This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer File: 5H78nMPZxL0porvBVVH4LyXPEbo.cer (raw, json) Hash identifier: IV4yutNCQCRpKEfhrPv472glFDCHC4TyL0ZOnESQj90= Subject key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5BB0EB6080184C3F91749C1E5D41 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213882 IP: 185.236.188.0/22 IP: 2a0d:c900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:b0:eb:60:80:18:4c:3f:91:74:9c:1e:5d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:c8:d8:8e:01:1a:59:56:c2:20:ad:17:9e: b8:57:c8:54:45:8f:05:a1:a3:7a:dd:cf:61:2e:5f: c1:6b:ed:4c:04:0d:db:2d:e8:5b:1b:22:4b:fe:dd: ab:02:c8:96:54:62:69:fc:5c:c1:6a:67:d3:c4:ea: a6:79:6c:22:cd:78:66:ed:e6:8f:5b:e3:da:9e:ad: fe:05:f9:8e:94:db:ce:9c:e5:b7:92:98:04:19:f7: b8:b3:6a:9f:f7:92:99:ba:5a:c5:c6:26:e8:26:64: ae:29:51:2b:6a:3e:ed:7e:20:ef:09:2a:3d:fc:90: ec:a1:dd:26:33:de:6e:5a:46:54:6d:bc:bd:63:96: 00:f1:ed:0c:f1:fc:be:5b:97:f2:5d:11:6f:1c:ff: 73:e9:4c:15:10:fa:5b:56:bf:90:a7:fd:2b:da:37: f2:5b:33:f8:63:60:09:aa:1b:aa:80:35:33:1a:de: e4:b3:80:ad:c4:6d:fd:08:8a:46:aa:bf:7a:bb:e1: 38:b8:0d:49:09:04:57:af:51:04:ac:d5:0f:8f:f8: da:9c:ac:9b:88:03:2f:f0:bc:ce:aa:ed:be:d1:af: 44:33:1d:89:8f:4f:6e:ca:95:46:d2:6d:41:6e:9a: 0c:74:94:2c:7c:ec:ac:51:0f:fb:5f:f1:f1:96:a7: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.188.0/22 IPv6: 2a0d:c900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213882 Signature Algorithm: sha256WithRSAEncryption b1:e9:08:23:fb:2c:41:4f:c0:3c:04:11:c3:36:68:64:b2:3a: 1d:d0:35:5a:9e:07:ed:18:bf:76:b4:9a:a9:4d:1e:38:32:84: 17:77:b6:55:c3:71:f9:0e:7e:b5:1b:7a:d8:ac:19:a0:e9:ca: 81:98:e8:3f:c6:55:76:f4:e6:bc:fb:e4:0a:0a:a6:4e:df:97: 71:80:40:c4:d7:5e:bc:79:f0:38:4d:b3:0b:11:5f:48:34:68: ea:31:43:64:4d:07:6e:2b:f3:ba:76:eb:a4:20:16:da:a3:2d: da:54:68:01:82:a4:f4:42:d2:61:a6:ea:7d:72:21:2a:ad:61: a6:a2:9e:d1:55:28:fc:e5:a0:b1:c3:2f:ab:e7:d5:ba:8c:6b: 9c:fe:70:0f:3a:af:f4:00:a5:f2:5c:4e:3e:b2:81:21:9c:2f: e1:0b:55:10:36:f6:9c:a6:8f:1b:a1:a0:4a:16:28:85:26:14: 3d:e6:7d:e3:2e:da:fc:53:6b:a1:7a:d8:c8:b7:67:13:f9:4d: e0:56:99:8e:b9:98:d5:df:bb:06:07:b6:68:e9:00:fb:3c:3d: 56:69:a0:54:1c:ad:02:6d:87:d8:94:9c:2d:e2:ba:87:0b:e7: af:1b:0f:b4:0b:b2:7a:13:22:17:0d:d0:46:93:70:dd:c1:d6: 90:ae:b6:3e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57Vuw62CAGEw/kXScHl1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDdlZmM5Y2MzZDljNGJkMjlhMmJiYzE1NTUxZjgyZjI1Y2YxMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58XI2I4BGllWwiCtF564V8hURY8F oaN63c9hLl/Ba+1MBA3bLehbGyJL/t2rAsiWVGJp/FzBamfTxOqmeWwizXhm7eaP W+Panq3+BfmOlNvOnOW3kpgEGfe4s2qf95KZulrFxiboJmSuKVEraj7tfiDvCSo9 /JDsod0mM95uWkZUbby9Y5YA8e0M8fy+W5fyXRFvHP9z6UwVEPpbVr+Qp/0r2jfy WzP4Y2AJqhuqgDUzGt7ks4CtxG39CIpGqr96u+E4uA1JCQRXr1EErNUPj/janKyb iAMv8LzOqu2+0a9EMx2Jj09uypVG0m1BbpoMdJQsfOysUQ/7X/HxlqcH8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOR+/JzD2cS9KaK7wVVR+C8lzxG6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzI0ODEz My04NjcwLTQxNjctYTE5NS02ZTJmNTg4YzBjN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMjQ4MTMz LTg2NzAtNDE2Ny1hMTk1LTZlMmY1ODhjMGM3ZS8xLzVINzhuTVBaeEwwcG9ydkJW Vkg0THlYUEViby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuey8MA0EAgACMAcDBQMqDckAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDejANBgkqhkiG9w0BAQsFAAOCAQEAsekII/ssQU/A PAQRwzZoZLI6HdA1Wp4H7Ri/drSaqU0eODKEF3e2VcNx+Q5+tRt62KwZoOnKgZjo P8ZVdvTmvPvkCgqmTt+XcYBAxNdevHnwOE2zCxFfSDRo6jFDZE0HbivzunbrpCAW 2qMt2lRoAYKk9ELSYabqfXIhKq1hpqKe0VUo/OWgscMvq+fVuoxrnP5wDzqv9ACl 8lxOPrKBIZwv4QtVEDb2nKaPG6GgShYohSYUPeZ94y7a/FNroXrYyLdnE/lN4FaZ jrmY1d+7Bge2aOkA+zw9VmmgVBytAm2H2JScLeK6hwvnrxsPtAuyehMiFw3QRpNw 3cHWkK62Pg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:56 2026 by rpki-client