This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer File: 5318qB7lnVNFA7L3tj22K11ExW4.cer (raw, json) Hash identifier: 7lqrdV9bHgOb0pXizXf1efv+ZD6sIVRB6QNagLXJ8cQ= Subject key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB8DF8196D05DD44C9F83C8561DE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6769 IP: 45.146.192.0/23 IP: 89.207.148.0/22 IP: 91.199.55.0/24 IP: 176.117.61.0/24 IP: 185.127.0.0/22 IP: 193.219.10.0 -- 193.219.14.255 IP: 195.182.64.0/19 IP: 2a00:4c20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b8:df:81:96:d0:5d:d4:4c:9f:83:c8:56:1d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:bb:d6:ec:bd:12:03:5e:f9:c0:97:88:d3: a4:4f:41:ce:68:94:51:ee:9f:3e:4c:8f:94:2f:5a: 6a:44:ba:3c:ac:0c:b9:7a:74:aa:6b:bd:a7:61:76: 94:ad:67:d3:e2:36:9f:aa:c9:21:0b:21:c9:a5:03: 6c:ac:e2:b6:a9:ee:24:92:ca:ed:e7:03:ad:1f:ab: 6d:a0:0e:11:73:ca:5f:97:86:b5:f2:be:e0:de:57: d1:0b:56:63:40:ac:86:c2:7a:c5:6d:49:72:69:86: ab:a2:3e:93:f5:e1:58:cc:2f:ef:29:04:bb:b5:7c: 34:47:47:cc:aa:0f:ee:fa:30:2e:f1:1a:42:35:45: bf:5d:9b:db:f6:ad:19:6b:3a:b6:34:62:d3:dc:a8: b6:a1:1c:a5:3a:59:6c:ad:ed:39:c4:b4:26:a8:eb: 3d:e4:71:d3:b0:c3:d9:b5:8a:71:37:19:12:06:35: 77:7f:e8:b4:92:dc:5d:a2:ee:df:7e:46:fd:90:9c: ee:b0:83:50:a6:34:6e:99:3c:84:62:a3:f3:0d:7a: 94:a3:e5:eb:ed:d3:23:06:9e:cc:af:88:46:00:32: 72:0f:34:fd:b4:09:f9:96:65:22:ce:43:c5:c8:13: 53:34:13:10:18:89:c7:58:b0:04:47:c6:32:5e:40: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.192.0/23 89.207.148.0/22 91.199.55.0/24 176.117.61.0/24 185.127.0.0/22 193.219.10.0-193.219.14.255 195.182.64.0/19 IPv6: 2a00:4c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6769 Signature Algorithm: sha256WithRSAEncryption 7b:2d:8a:87:76:be:95:f4:7c:e4:c1:3a:d4:a2:98:68:f7:7e: 81:4d:7c:a8:38:43:de:0d:b6:f9:68:33:9d:5e:90:0b:41:80: b0:df:30:81:4f:f6:c3:03:ac:1f:86:ee:32:ab:64:7e:55:a2: 3b:eb:b4:5a:5e:16:3e:26:e4:cc:f1:50:70:39:1a:f6:a5:2d: 49:e4:e6:a1:3b:a4:64:e9:1e:26:50:35:94:5c:78:bf:89:ce: ce:64:00:c9:b7:d1:17:92:78:3c:df:33:a9:0b:c3:21:47:74: 34:f6:92:c3:fe:cd:95:0a:46:ee:71:e3:6a:26:21:4e:75:4c: 00:af:d2:03:c1:ff:95:30:f8:4f:45:17:c9:f8:a3:98:1f:dc: e1:b2:f9:d8:67:f6:4d:d3:a5:db:39:fc:0a:5b:9b:16:f1:45: db:df:0d:d5:d7:5e:10:2c:9b:2c:d0:68:f6:d1:ff:1e:53:d6: 42:9b:81:92:3c:69:7d:6e:f0:ef:5e:9a:8c:8b:a8:b6:55:db: 47:94:3c:92:9a:39:d7:a0:3a:06:4f:55:f1:f1:1a:fe:73:a4: 0e:f8:6e:19:c9:5d:38:62:88:f7:0b:aa:ef:db:10:a1:1f:02: 95:32:d8:fc:4e:ed:aa:5a:a3:2c:46:0f:4c:97:52:a0:46:47: 67:db:b3:5d -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt57LjfgZbQXdRMn4PIVh3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzdkN2NhODFlZTU5ZDUzNDUwM2IyZjdiNjNkYjYyYjVkNDRjNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+271uy9EgNe+cCXiNOkT0HOaJRR 7p8+TI+UL1pqRLo8rAy5enSqa72nYXaUrWfT4jafqskhCyHJpQNsrOK2qe4kksrt 5wOtH6ttoA4Rc8pfl4a18r7g3lfRC1ZjQKyGwnrFbUlyaYaroj6T9eFYzC/vKQS7 tXw0R0fMqg/u+jAu8RpCNUW/XZvb9q0Zazq2NGLT3Ki2oRylOllsre05xLQmqOs9 5HHTsMPZtYpxNxkSBjV3f+i0ktxdou7ffkb9kJzusINQpjRumTyEYqPzDXqUo+Xr 7dMjBp7Mr4hGADJyDzT9tAn5lmUizkPFyBNTNBMQGInHWLAER8YyXkCICQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFOd9fKge5Z1TRQOy97Y9titdRMVuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzMwZjZj Zi1lZjliLTQ5M2EtODM5NC01YzIwMGM2ZTdkMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvMzBmNmNm LWVmOWItNDkzYS04Mzk0LTVjMjAwYzZlN2QzNC8xLzUzMThxQjdsblZORkE3TDN0 ajIySzExRXhXNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA4BAIAATAyAwQBLZLAAwQCWc+UAwQAW8c3AwQAsHU9AwQCuX8A MAwDBAHB2woDBADB2w4DBAXDtkAwDQQCAAIwBwMFACoATCAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICGnEwDQYJKoZIhvcNAQELBQADggEBAHstiod2vpX0fOTBOtSi mGj3foFNfKg4Q94NtvloM51ekAtBgLDfMIFP9sMDrB+G7jKrZH5VojvrtFpeFj4m 5MzxUHA5GvalLUnk5qE7pGTpHiZQNZRceL+Jzs5kAMm30ReSeDzfM6kLwyFHdDT2 ksP+zZUKRu5x42omIU51TACv0gPB/5Uw+E9FF8n4o5gf3OGy+dhn9k3Tpds5/Apb mxbxRdvfDdXXXhAsmyzQaPbR/x5T1kKbgZI8aX1u8O9emoyLqLZV20eUPJKaOdeg OgZPVfHxGv5zpA74bhnJXThiiPcLqu/bEKEfApUy2PxO7apaoyxGD0yXUqBGR2fb s10= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:30 2026 by rpki-client