This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer (raw, json) Hash identifier: LLD+z9+09Trz4+EiSFv9toB92fb835uumXkTQr9+rhM= Subject key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6A153A79A8BF3548E104022E17AA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204983 IP: 185.233.172.0/22 IP: 2a0c:eb00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a1:53:a7:9a:8b:f3:54:8e:10:40:22:e1:7a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d26e4538f1ddea77f57396bb93b907f152df697c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:b3:48:9f:aa:65:2b:89:fb:19:0b:48:4b: a2:b4:2e:a8:4b:55:b6:49:27:d4:16:74:a4:68:ed: a3:d7:84:20:77:33:06:ea:59:2b:ec:e8:1b:b8:bb: 74:ba:7e:85:70:e0:eb:85:db:bf:98:6d:94:15:7f: 76:4a:e2:2c:19:f8:9e:3c:6a:76:db:2f:16:9f:52: c6:dd:bd:f1:7f:3e:2c:da:c0:1d:57:cf:e0:6c:2b: 28:46:a9:eb:55:87:fd:cd:05:1b:1e:0f:4f:75:db: d6:dd:c8:ac:c4:eb:f4:51:13:02:43:b1:70:63:95: 1d:30:1b:e0:35:a6:96:13:15:4f:ff:e8:f8:6c:eb: 74:10:57:5a:fd:c7:2a:83:5e:58:be:00:6b:e0:95: 86:89:a8:71:80:b5:cf:4e:11:46:b7:f4:93:42:24: 4a:8a:f1:4c:5e:30:2f:27:77:02:37:eb:0f:53:f8: 0b:b8:5b:40:d4:1d:75:cf:f3:83:f6:f8:64:72:42: 82:a3:b1:05:49:99:ef:9d:64:be:25:26:ed:9f:b4: e0:b3:99:04:f5:ca:aa:2a:67:25:13:05:9b:5f:92: 9f:d8:53:bb:65:ca:25:e8:b5:46:82:d5:3b:c8:ea: 5a:51:d8:55:e7:4b:3d:8c:b6:c7:ca:03:b0:29:f9: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.172.0/22 IPv6: 2a0c:eb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204983 Signature Algorithm: sha256WithRSAEncryption 20:47:76:f7:d7:68:85:05:1a:4f:46:c6:b8:a5:f3:cb:d8:6c: 3c:ae:69:90:6a:75:e3:8b:22:fa:e1:92:e5:1b:10:c7:e1:ca: 63:3a:8c:a6:e7:16:95:e7:d0:b2:05:aa:b3:0c:f1:83:60:65: d2:50:8d:55:aa:6c:cf:cf:dd:45:2b:05:b4:46:1b:c5:77:e5: 05:af:34:c7:f1:bb:83:88:b3:20:38:69:79:f7:cc:56:8d:97: b3:f7:3e:0f:36:ff:1c:5d:4a:fc:12:ea:c9:02:86:24:4a:19: 86:66:1b:16:75:dc:b0:fb:47:23:95:bb:c6:42:d1:40:5b:c0: 9b:c3:a9:b0:d3:38:10:60:ea:f2:89:23:64:5e:f4:c7:5e:91: cf:ce:01:78:e3:78:44:26:58:df:6e:e0:fa:79:eb:c0:e2:d1: 47:e8:bf:55:b2:47:2d:96:c9:d3:5d:12:7a:e2:ca:99:52:be: 96:55:53:cd:4f:f8:ae:2a:20:af:b5:7b:26:e7:eb:ed:15:41: 7f:4a:9a:59:90:be:e4:da:e2:e5:d5:0f:18:2d:0e:99:46:7c: 6b:4e:fe:e0:c6:e7:d4:87:d8:a3:f6:cf:0a:c1:48:24:31:73: a0:82:3d:8f:8f:6d:24:b5:a9:8b:98:cf:b2:e2:04:a2:c2:7a: ff:82:84:e1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pqFTp5qL81SOEEAi4XqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjZlNDUzOGYxZGRlYTc3ZjU3Mzk2YmI5M2I5MDdmMTUyZGY2OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj6zSJ+qZSuJ+xkLSEuitC6oS1W2 SSfUFnSkaO2j14QgdzMG6lkr7OgbuLt0un6FcODrhdu/mG2UFX92SuIsGfiePGp2 2y8Wn1LG3b3xfz4s2sAdV8/gbCsoRqnrVYf9zQUbHg9PddvW3cisxOv0URMCQ7Fw Y5UdMBvgNaaWExVP/+j4bOt0EFda/ccqg15YvgBr4JWGiahxgLXPThFGt/STQiRK ivFMXjAvJ3cCN+sPU/gLuFtA1B11z/OD9vhkckKCo7EFSZnvnWS+JSbtn7Tgs5kE 9cqqKmclEwWbX5Kf2FO7Zcol6LVGgtU7yOpaUdhV50s9jLbHygOwKfl9wwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNJuRTjx3ep39XOWu5O5B/FS32l8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzY0NjY2 ZS1hZjFiLTQxMTgtODIzZC01ZGU5OWE1MmFhMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNjQ2NjZl LWFmMWItNDExOC04MjNkLTVkZTk5YTUyYWEzOS8xLzBtNUZPUEhkNm5mMWM1YTdr N2tIOFZMZmFYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuemsMA0EAgACMAcDBQAqDOsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgtzANBgkqhkiG9w0BAQsFAAOCAQEAIEd299dohQUa T0bGuKXzy9hsPK5pkGp144si+uGS5RsQx+HKYzqMpucWlefQsgWqswzxg2Bl0lCN Vapsz8/dRSsFtEYbxXflBa80x/G7g4izIDhpeffMVo2Xs/c+Dzb/HF1K/BLqyQKG JEoZhmYbFnXcsPtHI5W7xkLRQFvAm8OpsNM4EGDq8okjZF70x16Rz84BeON4RCZY 327g+nnrwOLRR+i/VbJHLZbJ010SeuLKmVK+llVTzU/4riogr7V7Jufr7RVBf0qa WZC+5Nri5dUPGC0OmUZ8a07+4Mbn1IfYo/bPCsFIJDFzoII9j49tJLWpi5jPsuIE osJ6/4KE4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:52 2026 by rpki-client