This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.cer (raw, json) Hash identifier: /qTNNBnYMkLrLSCfIoCwK/Pl3HvyMtEGBeZsOwUSX6M= Subject key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBBF3DF076D7465629B1F50C9B2C9BE0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 10:01:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206246 IP: 185.225.26.0/24 IP: 192.189.157.0/24 IP: 2a05:4640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:f3:df:07:6d:74:65:62:9b:1f:50:c9:b2:c9:be:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 10:01:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e40b16d369ad27ced85499465328f095b155f431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:ef:7a:ae:82:ad:9f:cc:32:80:7f:10:4c: dc:1b:8e:8c:ee:b6:1c:4f:03:5d:17:fa:20:36:dd: 9b:2b:36:1a:e0:6b:ac:32:5b:a1:48:5a:9a:d3:67: 24:b7:cd:36:53:71:4b:90:09:dc:c5:cc:2d:1f:3d: 02:8b:15:6e:c3:43:d1:55:e1:c0:72:98:f6:bd:62: 57:4e:44:58:65:19:a2:2b:72:4d:07:8c:e9:b5:87: e4:70:ce:6a:27:76:1e:b3:35:b1:02:24:cd:71:82: 23:7e:86:62:55:7e:42:f8:09:0a:33:5d:9e:f2:c4: fb:f9:59:03:07:ea:c7:11:42:39:c2:40:c9:6f:4f: 59:5a:e6:c6:82:a4:13:e1:92:c8:32:e8:ec:1d:74: ae:f4:a5:0a:b2:5c:11:23:9e:ef:98:d8:ad:f7:57: 0b:55:a6:6c:b9:a7:1e:cd:0b:39:96:6a:48:23:cb: f8:df:ef:92:45:19:8e:bd:61:89:c2:92:38:85:91: a9:e9:71:37:44:ec:cf:64:8f:73:51:92:8d:9d:a5: b2:fc:cb:a1:cb:d7:b9:18:30:64:3d:1a:0e:57:a7: 75:75:c0:b0:11:d8:ce:81:e8:e2:2b:05:d9:9d:83: 09:30:46:83:fb:17:7b:83:89:51:cf:eb:99:2e:6d: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.26.0/24 192.189.157.0/24 IPv6: 2a05:4640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206246 Signature Algorithm: sha256WithRSAEncryption 01:70:d5:67:f2:d6:99:ae:c5:4b:a1:fa:f4:2b:65:0a:a1:06: 21:4f:50:ed:0a:71:a6:c0:9b:79:13:68:5b:57:08:d2:72:68: d1:a8:a9:04:de:00:82:27:3b:8e:0c:e0:f4:6c:18:d0:b2:e6: 80:4b:8e:fe:8f:9a:3e:e4:9c:b6:14:67:71:bf:87:a4:89:bf: 01:17:1e:1d:24:79:f3:99:8e:d9:6a:7b:8f:17:35:3c:fb:1c: 1b:3f:4f:55:7e:c5:42:de:19:e6:7d:aa:6e:44:ac:c2:e3:42: cf:4e:3b:b7:46:15:02:15:c8:85:c0:5b:18:9b:72:91:73:41: 25:2a:d8:55:80:ad:f7:f6:ce:f8:f6:41:4e:6f:ba:0f:98:a6: ee:39:aa:cd:2a:28:67:6f:5a:69:21:97:78:2e:84:25:78:04: 65:b1:db:c7:40:35:4f:5a:b1:cb:06:24:55:ca:b9:12:ba:ee: 35:cf:23:d2:12:16:8e:5c:a0:30:be:63:06:0e:63:36:f0:bd: ad:5a:16:c8:11:3f:7e:57:5f:aa:64:34:29:53:d7:3d:18:90: 0f:8e:17:15:b0:56:5c:67:7f:5c:70:76:c9:03:d3:01:04:d8: 97:3f:91:b7:6f:56:80:d9:53:5c:d7:03:fa:e5:fa:34:5e:46: 8e:63:97:2c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZu7898HbXRlYpsfUMmyyb4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MTAwMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDBiMTZkMzY5YWQyN2NlZDg1NDk5NDY1MzI4ZjA5NWIxNTVmNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXveq6CrZ/MMoB/EEzcG46M7rYc TwNdF/ogNt2bKzYa4GusMluhSFqa02ckt802U3FLkAncxcwtHz0CixVuw0PRVeHA cpj2vWJXTkRYZRmiK3JNB4zptYfkcM5qJ3YeszWxAiTNcYIjfoZiVX5C+AkKM12e 8sT7+VkDB+rHEUI5wkDJb09ZWubGgqQT4ZLIMujsHXSu9KUKslwRI57vmNit91cL VaZsuacezQs5lmpII8v43++SRRmOvWGJwpI4hZGp6XE3ROzPZI9zUZKNnaWy/Muh y9e5GDBkPRoOV6d1dcCwEdjOgejiKwXZnYMJMEaD+xd7g4lRz+uZLm0f3QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOQLFtNprSfO2FSZRlMo8JWxVfQxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzE1Y2I1 MS00Y2VhLTQ1ZTMtYTc2MC0wMzcxZDRiNDU0N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMTVjYjUx LTRjZWEtNDVlMy1hNzYwLTAzNzFkNGI0NTQ3YS8xLzVBc1cwMm10Sjg3WVZKbEdV eWp3bGJGVjlERS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAueEaAwQAwL2dMA0EAgACMAcDBQMqBUZAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMlpjANBgkqhkiG9w0BAQsFAAOCAQEAAXDV Z/LWma7FS6H69CtlCqEGIU9Q7QpxpsCbeRNoW1cI0nJo0aipBN4Agic7jgzg9GwY 0LLmgEuO/o+aPuScthRncb+HpIm/ARceHSR585mO2Wp7jxc1PPscGz9PVX7FQt4Z 5n2qbkSswuNCz047t0YVAhXIhcBbGJtykXNBJSrYVYCt9/bO+PZBTm+6D5im7jmq zSooZ29aaSGXeC6EJXgEZbHbx0A1T1qxywYkVcq5ErruNc8j0hIWjlygML5jBg5j NvC9rVoWyBE/fldfqmQ0KVPXPRiQD44XFbBWXGd/XHB2yQPTAQTYlz+Rt29WgNlT XNcD+uX6NF5GjmOXLA== -----END CERTIFICATE-----Generated at Mon Feb 2 15:55:27 2026 by rpki-client