This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer (raw, json) Hash identifier: 9r+V9JR6yAqfwYD6p/9zbp968YsNSHQBJOW8MdMTk2Q= Subject key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35B52448829609FAE31A031884EB57 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.76.242.0/24 IP: 192.92.149.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b5:24:48:82:96:09:fa:e3:1a:03:18:84:eb:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:b6:42:46:2f:7b:5e:76:49:7a:de:74:14: 8d:f8:e3:76:9f:c9:cd:df:55:ca:3b:ee:09:6a:c3: 9e:78:1c:73:3b:52:0e:fd:a2:a6:01:de:5b:de:cd: 6b:4e:1c:99:ec:10:78:24:91:00:9b:0d:48:7b:4b: 39:c3:60:6b:4b:22:dc:b7:ac:a1:59:c2:f1:51:3e: f2:fa:4b:2d:07:b9:bd:a8:d0:a2:2d:dd:5f:25:7a: 25:a9:5a:e8:da:d7:f5:e6:62:08:36:6b:6c:3e:4d: b3:3e:02:5a:8b:3d:24:ef:ff:61:dd:fa:12:73:9f: 66:f7:65:b7:94:b9:81:fe:38:4d:ab:52:29:92:1a: 7a:e4:d4:2f:ce:41:70:3a:a8:e5:dd:0d:f0:1f:4b: d1:cc:d6:85:f1:d1:a2:f7:d5:0c:7b:16:a6:20:26: f1:5c:bd:0d:cb:c9:d8:10:1d:a3:2c:b5:e2:23:34: 3e:ba:86:66:1d:b6:96:9f:59:77:d5:d5:26:67:15: c1:10:cd:27:be:87:8a:05:54:3b:16:63:e7:37:2f: 25:b3:57:b2:be:5d:2e:68:e6:39:18:51:13:e9:5e: a7:64:6a:2d:37:12:ad:05:4f:93:83:c6:88:e6:88: ad:7e:57:7d:0c:8d:d3:35:32:04:6f:81:fb:31:d1: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.76.242.0/24 192.92.149.0/24 Signature Algorithm: sha256WithRSAEncryption 88:21:5e:12:29:e3:55:82:cb:64:29:01:dc:b0:61:12:65:fe: 4b:76:47:db:48:7d:ce:0f:16:27:d3:ea:1b:e9:a2:14:62:22: c5:18:bb:b1:76:63:bf:da:4c:63:ca:06:73:d6:c4:17:9f:9c: ef:ce:a6:75:fd:9d:e4:4a:7d:16:d6:ee:d2:45:88:c7:9e:24: 3d:c0:61:f3:54:e8:bc:6e:61:c2:78:86:ee:e4:2a:24:b7:56: 77:73:dd:1c:4f:f9:64:c1:5c:2d:37:51:35:fa:75:b4:df:23: 96:65:9d:5f:b3:93:43:c1:ce:3b:db:55:94:eb:04:9b:3a:05: 8e:b7:a8:fe:f1:3e:1c:4f:ca:2c:34:65:82:c4:5b:ee:4f:ad: 06:32:00:6f:b6:26:4f:96:da:a4:66:06:a5:3f:24:8b:ec:f3: af:28:8c:bc:9f:c0:d4:94:6c:3b:a2:62:91:d8:94:73:75:91: 66:1d:98:88:ba:96:5f:86:37:0d:70:dc:c7:95:39:9d:42:0e: af:a0:e2:4e:13:0b:b2:8c:86:3b:8a:fd:5a:ba:df:81:9d:f3: 41:67:b7:13:01:4a:47:3b:e4:bd:17:9c:b7:35:58:5c:30:5a: ad:9a:98:2c:46:83:e1:53:23:db:4d:1b:24:08:5c:eb:b4:74: 57:aa:68:b9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7NbUkSIKWCfrjGgMYhOtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjkyZGY3NjEwZjA0OGY0M2JmNDRjMzM2ZDQxYzZjMTE1N2VmMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr22QkYve152SXredBSN+ON2n8nN 31XKO+4JasOeeBxzO1IO/aKmAd5b3s1rThyZ7BB4JJEAmw1Ie0s5w2BrSyLct6yh WcLxUT7y+kstB7m9qNCiLd1fJXolqVro2tf15mIINmtsPk2zPgJaiz0k7/9h3foS c59m92W3lLmB/jhNq1Ipkhp65NQvzkFwOqjl3Q3wH0vRzNaF8dGi99UMexamICbx XL0Ny8nYEB2jLLXiIzQ+uoZmHbaWn1l31dUmZxXBEM0nvoeKBVQ7FmPnNy8ls1ey vl0uaOY5GFET6V6nZGotNxKtBU+Tg8aI5oitfld9DI3TNTIEb4H7MdGz4wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFH+S33YQ8Ej0O/RMM21BxsEVfvDiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzU4YmUx OC0yZjM1LTRjNmEtYWE2YS03ZjcyZjQ0Yjg5ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvNThiZTE4 LTJmMzUtNGM2YS1hYTZhLTdmNzJmNDRiODk4Mi8xL2Y1TGZkaER3U1BRNzlFd3pi VUhHd1JWLThPSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwEzyAwQAwFyVMA0GCSqGSIb3DQEBCwUAA4IB AQCIIV4SKeNVgstkKQHcsGESZf5LdkfbSH3ODxYn0+ob6aIUYiLFGLuxdmO/2kxj ygZz1sQXn5zvzqZ1/Z3kSn0W1u7SRYjHniQ9wGHzVOi8bmHCeIbu5Cokt1Z3c90c T/lkwVwtN1E1+nW03yOWZZ1fs5NDwc4721WU6wSbOgWOt6j+8T4cT8osNGWCxFvu T60GMgBvtiZPltqkZgalPySL7POvKIy8n8DUlGw7omKR2JRzdZFmHZiIupZfhjcN cNzHlTmdQg6voOJOEwuyjIY7iv1aut+BnfNBZ7cTAUpHO+S9F5y3NVhcMFqtmpgs RoPhUyPbTRskCFzrtHRXqmi5 -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:47 2026 by rpki-client