15:1c:b2:08:f5:12:6b:1e:bb:1f:80:16:db:40:41:ba:1d: 2a:e7:43:d8:42:38:31:bd:de:8b:5c:f9:3f:e7:ec:64:d9:ed: 82:21:a4:5f:f6:cb:fa:65:bb:6f:fa:5b:bb:04:c1:33:19:0e: 8a:01:66:6c:b3:81:74:00:3e:99:bf:49:84:3d:aa:3c:76:80: 69:43:9d:a2:f3:d5:83:fc:c7:eb:9a:88:d6:8b:6a:e1:9c:05: d2:4e:48:ce:db:ae:ce:f5:90:99:d2:df:b9:d2:ea:56:94:2d: f0:cd:6e:ee:4a:a8:7e:78:41:cb:aa:c3:9e:24:ee:e5:e0:c6: 40:b9:8d:e7:bb:da:76:00:7c:e2:39:32:d1:19:17:fd:28:18: 17:50:6b:9c:10:1d:d7:0d:7f:e9:66:b1:36:9e:19:30:24:5c: 6d:a3:e6:a3:f5:ce:cc:6d:71:e9:e8:97:92:63:d2:8e:85:87: f5:f3:66:e3:93:a2:f2:bf:20:54:b2:b6:55:59:e6:b5:d3:a6: 8f:ed:7f:5c:e2:b9:af:85:55:01:c9:02:0e:1d:96:08:c1:25: c2:15:c0:8e:33:b6:02:55:ad:a6:ee:4e:9c:4e:01:26:6e:ac: aa:c2:93:83 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9W2Ihj2cjjFd/AOmW3t/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjlhNzQwNWE2MDg1YzlhYmFjZjA4M2RjOTBhNDk1ZmNkMjY4Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z7R7ESQjFHKpnaictjcHardNW72 UKCHy73rxR09CNXCqosgoihaONM3+7czvMoGrWAPGBX9HMF0JtmKwW13rQnPWun/ qInMvvet9Xx5IwznVCG9aQrpTccVr39eilaXS2AujKgaqrfX1ePi5x8PtVb1bcjF IVEgJJFaGD02ruxusZW8BItuMfl4XlcQ9N0B2zQQD2BmH4xMnfXlQEhz04ht3HBs ruHs9I0nbdivGhwn7CI+NWmDzEfmPJqKwSATNFqvuoFn0ixR1C6vszRIfCFYLtwL PFF2KFhuxzqewouCA90AfkFJnff+/JBFmXf3peg6Oa0xEwWmXRHAsd6NAQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFGuadAWmCFyaus8IPckKSV/NJoz4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzY0NTdk OS1iNGRiLTRiMmQtOTE5Yy0yZTFlZTk0NzFlZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNjQ1N2Q5 LWI0ZGItNGIyZC05MTljLTJlMWVlOTQ3MWVlYy8xL2E1cDBCYVlJWEpxNnp3Zzl5 UXBKWDgwbWpQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgFvQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMA6gswDQYJKoZIhvcNAQELBQADggEBAI+Cq49qdD7p7yGHgiji4Q9zvNYVHLII 9RJrHrsfgBbbQEG6HSrnQ9hCODG93otc+T/n7GTZ7YIhpF/2y/plu2/6W7sEwTMZ DooBZmyzgXQAPpm/SYQ9qjx2gGlDnaLz1YP8x+uaiNaLauGcBdJOSM7brs71kJnS 37nS6laULfDNbu5KqH54Qcuqw54k7uXgxkC5jee72nYAfOI5MtEZF/0oGBdQa5wQ HdcNf+lmsTaeGTAkXG2j5qP1zsxtcenol5Jj0o6Fh/XzZuOTovK/IFSytlVZ5rXT po/tf1ziua+FVQHJAg4dlgjBJcIVwI4ztgJVrabuTpxOASZurKrCk4M= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:35 2026 by rpki-client