This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer (raw, json) Hash identifier: ookJgcLiK+Isd0BlVctsQ0Dz04U47jD83qXcU6juSlc= Subject key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35ACFDE07EC8445B5D200F8726D7C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34343 AS: 50684 IP: 81.171.32.0 -- 81.171.127.255 IP: 185.90.196.0/22 IP: 193.108.27.0/24 IP: 2001:4de0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ac:fd:e0:7e:c8:44:5b:5d:20:0f:87:26:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a79bba2805a988954e4fec42570530f16f9e7093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:da:0d:ab:83:0c:57:82:da:9f:10:09:2a: aa:ed:7a:2a:d4:b5:50:00:37:1e:1d:fa:2d:dc:90: d0:2e:ee:17:06:6e:15:9e:f6:53:3b:1d:19:20:00: 9e:78:bc:0b:ef:03:85:01:81:68:de:f9:3a:b9:c9: 93:b2:da:eb:26:4c:21:b6:42:e8:99:54:1a:82:7b: c8:41:c3:3a:d6:48:69:ec:de:ff:0e:de:0c:01:29: e0:e6:37:78:45:65:70:38:02:fd:56:5d:b3:0d:8a: 1e:7a:27:87:9b:16:e6:e8:58:1e:8e:34:ef:48:b8: 4b:bb:48:90:c3:af:83:70:a3:83:5d:ef:ea:8d:66: 33:0a:eb:a3:2d:8c:61:3d:f6:46:9a:1e:89:ed:ca: 94:80:26:bd:4f:4b:49:1f:b9:1c:f0:73:3e:bb:ed: c1:cd:ca:4a:f2:ca:5e:d3:74:10:e6:cf:27:25:d6: 3e:fd:48:9f:0a:5a:c7:2a:10:0c:55:f9:9a:fa:56: 6c:0c:86:6b:72:5f:50:c9:c6:75:e4:7d:1b:03:c5: cf:b2:aa:8d:83:aa:81:7b:63:b1:05:1f:fc:f0:4b: 22:87:20:33:61:4d:51:16:85:3a:0e:fa:85:9b:21: d6:83:4e:6f:8c:a5:d7:62:e3:89:d2:35:01:05:da: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.171.32.0-81.171.127.255 185.90.196.0/22 193.108.27.0/24 IPv6: 2001:4de0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34343 50684 Signature Algorithm: sha256WithRSAEncryption b0:76:a9:64:ee:e6:83:e0:d8:c5:28:99:8c:91:65:eb:95:52: ee:5a:e8:50:cf:4d:f0:d0:08:83:9c:34:a9:8f:85:a1:89:8f: c8:a3:18:c6:69:ec:ac:d7:1b:30:8b:e6:84:fd:95:c3:3b:68: 14:6d:d6:16:eb:00:4b:4e:bd:91:6f:d7:37:5a:d7:94:b2:44: f3:59:26:27:be:2c:4d:b8:32:f5:bf:da:01:4e:55:bc:f0:18: 23:f1:f8:13:c4:70:5d:2f:a2:28:b0:fb:01:38:d7:9a:34:cd: a1:65:c4:71:e6:c9:8d:1c:ed:87:e3:24:6c:73:19:93:df:01: 9c:4e:54:2c:32:5a:ed:56:d7:af:07:c0:5b:a0:05:18:a9:38: 0f:3c:03:c6:30:a7:1e:df:1c:60:66:5e:7c:65:36:01:32:6d: fb:64:4b:3c:f7:5d:63:45:aa:ad:d3:bc:fc:a6:a1:c7:e1:7c: 60:99:e8:e1:a0:d6:71:84:a6:bf:9c:c9:55:27:37:75:7d:15: 91:67:87:3e:75:9f:7c:58:9d:45:b6:ae:7f:71:7b:e8:34:11: 64:91:b9:34:83:9c:ce:ea:03:c2:2b:30:b4:6f:d5:63:97:18: 04:7c:f0:e0:f6:22:24:24:c9:86:86:9f:c4:61:d1:0f:fe:55: 16:94:71:60 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt7Naz94H7IRFtdIA+HJtfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzliYmEyODA1YTk4ODk1NGU0ZmVjNDI1NzA1MzBmMTZmOWU3MDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yraDauDDFeC2p8QCSqq7Xoq1LVQ ADceHfot3JDQLu4XBm4VnvZTOx0ZIACeeLwL7wOFAYFo3vk6ucmTstrrJkwhtkLo mVQagnvIQcM61khp7N7/Dt4MASng5jd4RWVwOAL9Vl2zDYoeeieHmxbm6FgejjTv SLhLu0iQw6+DcKODXe/qjWYzCuujLYxhPfZGmh6J7cqUgCa9T0tJH7kc8HM+u+3B zcpK8spe03QQ5s8nJdY+/UifClrHKhAMVfma+lZsDIZrcl9QycZ15H0bA8XPsqqN g6qBe2OxBR/88EsihyAzYU1RFoU6DvqFmyHWg05vjKXXYuOJ0jUBBdqP+wIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFKebuigFqYiVTk/sQlcFMPFvnnCTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2QxNDBm Yi0wM2FlLTQ1ZDktOGRkYy1lMWVkOWRkMmEwMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvZDE0MGZi LTAzYWUtNDVkOS04ZGRjLWUxZWQ5ZGQyYTAyYS8xL3A1dTZLQVdwaUpWT1QteENW d1V3OFctZWNKTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaMAwDBAVRqyADBAdRqwADBAK5WsQDBADBbBswDQQC AAIwBwMFACABTeAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIYnAgMAxfwwDQYJ KoZIhvcNAQELBQADggEBALB2qWTu5oPg2MUomYyRZeuVUu5a6FDPTfDQCIOcNKmP haGJj8ijGMZp7KzXGzCL5oT9lcM7aBRt1hbrAEtOvZFv1zda15SyRPNZJie+LE24 MvW/2gFOVbzwGCPx+BPEcF0voiiw+wE415o0zaFlxHHmyY0c7YfjJGxzGZPfAZxO VCwyWu1W168HwFugBRipOA88A8Ywpx7fHGBmXnxlNgEybftkSzz3XWNFqq3TvPym ocfhfGCZ6OGg1nGEpr+cyVUnN3V9FZFnhz51n3xYnUW2rn9xe+g0EWSRuTSDnM7q A8IrMLRv1WOXGAR88OD2IiQkyYaGn8Rh0Q/+VRaUcWA= -----END CERTIFICATE-----Generated at Mon Jan 12 02:13:07 2026 by rpki-client