This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer (raw, json) Hash identifier: iy1VhnE7BNHn6rcJY3MYLZVVBUAewKvCL0a0sfmR/B4= Subject key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78343B36A1EC567367402F20CA218A8B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57569 IP: 91.233.18.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3b:36:a1:ec:56:73:67:40:2f:20:ca:21:8a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43957deba816c9600ce0a4d07fca7d306efee61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:54:d2:21:b3:3e:11:61:41:bc:ee:94:81: cb:6a:08:13:61:97:7e:7e:f1:bb:65:ff:5d:18:88: 7d:b0:31:aa:31:3f:2c:27:61:c5:8d:76:d4:e2:ed: 1c:db:5b:c7:bf:50:38:65:87:f0:f0:c3:82:be:5f: a0:36:71:5c:a3:c7:6b:33:52:9d:f2:72:1d:2e:f3: 36:83:9e:bb:ab:c9:e9:97:2f:9d:88:d5:3b:d5:91: dd:68:fa:2c:fc:35:4d:b1:58:e0:f7:c7:78:3a:6b: b6:d7:6a:fa:25:b7:66:13:61:4c:87:3e:f9:07:3e: a3:4f:fc:f7:06:4c:ed:bf:b7:17:d7:a5:d8:78:9d: 8e:4a:ca:1a:6d:ef:00:64:3c:0f:22:5a:ce:b9:7d: 13:ef:a3:27:b6:4f:60:2c:09:78:72:86:43:e4:78: 8e:e5:95:a3:47:b9:5b:91:74:28:4e:1d:01:6f:c3: f1:81:bf:f3:a4:8a:20:1b:38:8e:7d:ef:7d:52:1c: 9c:aa:dc:37:25:81:f4:92:4d:95:4e:57:41:20:c5: 5d:5f:61:1c:42:29:82:0d:2b:64:fb:87:23:82:33: 61:97:8c:90:b4:cf:d7:e9:5a:ed:4a:95:5d:b3:02: d6:49:b7:32:15:01:7f:59:85:10:df:e0:fa:fb:47: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.18.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57569 Signature Algorithm: sha256WithRSAEncryption a1:11:34:75:92:3c:ac:e4:a4:e1:98:7b:2e:83:72:bf:96:7a: f4:93:d6:34:bb:00:77:30:a8:09:80:bd:ce:dc:cf:f5:65:9e: e4:68:d4:e1:fe:2a:47:04:7b:df:eb:ee:de:7d:5b:f2:e1:97: 20:a4:14:79:68:00:f2:d6:f8:c5:0c:d9:8a:9b:17:ef:5b:85: 0b:fc:65:05:b4:15:20:6b:a1:94:7f:6d:d9:83:f2:7b:2f:2a: c7:91:36:00:84:60:fa:74:73:d3:01:99:94:46:d3:59:27:8a: 5e:7b:de:fd:0e:99:38:9e:fa:aa:c8:1e:df:ec:57:5b:30:c0: 40:8f:8d:eb:c4:16:b2:28:55:f3:7d:02:a9:3b:1c:31:45:2e: f5:64:3b:9f:6b:9e:77:41:09:3b:37:7e:9d:8a:4c:0a:c2:9f: fe:ff:ca:8a:0d:70:13:5a:74:c3:8b:c4:0f:93:7e:45:2a:90: 56:c1:69:4f:f3:05:00:f6:c3:18:5f:2f:01:f5:b3:40:54:92: f2:57:c5:2b:4a:d3:51:d2:57:44:b3:86:51:a5:0f:ff:f9:07: 1c:d2:e2:c3:da:14:a1:cf:7c:63:58:82:4e:9d:fb:8a:50:32: 06:14:d6:32:15:f1:6d:49:2a:53:05:3c:ae:e7:ea:32:0b:ad: 9d:e4:7e:9d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NDs2oexWc2dALyDKIYqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDM5NTdkZWJhODE2Yzk2MDBjZTBhNGQwN2ZjYTdkMzA2ZWZlZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E1U0iGzPhFhQbzulIHLaggTYZd+ fvG7Zf9dGIh9sDGqMT8sJ2HFjXbU4u0c21vHv1A4ZYfw8MOCvl+gNnFco8drM1Kd 8nIdLvM2g567q8nply+diNU71ZHdaPos/DVNsVjg98d4Omu212r6JbdmE2FMhz75 Bz6jT/z3Bkztv7cX16XYeJ2OSsoabe8AZDwPIlrOuX0T76Mntk9gLAl4coZD5HiO 5ZWjR7lbkXQoTh0Bb8Pxgb/zpIogGziOfe99Uhycqtw3JYH0kk2VTldBIMVdX2Ec QimCDStk+4cjgjNhl4yQtM/X6VrtSpVdswLWSbcyFQF/WYUQ3+D6+0cyjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOQ5V966gWyWAM4KTQf8p9MG7+5hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2Q4YTAy NC02YzA2LTRmOTgtYTgzNC1lNjMzNjIwOThjNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvZDhhMDI0 LTZjMDYtNGY5OC1hODM0LWU2MzM2MjA5OGM3MC8xLzVEbFgzcnFCYkpZQXpncE5C X3luMHdidjdtRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+kSMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDg4TANBgkqhkiG9w0BAQsFAAOCAQEAoRE0dZI8rOSk4Zh7LoNyv5Z69JPWNLsA dzCoCYC9ztzP9WWe5GjU4f4qRwR73+vu3n1b8uGXIKQUeWgA8tb4xQzZipsX71uF C/xlBbQVIGuhlH9t2YPyey8qx5E2AIRg+nRz0wGZlEbTWSeKXnve/Q6ZOJ76qsge 3+xXWzDAQI+N68QWsihV830CqTscMUUu9WQ7n2ued0EJOzd+nYpMCsKf/v/Kig1w E1p0w4vED5N+RSqQVsFpT/MFAPbDGF8vAfWzQFSS8lfFK0rTUdJXRLOGUaUP//kH HNLiw9oUoc98Y1iCTp37ilAyBhTWMhXxbUkqUwU8rufqMgutneR+nQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:10 2026 by rpki-client