This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer File: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer (raw, json) Hash identifier: 3BibXum2IJ0O3AWK30bpZkNGJxOuase11usSESxE0kc= Subject key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA5A4D0AC4632E379392A69F0883CDA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:49:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.113.247.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:5a:4d:0a:c4:63:2e:37:93:92:a6:9f:08:83:cd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:49:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:25:15:75:28:57:73:8a:3e:84:0a:46:af: 5f:90:b1:7d:aa:98:3f:08:51:28:16:64:38:54:46: a6:5c:66:54:2a:66:9e:ce:e4:f0:d8:29:de:38:33: 4b:2b:35:1f:26:9e:83:32:d8:7e:a7:d8:5c:f2:13: b1:01:18:70:49:99:d3:5f:ab:6f:9a:a4:dc:b1:ac: 5e:89:0b:ac:79:75:51:53:b1:31:ca:59:c7:c5:9e: db:de:cf:03:cd:e5:82:dd:dd:2b:c4:b0:63:14:d0: 13:b3:d0:95:f0:33:07:f8:ec:30:7d:a9:25:b4:88: db:61:21:90:a2:bf:15:b1:95:cc:dd:df:6e:0b:b8: 0a:f5:b3:e5:fd:e8:db:78:4b:d6:d9:0e:20:2b:cb: 9a:48:b6:5e:b5:26:ca:5f:64:ba:9d:64:dc:a9:18: 37:5f:7b:39:67:85:44:f8:7a:97:0b:c6:60:5b:53: f2:5b:6b:d9:b1:01:0a:a0:ee:1e:7a:26:1c:d9:5e: 6b:23:33:96:2a:bc:b7:b4:63:9b:e7:10:50:b0:17: 28:a0:6a:b8:85:5f:5b:07:70:20:3a:c7:c0:11:cc: 32:6f:df:3a:b5:0a:a3:52:54:87:db:9f:30:ec:39: be:8d:f2:61:da:2f:6c:04:c0:68:5d:50:e3:7a:5d: 84:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.247.0/24 Signature Algorithm: sha256WithRSAEncryption 12:06:cb:f8:68:cd:77:5a:35:17:94:d8:1f:20:e9:f6:8c:b3: fe:de:5d:f7:03:ae:b8:56:be:db:6e:fa:c2:cc:7b:06:9b:e4: d7:9e:5c:4f:68:0b:92:8d:46:2f:16:e0:f6:67:8d:69:9c:4f: b2:d5:5c:71:48:4e:da:62:e4:df:75:6b:33:6f:9d:2a:1b:28: c7:eb:a0:77:ee:86:49:29:bf:7d:da:1a:74:6c:ae:33:d2:65: 7f:b6:56:7b:e9:b2:b1:cb:d4:d5:ce:c5:eb:bd:69:c6:58:d2: 29:a2:00:5b:1e:4d:53:35:13:27:84:8d:42:e3:ec:a4:6a:82: 69:65:4d:06:cc:58:f8:66:21:21:01:c7:30:2b:61:d4:bf:16: 7f:79:b5:95:d1:70:ab:11:a6:f3:86:db:ad:ae:53:87:8b:6a: 22:ee:d2:d2:0a:c8:b7:0d:de:f6:98:64:07:a2:b5:29:98:0e: 96:44:cd:5d:59:2e:d8:3c:3b:e1:1d:b7:22:a0:3b:cc:7e:ba: 47:58:4a:77:d3:8f:be:9b:89:e4:af:3e:63:a3:e5:f3:10:82: ff:ff:01:f0:a1:ef:bc:73:bb:99:ba:50:2f:d9:40:2f:7d:b7: 3a:7c:3f:69:58:5d:15:6f:cd:03:67:93:25:92:9e:70:cc:c0: 4d:e0:9c:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6Wk0KxGMuN5OSpp8Ig82lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTI0OTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjlhOTU4ZTNjMjA0YTZkNGU1NTM2ZWM0Mzc2NWQwNGQxYjBjOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj24lFXUoV3OKPoQKRq9fkLF9qpg/ CFEoFmQ4VEamXGZUKmaezuTw2CneODNLKzUfJp6DMth+p9hc8hOxARhwSZnTX6tv mqTcsaxeiQuseXVRU7ExylnHxZ7b3s8DzeWC3d0rxLBjFNATs9CV8DMH+Owwfakl tIjbYSGQor8VsZXM3d9uC7gK9bPl/ejbeEvW2Q4gK8uaSLZetSbKX2S6nWTcqRg3 X3s5Z4VE+HqXC8ZgW1PyW2vZsQEKoO4eeiYc2V5rIzOWKry3tGOb5xBQsBcooGq4 hV9bB3AgOsfAEcwyb986tQqjUlSH258w7Dm+jfJh2i9sBMBoXVDjel2ESwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ+alY48IEptTlU27EN2XQTRsMlqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1Lzc2MmU3 NS00ODIxLTQ2NmUtYTk0ZS03NjliZGQxNzJhMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNzYyZTc1 LTQ4MjEtNDY2ZS1hOTRlLTc2OWJkZDE3MmEyYi8xL241cVZqandnU20xT1ZUYnNR M1pkQk5Hd3lXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwnH3MA0GCSqGSIb3DQEBCwUAA4IBAQASBsv4 aM13WjUXlNgfIOn2jLP+3l33A664Vr7bbvrCzHsGm+TXnlxPaAuSjUYvFuD2Z41p nE+y1VxxSE7aYuTfdWszb50qGyjH66B37oZJKb992hp0bK4z0mV/tlZ76bKxy9TV zsXrvWnGWNIpogBbHk1TNRMnhI1C4+ykaoJpZU0GzFj4ZiEhAccwK2HUvxZ/ebWV 0XCrEabzhtutrlOHi2oi7tLSCsi3Dd72mGQHorUpmA6WRM1dWS7YPDvhHbcioDvM frpHWEp304++m4nkrz5jo+XzEIL//wHwoe+8c7uZulAv2UAvfbc6fD9pWF0Vb80D Z5Mlkp5wzMBN4Jzm -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:10 2026 by rpki-client