This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer (raw, json) Hash identifier: pvpSedXPpjk86V9rBN5B5v5P8of7SP3G+gu7/gBWdss= Subject key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D71816456698288E1192973635AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212483 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d7:18:16:45:66:98:28:8e:11:92:97:36:35:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:66:2b:d1:ab:26:88:63:0f:18:51:a5:00:59: 39:b1:ff:67:99:eb:9d:20:09:d7:52:a0:89:f4:2d: e2:9c:21:e9:71:a1:d4:95:d5:a2:c5:69:80:33:50: 50:42:40:62:68:2a:06:a9:6a:1f:dd:d7:3c:4c:d0: 59:80:11:30:39:f6:76:d5:c7:65:b2:7b:45:3b:16: 54:8d:25:5f:9f:e4:8c:dc:dd:5f:1d:26:ba:fb:64: 3e:3e:9d:01:2c:77:11:cd:6d:e6:9d:ce:14:45:93: d8:87:ae:65:a4:ea:49:b7:5f:f1:68:f4:78:c6:27: bd:f9:4e:24:5b:de:23:3c:f9:eb:c5:db:08:00:f0: ed:dd:7a:a0:8b:b7:38:c4:6d:b8:e4:7f:f7:44:f4: 54:77:48:4e:dd:e5:2f:8b:38:ba:c4:0b:5d:01:f9: 69:3b:d9:c2:62:85:5f:44:e8:74:6c:15:17:9b:d4: 9f:25:25:6f:3f:a2:0c:7c:c3:d4:97:44:24:24:18: 37:ec:14:86:85:6d:de:52:fd:b4:3e:8e:80:2c:83: c6:56:65:3c:53:c7:d1:0c:d9:a8:ba:90:75:d6:61: 1e:ba:3a:00:2a:b9:0e:af:9d:d4:82:4c:55:fa:cd: aa:39:b4:e7:4a:23:ba:ae:37:4b:e3:28:8d:82:94: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212483 Signature Algorithm: sha256WithRSAEncryption 57:0a:35:3d:b9:18:f1:a3:f9:90:73:4f:20:01:c2:36:73:83: de:e5:7b:37:89:46:ae:38:4a:92:b7:1e:45:ed:35:36:2c:5a: 4f:99:91:fd:2f:98:3d:3f:62:b4:4a:b1:01:89:ff:02:46:1c: 41:f6:d7:55:6e:b3:f5:61:a8:22:d0:c8:19:52:66:db:ed:2a: 57:55:54:3c:35:9d:a2:33:3a:8d:56:81:d5:75:86:75:54:60: 1c:7c:85:89:3b:17:7f:6f:83:80:83:dd:ab:05:78:13:4f:92: 9a:50:68:b0:5c:20:9c:43:c0:d8:08:78:cc:b0:0f:5a:14:a7: 72:d2:8e:2e:92:f7:8b:86:a0:26:58:51:70:2a:78:8a:65:b2: 2d:7d:df:dd:b7:fe:fb:05:bc:ae:3d:5a:51:d0:6e:64:d4:39: 94:6c:77:13:75:20:71:61:94:d0:9e:6c:2b:0c:8a:1d:2c:df: bd:a2:58:0e:30:19:02:3c:c6:86:ca:f3:8a:ea:a1:07:eb:6a: c0:02:31:d5:66:cb:ae:d7:31:8e:d9:ad:b4:cb:34:75:2f:ef: 22:35:9e:6b:56:ff:bb:cd:4f:5b:72:54:01:dc:cc:42:5e:30: 66:9c:26:65:17:b1:0d:a1:df:49:49:93:61:71:d5:62:77:57: e6:b5:eb:fb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5ENcYFkVmmCiOEZKXNjWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGM3NDgyNDM0YTQ1N2IwNDhiN2Q2MjYxZGRkODA5NWM1YzA5MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWYr0asmiGMPGFGlAFk5sf9nmeud IAnXUqCJ9C3inCHpcaHUldWixWmAM1BQQkBiaCoGqWof3dc8TNBZgBEwOfZ21cdl sntFOxZUjSVfn+SM3N1fHSa6+2Q+Pp0BLHcRzW3mnc4URZPYh65lpOpJt1/xaPR4 xie9+U4kW94jPPnrxdsIAPDt3Xqgi7c4xG245H/3RPRUd0hO3eUvizi6xAtdAflp O9nCYoVfROh0bBUXm9SfJSVvP6IMfMPUl0QkJBg37BSGhW3eUv20Po6ALIPGVmU8 U8fRDNmoupB11mEeujoAKrkOr53UgkxV+s2qObTnSiO6rjdL4yiNgpRvUwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOTHSCQ0pFewSLfWJh3dgJXFwJAgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2VkZTM2 ZC1iZjViLTQ0MzUtYjNlNS1jNDUwOGI1NTUwNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWRlMzZk LWJmNWItNDQzNS1iM2U1LWM0NTA4YjU1NTA3MS8xLzVNZElKRFNrVjdCSXQ5WW1I ZDJBbGNYQWtDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+AzANBgkqhkiG9w0BAQsFAAOCAQEAVwo1PbkY8aP5 kHNPIAHCNnOD3uV7N4lGrjhKkrceRe01NixaT5mR/S+YPT9itEqxAYn/AkYcQfbX VW6z9WGoItDIGVJm2+0qV1VUPDWdojM6jVaB1XWGdVRgHHyFiTsXf2+DgIPdqwV4 E0+SmlBosFwgnEPA2Ah4zLAPWhSnctKOLpL3i4agJlhRcCp4imWyLX3f3bf++wW8 rj1aUdBuZNQ5lGx3E3UgcWGU0J5sKwyKHSzfvaJYDjAZAjzGhsrziuqhB+tqwAIx 1WbLrtcxjtmttMs0dS/vIjWea1b/u81PW3JUAdzMQl4wZpwmZRexDaHfSUmTYXHV YndX5rXr+w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:07 2026 by rpki-client