This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer (raw, json) Hash identifier: xDSiGaMydgYTDix5AAvZVkzF8A8Uut4z5Nq64qgWGpY= Subject key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8D8B686E3CB607CCE367460CBC443 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.46.143.0/24 IP: 2a14:7480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d8:b6:86:e3:cb:60:7c:ce:36:74:60:cb:c4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8794395ac822dfe01165216c7781ffd61db28d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:21:6a:32:72:9a:f8:5e:e9:a0:f4:d3:72: b9:05:a8:d4:48:ee:40:6e:70:61:df:88:f0:40:30: c8:48:d6:3b:d8:d6:9d:b6:1a:9d:ac:44:c1:80:a8: 72:32:be:0b:6c:92:92:38:8b:14:68:22:6b:05:b8: 0c:2f:0c:cb:0e:2b:63:f6:71:fb:ba:9b:d0:e5:24: 79:49:fd:4e:9d:aa:33:8c:08:41:0a:ba:75:91:13: 2c:0e:fb:d0:86:7c:56:7c:5e:1d:e3:2f:91:fc:6c: a8:09:b6:57:8c:5f:aa:88:ac:1d:0b:18:48:84:65: 5d:cb:ac:43:75:19:a0:05:3c:52:95:54:e4:c2:c0: a6:75:f8:1e:5a:05:95:de:2b:85:77:26:d1:53:c9: bd:9e:48:3a:1e:85:9b:a6:77:f3:5b:62:5d:71:6b: 57:07:32:7f:f9:c5:e3:0e:f7:eb:6a:2b:5d:d0:31: 01:ce:37:9f:b2:6d:46:46:76:51:2a:9b:06:56:49: 56:fa:6f:37:d6:07:51:4e:01:d8:0d:38:49:ca:b2: 9c:f2:3a:1b:65:d6:d4:a1:62:5d:ae:44:ac:10:5a: 5f:07:81:45:e0:d7:b1:01:eb:94:85:4e:bf:75:34: 97:bf:a7:df:a9:d0:be:d4:15:ce:a8:0d:15:85:53: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.143.0/24 IPv6: 2a14:7480::/29 Signature Algorithm: sha256WithRSAEncryption 92:1a:6a:f5:3f:b8:85:37:4b:15:c6:a5:1a:7c:46:95:44:7c: 7a:fc:e1:0c:b5:eb:92:f5:f8:d9:06:f3:5b:dd:1b:f0:e9:5a: 25:f7:b2:06:c6:b1:b9:37:41:81:31:a6:5b:6c:a0:51:b5:c3: 35:0d:b2:a5:ac:cc:63:bd:a7:c5:41:e0:cd:81:c7:e5:bc:18: 16:3f:9f:a0:95:46:a6:50:ac:ff:0b:59:22:03:a9:88:9d:14: a7:84:86:8d:33:92:fb:45:28:60:25:2d:02:87:72:82:08:04: 7f:65:84:c2:a5:11:6b:db:74:52:5b:e7:a0:e4:e1:c3:dd:d6: 84:32:d9:53:55:e4:22:ed:02:29:6e:03:36:64:d3:94:19:de: 4a:6b:e1:30:4f:22:f9:42:89:9f:36:ee:ce:eb:f6:34:aa:3b: 7f:4d:32:6d:58:e3:03:6e:a7:30:db:8b:b5:a3:b4:a6:f2:27: 84:62:1f:34:67:83:be:77:c6:63:c6:01:90:61:25:51:b5:02: c5:bb:dc:38:da:7b:f0:1c:b3:4f:12:c2:07:a5:d8:99:85:a3: 51:cc:19:56:be:16:b6:a3:68:d2:80:01:11:b9:02:69:c2:c0: f0:89:ea:68:62:49:86:2b:3d:70:09:9b:de:15:95:0b:28:29: 0f:b6:c9:bb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yNi2huPLYHzONnRgy8RDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk0Mzk1YWM4MjJkZmUwMTE2NTIxNmM3NzgxZmZkNjFkYjI4ZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPghajJymvhe6aD003K5BajUSO5A bnBh34jwQDDISNY72NadthqdrETBgKhyMr4LbJKSOIsUaCJrBbgMLwzLDitj9nH7 upvQ5SR5Sf1OnaozjAhBCrp1kRMsDvvQhnxWfF4d4y+R/GyoCbZXjF+qiKwdCxhI hGVdy6xDdRmgBTxSlVTkwsCmdfgeWgWV3iuFdybRU8m9nkg6HoWbpnfzW2JdcWtX BzJ/+cXjDvfraitd0DEBzjefsm1GRnZRKpsGVklW+m831gdRTgHYDThJyrKc8job ZdbUoWJdrkSsEFpfB4FF4NexAeuUhU6/dTSXv6ffqdC+1BXOqA0VhVPTywIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIeUOVrIIt/gEWUhbHeB/9Ydso1bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2EyYTNh NC1hYjc1LTQ5ZDQtYTk0MS0zNTNmOTgxMmIxZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYTJhM2E0 LWFiNzUtNDlkNC1hOTQxLTM1M2Y5ODEyYjFkYi8xL2g1UTVXc2dpMy1BUlpTRnNk NEhfMWgyeWpWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuS6PMA0EAgACMAcDBQMqFHSAMA0GCSqGSIb3 DQEBCwUAA4IBAQCSGmr1P7iFN0sVxqUafEaVRHx6/OEMteuS9fjZBvNb3Rvw6Vol 97IGxrG5N0GBMaZbbKBRtcM1DbKlrMxjvafFQeDNgcflvBgWP5+glUamUKz/C1ki A6mInRSnhIaNM5L7RShgJS0Ch3KCCAR/ZYTCpRFr23RSW+eg5OHD3daEMtlTVeQi 7QIpbgM2ZNOUGd5Ka+EwTyL5QomfNu7O6/Y0qjt/TTJtWOMDbqcw24u1o7Sm8ieE Yh80Z4O+d8ZjxgGQYSVRtQLFu9w42nvwHLNPEsIHpdiZhaNRzBlWvha2o2jSgAER uQJpwsDwiepoYkmGKz1wCZveFZULKCkPtsm7 -----END CERTIFICATE-----Generated at Mon Jan 26 13:30:29 2026 by rpki-client