This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer File: d-g56lm5dYJP1wigrXNVUAF8v3w.cer (raw, json) Hash identifier: TEH5DBO66RfBeLv8gwaTyyBXVs0+MnqRv3PdcpfWX08= Subject key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0F2D1BD436310CAF97950176D808 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49920 IP: 185.149.60.0/22 IP: 185.234.53.0 -- 185.234.55.255 IP: 2a05:c0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0f:2d:1b:d4:36:31:0c:af:97:95:01:76:d8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77e839ea59b975824fd708a0ad735550017cbf7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:c5:f2:5b:1f:ec:85:2e:59:22:2d:58:cd: f0:ba:32:e2:5c:46:bb:b6:50:93:70:2a:e6:af:a3: f2:03:61:d6:55:7c:e5:ee:47:96:2c:d1:a9:69:9b: 66:6d:23:cb:20:a1:c5:06:91:36:22:84:53:ae:dd: bb:bf:61:00:5d:10:28:85:8f:b1:db:4d:41:8a:fd: 08:0d:69:51:3d:7a:f6:19:41:fb:a6:a6:66:e8:f9: 61:31:32:3f:0e:4f:b8:8c:4d:26:ab:29:24:f3:b7: 2d:b5:48:a7:de:b2:f0:82:6a:56:5c:5e:d7:83:2b: 98:68:f5:31:41:5e:f2:a6:3f:65:a1:64:8d:c4:6c: 3e:26:53:ae:d7:ef:ff:6e:0a:6b:2b:0e:68:6b:c8: 03:15:bd:23:94:f3:f9:70:9f:93:73:41:34:c5:29: 8b:0d:0c:34:b9:d5:7b:b7:56:8d:85:09:04:f4:36: e4:ee:eb:c1:e1:64:68:90:c2:b1:a7:8a:d6:9c:39: 71:d7:a1:1c:ab:ad:29:7b:12:fb:69:24:3c:c8:60: 59:17:f1:16:b6:60:5d:a9:9c:f2:df:c8:6c:44:2b: de:11:20:9b:88:81:9e:94:6b:8e:e5:1d:19:e4:a8: 42:0d:ae:00:88:88:64:7e:f1:f7:00:9e:2e:ad:43: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.60.0/22 185.234.53.0-185.234.55.255 IPv6: 2a05:c0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49920 Signature Algorithm: sha256WithRSAEncryption 76:cd:04:ad:2f:e0:1a:e0:3c:05:eb:ad:7a:1d:28:6d:7c:87: e3:13:02:66:54:01:77:e9:f0:c8:9b:08:50:74:13:8c:68:f7: 68:91:00:86:d2:fb:6c:54:5b:54:8c:ed:a8:a0:f5:b7:51:b9: 55:0e:94:6b:06:78:ce:8f:f8:75:0c:c7:ff:7c:bc:53:76:65: 56:1e:40:9c:57:ba:73:d2:20:55:83:c8:37:08:6d:0c:05:61: 34:27:be:9e:62:0f:57:bd:6a:3d:e4:7f:3f:d3:65:08:89:c2: 53:2c:26:b0:7c:49:b3:ea:b2:12:cd:07:2a:a6:74:b5:08:5d: 24:74:bb:4f:82:7f:0d:02:7e:45:12:41:32:6e:80:fa:d6:94: 3d:97:26:fd:6b:09:19:39:85:8c:6b:1b:6c:da:1f:b2:0f:c6: 1f:30:6e:b9:61:06:d0:6f:b2:9e:7c:ef:d8:51:d3:00:6e:d4: 0c:2e:4f:91:1a:86:64:97:61:77:54:04:1c:c1:48:27:1f:8f: 91:c8:c1:45:f9:9a:99:1c:c1:4a:30:0f:2a:1e:a2:72:54:bb: ce:ac:d2:ad:f0:7d:60:01:cd:a5:5d:ff:78:77:c6:a3:0e:d1: e5:9c:e0:d7:71:c4:c0:9e:b8:57:9d:f5:2e:18:00:ac:33:ff: 59:02:11:10 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt87g8tG9Q2MQyvl5UBdtgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2U4MzllYTU5Yjk3NTgyNGZkNzA4YTBhZDczNTU1MDAxN2NiZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzXF8lsf7IUuWSItWM3wujLiXEa7 tlCTcCrmr6PyA2HWVXzl7keWLNGpaZtmbSPLIKHFBpE2IoRTrt27v2EAXRAohY+x 201Biv0IDWlRPXr2GUH7pqZm6PlhMTI/Dk+4jE0mqykk87cttUin3rLwgmpWXF7X gyuYaPUxQV7ypj9loWSNxGw+JlOu1+//bgprKw5oa8gDFb0jlPP5cJ+Tc0E0xSmL DQw0udV7t1aNhQkE9Dbk7uvB4WRokMKxp4rWnDlx16Ecq60pexL7aSQ8yGBZF/EW tmBdqZzy38hsRCveESCbiIGelGuO5R0Z5KhCDa4AiIhkfvH3AJ4urUPPKQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFHfoOepZuXWCT9cIoK1zVVABfL98MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2FlNWI1 Zi1lNzQ4LTRmZDUtYjFkZS1jNzlhM2ZhNzFkMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvYWU1YjVm LWU3NDgtNGZkNS1iMWRlLWM3OWEzZmE3MWQzNC8xL2QtZzU2bG01ZFlKUDF3aWdy WE5WVUFGOHYzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCuZU8MAwDBAC56jUDBAO56jAwDQQCAAIwBwMF AyoFwMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMMAMA0GCSqGSIb3DQEBCwUA A4IBAQB2zQStL+Aa4DwF6616HShtfIfjEwJmVAF36fDImwhQdBOMaPdokQCG0vts VFtUjO2ooPW3UblVDpRrBnjOj/h1DMf/fLxTdmVWHkCcV7pz0iBVg8g3CG0MBWE0 J76eYg9XvWo95H8/02UIicJTLCawfEmz6rISzQcqpnS1CF0kdLtPgn8NAn5FEkEy boD61pQ9lyb9awkZOYWMaxts2h+yD8YfMG65YQbQb7KefO/YUdMAbtQMLk+RGoZk l2F3VAQcwUgnH4+RyMFF+ZqZHMFKMA8qHqJyVLvOrNKt8H1gAc2lXf94d8ajDtHl nODXccTAnrhXnfUuGACsM/9ZAhEQ -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:34 2026 by rpki-client