This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer File: 5F0K3ClN02bfatqIATTb0OaIzPc.cer (raw, json) Hash identifier: XlAoknGdbqEqO4iAzQU0lpChmi1uT9y8lDoieQ7I0hA= Subject key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF05D5E96D0CFB4B19CAA4A74920BB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57007 IP: 91.229.252.0/22 IP: 2001:678:84c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:5d:5e:96:d0:cf:b4:b1:9c:aa:4a:74:92:0b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:52:df:7b:12:55:0c:93:9b:0d:01:9d:a9: b0:ab:79:bb:3c:cf:e6:ef:40:15:41:f7:57:f0:4b: 78:c7:85:07:c8:47:b8:cf:de:39:b7:43:94:c1:39: f6:73:9c:d1:91:e7:46:34:a0:44:29:40:07:77:be: 35:41:a6:e5:5a:4a:11:34:3c:bc:c7:67:d2:67:13: 30:04:9a:e3:41:a1:31:72:f1:ae:3e:f9:c0:b0:4d: 97:83:b6:1f:9a:af:27:0a:92:0e:fa:2a:23:b0:da: 94:09:84:4e:76:96:2e:64:b9:fa:3b:89:0f:9b:df: 99:37:e4:7d:cd:19:17:39:4e:69:d2:d6:62:3e:da: df:9d:ac:7b:87:d6:86:1e:1a:41:5f:33:1b:63:6b: 5c:c1:60:c5:ee:9c:77:8e:60:53:04:cf:f5:f2:36: 58:a7:39:eb:bd:ab:83:f8:9f:a0:10:50:d0:8d:ad: 02:8e:57:6b:ba:aa:f8:a4:3c:9d:3c:eb:70:2a:bd: a9:05:1d:64:9f:e6:64:76:45:f2:a0:6b:42:3b:bf: 17:19:d0:9c:1b:76:14:26:cb:0c:35:f0:89:e6:63: b0:d2:4f:d1:f9:a7:87:89:c6:f8:b6:fc:1e:71:b5: 8a:07:2b:5d:95:b4:9d:b3:41:36:cb:15:7f:d6:8e: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.252.0/22 IPv6: 2001:678:84c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57007 Signature Algorithm: sha256WithRSAEncryption 88:da:d5:1c:c1:d1:a0:81:d5:0d:c6:eb:df:8d:bc:7e:10:8d: 0e:63:43:94:d5:49:bc:e7:2d:42:fe:43:8e:17:8c:e5:34:fb: 17:c3:65:27:ea:d9:9f:2f:b1:4c:67:df:8b:85:e4:ca:e7:3e: 14:8c:6f:ba:89:67:64:35:80:a2:2a:06:6d:9e:d8:2f:50:dc: 01:05:db:74:d3:4a:4c:1a:5d:14:80:3e:79:a3:fc:4b:6f:cc: 58:49:4d:9c:0e:ae:d6:ea:2f:c0:20:c3:e7:20:21:8f:98:a6: 99:74:b1:35:52:48:31:7b:b0:16:ef:39:9a:2f:20:9b:cb:e0: 29:34:6c:68:1d:86:b7:35:bd:a2:25:e7:be:28:ad:22:a4:88: b3:4d:41:25:ff:ba:f4:5c:55:54:b8:1b:d8:64:ea:a9:ce:bf: 5c:88:6b:8a:50:2b:3f:be:88:f0:e5:16:aa:92:68:ee:35:a7: 8f:7c:05:62:fe:fc:5f:46:ac:f2:8b:4d:bc:4e:4d:de:78:2e: 88:db:ef:a0:82:f2:68:2c:3b:9c:9e:f7:21:c3:98:4e:3e:66: 25:d0:8e:5d:eb:c5:d4:ab:ea:a5:b6:87:50:54:17:bc:b2:a4: a1:a5:24:98:58:5f:d1:af:e6:e4:9e:69:06:c8:b3:88:8a:12: ca:51:e5:4c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/8F1eltDPtLGcqkp0kgu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDVkMGFkYzI5NGRkMzY2ZGY2YWRhODgwMTM0ZGJkMGU2ODhjY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA359S33sSVQyTmw0Bnamwq3m7PM/m 70AVQfdX8Et4x4UHyEe4z945t0OUwTn2c5zRkedGNKBEKUAHd741QablWkoRNDy8 x2fSZxMwBJrjQaExcvGuPvnAsE2Xg7Yfmq8nCpIO+iojsNqUCYROdpYuZLn6O4kP m9+ZN+R9zRkXOU5p0tZiPtrfnax7h9aGHhpBXzMbY2tcwWDF7px3jmBTBM/18jZY pznrvauD+J+gEFDQja0Cjldruqr4pDydPOtwKr2pBR1kn+ZkdkXyoGtCO78XGdCc G3YUJssMNfCJ5mOw0k/R+aeHicb4tvwecbWKBytdlbSds0E2yxV/1o6BywIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFORdCtwpTdNm32raiAE029DmiMz3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2RkZjFl MS1mMDdlLTRiYWQtODRhOC1mZTI3MzU5ZmQ3ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZGRmMWUx LWYwN2UtNGJhZC04NGE4LWZlMjczNTlmZDdlYS8xLzVGMEszQ2xOMDJiZmF0cUlB VFRiME9hSXpQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCW+X8MA8EAgACMAkDBwAgAQZ4CEwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAN6vMA0GCSqGSIb3DQEBCwUAA4IBAQCI2tUcwdGg gdUNxuvfjbx+EI0OY0OU1Um85y1C/kOOF4zlNPsXw2Un6tmfL7FMZ9+LheTK5z4U jG+6iWdkNYCiKgZtntgvUNwBBdt000pMGl0UgD55o/xLb8xYSU2cDq7W6i/AIMPn ICGPmKaZdLE1Ukgxe7AW7zmaLyCby+ApNGxoHYa3Nb2iJee+KK0ipIizTUEl/7r0 XFVUuBvYZOqpzr9ciGuKUCs/vojw5RaqkmjuNaePfAVi/vxfRqzyi028Tk3eeC6I 2++ggvJoLDucnvchw5hOPmYl0I5d68XUq+qltodQVBe8sqShpSSYWF/Rr+bknmkG yLOIihLKUeVM -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:43 2026 by rpki-client