This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer File: 0q5eM4eU5g1di1I72yto7ErHYs4.cer (raw, json) Hash identifier: fdOPoSLXgSodG9/bcqi3ZgTIhuhJyokPxvmaalX+M+Y= Subject key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134496B78ED885BD9D1FB05A682253 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35499 IP: 45.66.124.0/22 IP: 2a09:68c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:44:96:b7:8e:d8:85:bd:9d:1f:b0:5a:68:22:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:1b:c6:14:ce:1c:c8:18:da:8c:7c:27:5a: fd:61:9f:31:b3:24:dd:44:96:42:d2:aa:fc:b3:15: 2f:d1:d4:cc:7c:e4:01:9c:e1:30:f0:b3:52:a4:7d: ad:6b:bf:f1:00:c4:d0:e5:f8:a7:2f:1b:29:ff:46: 6e:45:a6:3c:88:a9:da:75:18:91:91:a1:4e:38:7a: 53:9a:30:eb:46:0c:cb:e0:f3:4e:0c:71:df:c9:27: 58:ac:7f:e1:0a:1a:ab:e4:d5:02:b5:c9:28:b8:11: b6:3d:a0:ce:99:24:e0:68:fa:5e:62:84:fd:14:62: 1e:5e:b2:17:01:dd:7d:38:bc:a2:7a:60:c5:72:12: 26:d9:91:ce:41:46:f8:93:d8:ea:c2:b2:17:42:42: fe:91:ec:b3:e2:c6:47:20:87:35:37:9e:2e:6d:4b: b2:a5:3a:f0:7c:a1:b4:3f:ca:f8:fd:a4:40:09:3f: da:34:6b:4e:c0:8f:66:f2:19:10:51:17:18:a9:a9: aa:e9:20:c3:d4:f5:a4:37:d9:81:4c:36:05:bd:9e: 00:18:6c:9e:67:cd:f3:34:d7:89:9c:5d:ff:0c:c2: 70:0e:d8:38:83:61:45:ce:77:91:33:8d:a8:c6:1a: fc:33:16:7e:92:db:d9:97:7f:04:86:8c:e0:10:de: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.124.0/22 IPv6: 2a09:68c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35499 Signature Algorithm: sha256WithRSAEncryption 12:ac:79:9a:24:7e:87:9a:21:b4:3a:d7:eb:dd:ee:5d:c7:56: ed:50:91:95:d2:85:4c:ce:dc:ed:01:41:aa:d0:0a:09:18:f1: 0c:fc:de:f8:62:10:3e:ae:38:d8:19:a9:e2:1a:29:3b:b2:2d: 86:d9:64:a9:02:00:a4:cf:85:8a:61:0d:00:e5:8d:a8:3e:1a: 46:e8:db:fa:3d:7c:3c:5d:bf:5e:c2:7e:b2:70:e3:31:f4:0a: c2:dc:ac:ef:2e:b6:79:6a:30:ec:55:1c:50:77:ec:81:9b:2c: 88:c9:21:3c:7f:e4:3c:e6:f9:8e:93:a4:81:d2:45:ae:8c:e4: f6:45:04:89:d0:73:b9:a1:3a:b6:69:86:2e:57:f8:8e:79:b6: 0b:72:e0:a7:90:bf:55:25:04:c1:fe:a4:16:3a:4a:2d:0f:90: dc:10:f2:4b:34:a0:a1:72:8f:93:e8:30:2f:fb:02:07:a6:d0: 44:95:cb:18:01:53:12:65:a3:96:45:16:44:a2:fa:67:e4:26: 87:65:01:b9:a4:b7:02:45:a9:81:d8:75:97:f9:37:3d:38:08: 85:ec:4f:18:f0:17:13:26:35:ed:12:a4:e1:fc:2e:3f:4e:a7: 3e:76:a1:41:90:90:1d:95:8b:29:21:6c:55:ce:2a:8a:b2:9c: 0a:01:a1:37 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8E0SWt47Yhb2dH7BaaCJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmFlNWUzMzg3OTRlNjBkNWQ4YjUyM2JkYjJiNjhlYzRhYzc2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYsbxhTOHMgY2ox8J1r9YZ8xsyTd RJZC0qr8sxUv0dTMfOQBnOEw8LNSpH2ta7/xAMTQ5finLxsp/0ZuRaY8iKnadRiR kaFOOHpTmjDrRgzL4PNODHHfySdYrH/hChqr5NUCtckouBG2PaDOmSTgaPpeYoT9 FGIeXrIXAd19OLyiemDFchIm2ZHOQUb4k9jqwrIXQkL+keyz4sZHIIc1N54ubUuy pTrwfKG0P8r4/aRACT/aNGtOwI9m8hkQURcYqamq6SDD1PWkN9mBTDYFvZ4AGGye Z83zNNeJnF3/DMJwDtg4g2FFzneRM42oxhr8MxZ+ktvZl38EhozgEN493wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNKuXjOHlOYNXYtSO9sraOxKx2LOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2Q1ZGYw My1iNWVlLTRiZjctYWVkZi04ZDhlOWVhMTQzMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvZDVkZjAz LWI1ZWUtNGJmNy1hZWRmLThkOGU5ZWExNDMyNS8xLzBxNWVNNGVVNWcxZGkxSTcy eXRvN0VySFlzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUJ8MA0EAgACMAcDBQMqCWjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCKqzANBgkqhkiG9w0BAQsFAAOCAQEAEqx5miR+h5oh tDrX693uXcdW7VCRldKFTM7c7QFBqtAKCRjxDPze+GIQPq442Bmp4hopO7Ithtlk qQIApM+FimENAOWNqD4aRujb+j18PF2/XsJ+snDjMfQKwtys7y62eWow7FUcUHfs gZssiMkhPH/kPOb5jpOkgdJFrozk9kUEidBzuaE6tmmGLlf4jnm2C3Lgp5C/VSUE wf6kFjpKLQ+Q3BDySzSgoXKPk+gwL/sCB6bQRJXLGAFTEmWjlkUWRKL6Z+Qmh2UB uaS3AkWpgdh1l/k3PTgIhexPGPAXEyY17RKk4fwuP06nPnahQZCQHZWLKSFsVc4q irKcCgGhNw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:15 2026 by rpki-client