This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.cer (raw, json) Hash identifier: rPVTQOcELQH0ba39sGKxCvBmzd9Of43ok+RN34PsisY= Subject key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA59AB3868558F3EADD81552F0E1E7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212766 IP: 193.163.116.0/24 IP: 2a11:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:9a:b3:86:85:58:f3:ea:dd:81:55:2f:0e:1e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:07:d5:58:4f:ae:e6:9c:cc:71:d0:fb:ec: 7c:a1:01:4d:ec:c6:78:56:8c:eb:cc:e1:07:98:af: e4:5d:24:20:5d:85:ff:ef:ed:25:49:f9:5a:8d:7e: db:49:9b:88:1f:c3:a7:4d:60:e3:76:c7:18:e9:d5: a0:a3:57:4f:a6:4a:99:16:6d:f8:9f:fe:01:d0:ab: 1e:66:83:45:67:93:2c:08:bc:b3:c9:96:d3:c5:43: 29:37:77:49:87:ae:1d:cc:51:87:72:ce:a4:f5:17: 8e:c4:42:82:a3:4a:94:41:2f:b8:37:b0:ed:f1:2c: d3:61:8f:90:d1:f7:98:86:44:94:47:c5:64:e8:3c: c5:31:84:28:d2:64:1d:27:a5:3b:42:07:de:43:97: 0a:84:ce:a7:7d:4f:a5:23:38:e5:9d:04:eb:13:68: 1d:93:53:9d:72:49:85:d7:0b:1d:db:65:41:eb:b0: bb:c9:4e:47:52:43:28:3f:c3:3e:7d:e0:56:0c:42: 72:14:b0:99:48:b3:53:ae:6b:1b:96:57:09:a9:72: 15:13:66:72:c0:f6:9e:fe:cd:2c:be:17:5c:b3:72: ce:12:45:5f:cc:5f:42:9a:1d:ba:b7:ec:a9:40:29: c2:ea:c9:14:9e:28:97:32:08:da:6f:9e:80:59:83: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.116.0/24 IPv6: 2a11:e340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212766 Signature Algorithm: sha256WithRSAEncryption 00:00:5d:a0:aa:a9:04:09:ed:15:64:df:d6:2c:e3:a6:17:7c: 84:6e:c6:09:75:d2:cb:29:9a:49:6c:f0:75:59:02:89:3c:16: 4d:3e:13:b8:b9:9e:3a:80:45:95:ef:71:b3:c4:47:a6:e0:2a: fc:b5:03:0b:76:11:2d:b3:bb:6a:f9:64:8e:7a:8f:55:15:2d: a7:ed:82:73:bf:e2:7c:58:48:4c:d4:99:d9:f1:cf:71:15:0c: 63:fb:57:09:68:4b:55:59:8f:f0:47:0e:bb:2c:31:c9:a7:7a: e5:cb:d3:a0:da:49:11:26:be:44:f4:a4:a4:23:89:55:00:ab: c3:9c:80:4e:ae:15:73:27:c1:fb:8b:a9:75:17:77:7f:6b:f8: a4:f5:25:f5:b6:f8:f3:ed:dc:22:89:bf:f0:b2:eb:00:fc:53: 55:4d:f1:5a:fd:f5:42:d8:91:c2:08:cc:b9:a6:0a:07:1c:97: 8d:df:d9:01:d5:23:3f:77:0f:39:a6:e0:b8:c5:c3:53:93:74: 6c:dd:2a:b1:41:6a:3b:1b:70:c7:9f:9b:54:7b:ae:90:ae:8c: 38:a2:20:e6:49:2b:31:b8:3e:83:e4:a4:df:0a:78:93:69:be: 83:32:af:da:53:25:bf:06:52:c6:11:7b:c0:62:9f:8b:a1:b9: d7:2b:08:ab -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pZqzhoVY8+rdgVUvDh5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDNmOTFiMDIxNTI4ODJiZjk2MDVkNzZiZWE0MjFhYTBiZDRlNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzroH1VhPruaczHHQ++x8oQFN7MZ4 VozrzOEHmK/kXSQgXYX/7+0lSflajX7bSZuIH8OnTWDjdscY6dWgo1dPpkqZFm34 n/4B0KseZoNFZ5MsCLyzyZbTxUMpN3dJh64dzFGHcs6k9ReOxEKCo0qUQS+4N7Dt 8SzTYY+Q0feYhkSUR8Vk6DzFMYQo0mQdJ6U7QgfeQ5cKhM6nfU+lIzjlnQTrE2gd k1OdckmF1wsd22VB67C7yU5HUkMoP8M+feBWDEJyFLCZSLNTrmsbllcJqXIVE2Zy wPae/s0svhdcs3LOEkVfzF9Cmh26t+ypQCnC6skUniiXMgjab56AWYPUTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOQ/kbAhUogr+WBddr6kIaoL1OYoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzMzNGM1 Ni0yZTY5LTRkYTItYjAxZC0wMzA4MDI2NDFjNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMzM0YzU2 LTJlNjktNGRhMi1iMDFkLTAzMDgwMjY0MWM2Ny8xLzVELVJzQ0ZTaUN2NVlGMTJ2 cVFocWd2VTVpZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaN0MA0EAgACMAcDBQMqEeNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/HjANBgkqhkiG9w0BAQsFAAOCAQEAAABdoKqpBAnt FWTf1izjphd8hG7GCXXSyymaSWzwdVkCiTwWTT4TuLmeOoBFle9xs8RHpuAq/LUD C3YRLbO7avlkjnqPVRUtp+2Cc7/ifFhITNSZ2fHPcRUMY/tXCWhLVVmP8EcOuywx yad65cvToNpJESa+RPSkpCOJVQCrw5yATq4VcyfB+4updRd3f2v4pPUl9bb48+3c Iom/8LLrAPxTVU3xWv31QtiRwgjMuaYKBxyXjd/ZAdUjP3cPOabguMXDU5N0bN0q sUFqOxtwx5+bVHuukK6MOKIg5kkrMbg+g+Sk3wp4k2m+gzKv2lMlvwZSxhF7wGKf i6G51ysIqw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:23 2026 by rpki-client