This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.cer (raw, json) Hash identifier: /0LZ5gj6k4jWfYKqNC9bYq8oAN98t3V37o5fJr6UPwo= Subject key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE12DC9AC03DE792DD2FD67844BDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206304 IP: 185.232.108.0/22 IP: 2a0a:c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e1:2d:c9:ac:03:de:79:2d:d2:fd:67:84:4b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:af:3c:c0:b2:0f:aa:ff:49:05:f2:a9:5b: f8:c3:57:4d:04:eb:20:fa:27:27:7f:21:2c:53:98: 6d:6b:1a:4d:21:98:20:1e:e0:c0:af:f2:f6:af:f4: f8:37:19:c5:e7:0e:62:1c:d1:93:94:af:82:fa:91: b7:d8:1f:96:7a:47:3d:fe:16:2c:2b:23:d5:7a:5f: 93:ff:2f:c7:b6:68:b1:e8:ec:49:7a:0c:37:72:73: 75:63:22:4b:d7:17:e6:c3:ad:1e:d9:ec:5f:87:2f: 6b:b6:cd:6d:ea:c1:13:5f:f6:b8:93:8c:a3:fe:ac: bd:8e:f1:83:b5:34:c8:23:cf:13:97:df:cf:0f:5e: e7:55:24:83:63:ba:d2:62:96:ef:e6:46:0f:93:1f: 81:47:f0:c0:4c:b0:14:c0:4e:18:16:08:88:ef:87: 65:19:70:b7:e5:03:b4:e9:27:a8:49:55:d2:79:7a: 0c:db:ce:6e:6a:3c:1a:6b:df:0c:ad:1e:95:3b:9c: 0a:60:9f:ef:c8:ec:b3:fd:a4:02:df:4e:a1:ac:45: fa:23:76:94:40:72:12:b7:66:9f:5b:e0:75:c5:46: 7d:a5:d3:fe:99:45:b4:28:46:50:84:14:8f:e3:f5: 47:31:31:e6:e7:3c:5c:d6:55:3a:b8:ab:b8:a4:5a: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.108.0/22 IPv6: 2a0a:c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206304 Signature Algorithm: sha256WithRSAEncryption 8c:ea:36:76:b7:22:90:40:59:d8:af:c6:45:68:27:f8:02:b5: 89:0f:6f:ee:0b:aa:72:30:32:46:1c:d6:d8:7e:5d:fd:0e:2e: 8c:4f:f6:3f:0e:0e:f9:a2:f6:05:21:b9:76:e9:c5:68:ec:22: 77:de:82:43:ca:c2:e2:3e:a0:1e:1c:d2:47:a7:19:38:bf:bc: 29:a2:c8:4f:23:f2:03:cd:12:68:a4:e6:c5:bc:fe:41:d2:82: 52:1d:b6:5b:5e:be:8a:29:50:12:76:a3:59:3d:4d:90:c7:be: b3:46:48:80:73:40:21:74:5c:3f:9a:a4:9a:2d:f9:a6:1a:05: ec:32:cf:19:18:1b:17:8f:5e:64:62:87:71:74:be:76:78:7e: bc:af:e0:cb:30:0a:60:b2:e3:15:00:7c:86:86:bf:4b:a2:45: b5:df:e3:42:a7:dd:df:81:ac:e6:d2:eb:43:e8:ba:b0:1f:f8: e1:e4:46:3f:08:64:70:10:be:88:a4:2d:8b:c8:88:2e:16:f3: ba:3e:49:af:1e:5c:aa:5f:f0:e9:1e:4a:98:2d:7e:58:5d:49: 5e:31:dd:29:42:20:42:9b:a1:b1:16:b2:d0:ea:b9:5f:c4:23: 5d:71:66:8a:58:1b:80:e5:e1:43:2c:24:a8:03:6d:75:13:26: 60:7f:cf:51 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9WuEtyawD3nkt0v1nhEveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDlkNDRkODgxMjc1ZmNhMmMwYjZiM2Y3ZWNlZTJkMjIyMTQ2ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vmvPMCyD6r/SQXyqVv4w1dNBOsg +icnfyEsU5htaxpNIZggHuDAr/L2r/T4NxnF5w5iHNGTlK+C+pG32B+Wekc9/hYs KyPVel+T/y/Htmix6OxJegw3cnN1YyJL1xfmw60e2exfhy9rts1t6sETX/a4k4yj /qy9jvGDtTTII88Tl9/PD17nVSSDY7rSYpbv5kYPkx+BR/DATLAUwE4YFgiI74dl GXC35QO06SeoSVXSeXoM285uajwaa98MrR6VO5wKYJ/vyOyz/aQC306hrEX6I3aU QHISt2afW+B1xUZ9pdP+mUW0KEZQhBSP4/VHMTHm5zxc1lU6uKu4pFriwwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOSdRNiBJ1/KLAtrP37O4tIiFG/SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzA1MGQ3 Zi04NDU1LTQ2NWYtYjIzOS1jMzJkMTBjN2VhMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMDUwZDdm LTg0NTUtNDY1Zi1iMjM5LWMzMmQxMGM3ZWExZi8xLzVKMUUySUVuWDhvc0Myc19m czdpMGlJVWI5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuehsMA0EAgACMAcDBQMqCgxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMl4DANBgkqhkiG9w0BAQsFAAOCAQEAjOo2drcikEBZ 2K/GRWgn+AK1iQ9v7guqcjAyRhzW2H5d/Q4ujE/2Pw4O+aL2BSG5dunFaOwid96C Q8rC4j6gHhzSR6cZOL+8KaLITyPyA80SaKTmxbz+QdKCUh22W16+iilQEnajWT1N kMe+s0ZIgHNAIXRcP5qkmi35phoF7DLPGRgbF49eZGKHcXS+dnh+vK/gyzAKYLLj FQB8hoa/S6JFtd/jQqfd34Gs5tLrQ+i6sB/44eRGPwhkcBC+iKQti8iILhbzuj5J rx5cql/w6R5KmC1+WF1JXjHdKUIgQpuhsRay0Oq5X8QjXXFmilgbgOXhQywkqANt dRMmYH/PUQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:28 2026 by rpki-client