This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.cer (raw, json) Hash identifier: 2QSeyA/Lb52Kr9v3xai521q4hGRCBoexRIFnh76OMaU= Subject key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5171CFC31646992331A2618FFD4D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202423 IP: 185.149.194.0/24 IP: 193.0.178.0/23 IP: 2a0b:9080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:1c:fc:31:64:69:92:33:1a:26:18:ff:d4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:2a:a4:4b:aa:10:e2:7d:fd:8a:99:b0:c6: af:97:d9:04:df:bd:09:db:e1:fd:a7:f4:98:cf:e9: 0c:0c:78:c3:4c:11:ce:7a:6e:73:4a:e0:7d:50:2b: d2:d5:7b:ec:3a:c1:a2:3e:8d:ba:7b:c4:dc:d6:14: bd:b2:dc:b8:48:98:8e:8e:e3:4b:e8:ed:9b:f8:8b: 45:75:2f:05:10:b5:36:37:fb:00:47:1c:ca:fa:bf: 01:3a:42:2c:c1:cd:67:d1:56:b1:7d:38:9e:d7:ef: 03:46:98:ec:99:10:73:5d:f3:c0:43:3f:98:39:77: 98:3b:17:b1:73:22:a0:6f:9f:59:fd:b9:fc:a6:72: 63:68:6f:31:3c:7e:18:8b:23:e9:41:ac:1d:b7:fc: 65:b8:08:be:3f:4c:df:92:dd:8d:06:5e:b5:82:71: ba:e5:55:51:6d:ad:7a:7f:1d:e0:70:ad:1a:89:41: 3c:bf:5d:91:b5:25:ae:f7:2d:8e:89:2e:d5:9c:6f: 7f:34:b0:71:5b:72:99:49:32:d7:0d:f5:9d:2f:77: ce:25:97:e5:db:7e:f7:5a:52:08:0c:3a:46:e4:39: 43:29:db:79:7a:11:26:59:3e:33:11:be:52:c9:67: 06:64:13:a2:61:f4:e8:f2:fa:82:53:8a:66:b4:25: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.194.0/24 193.0.178.0/23 IPv6: 2a0b:9080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202423 Signature Algorithm: sha256WithRSAEncryption 35:d2:44:7b:89:d8:c3:26:f8:be:23:c1:1c:24:11:bc:01:32: 31:70:bb:ea:e5:52:0c:19:02:6e:36:c1:50:05:b7:ec:7b:c6: a3:97:23:cd:ff:16:1c:a9:a8:c2:62:1c:0a:a2:d4:a7:fc:c8: e5:34:79:ce:08:ff:37:f6:e3:aa:35:6b:17:38:cf:67:78:9f: 23:a6:32:e4:59:15:4f:f1:6c:bb:27:f6:87:0d:5d:71:25:1b: 61:2a:72:9a:ee:82:24:8a:f4:53:30:a9:d5:76:42:5a:eb:28: 04:06:38:c9:f8:21:5b:61:cc:16:bd:70:45:89:5d:cf:40:9b: c3:c8:d9:ad:f0:03:89:c9:8a:d2:ca:84:b3:06:81:36:3b:f2: 66:af:9e:ff:6c:ef:26:10:d4:b6:bf:6d:cc:bc:77:48:0e:b3: c6:88:b0:71:a4:d0:5c:34:a3:f3:c0:14:83:ee:ce:04:5b:00: 52:04:21:db:10:68:9e:89:98:cd:9a:9f:2f:9c:1d:fb:ec:91: 0c:0b:16:6e:9d:dd:55:a0:97:ef:c1:b2:dd:2f:3b:0b:1c:3d: 23:e1:23:1e:e9:3f:24:75:a4:56:00:e2:70:53:a8:a2:d7:01: 4a:e5:43:4f:05:50:07:45:0c:57:3d:15:6c:87:a6:63:99:00: cb:d4:0a:6e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pRcc/DFkaZIzGiYY/9TSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGNjNzZlM2I1NDc3ZmZkNDJhMGZlNGI4Yzc4M2FhZDJmOTZmZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YEqpEuqEOJ9/YqZsMavl9kE370J 2+H9p/SYz+kMDHjDTBHOem5zSuB9UCvS1XvsOsGiPo26e8Tc1hS9sty4SJiOjuNL 6O2b+ItFdS8FELU2N/sARxzK+r8BOkIswc1n0VaxfTie1+8DRpjsmRBzXfPAQz+Y OXeYOxexcyKgb59Z/bn8pnJjaG8xPH4YiyPpQawdt/xluAi+P0zfkt2NBl61gnG6 5VVRba16fx3gcK0aiUE8v12RtSWu9y2OiS7VnG9/NLBxW3KZSTLXDfWdL3fOJZfl 2373WlIIDDpG5DlDKdt5ehEmWT4zEb5SyWcGZBOiYfTo8vqCU4pmtCXlcwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOTMduO1R3/9QqD+S4x4Oq0vlv5wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzVmODg4 MS04YTQ0LTQ4NDItODAwOS0xMTY1ZDFkMTU2NGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvNWY4ODgx LThhNDQtNDg0Mi04MDA5LTExNjVkMWQxNTY0Zi8xLzVNeDI0N1ZIZl8xQ29QNUxq SGc2clMtV19uQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuZXCAwQBwQCyMA0EAgACMAcDBQMqC5CAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWtzANBgkqhkiG9w0BAQsFAAOCAQEANdJE e4nYwyb4viPBHCQRvAEyMXC76uVSDBkCbjbBUAW37HvGo5cjzf8WHKmowmIcCqLU p/zI5TR5zgj/N/bjqjVrFzjPZ3ifI6Yy5FkVT/Fsuyf2hw1dcSUbYSpymu6CJIr0 UzCp1XZCWusoBAY4yfghW2HMFr1wRYldz0Cbw8jZrfADicmK0sqEswaBNjvyZq+e /2zvJhDUtr9tzLx3SA6zxoiwcaTQXDSj88AUg+7OBFsAUgQh2xBonomYzZqfL5wd ++yRDAsWbp3dVaCX78Gy3S87Cxw9I+EjHuk/JHWkVgDicFOootcBSuVDTwVQB0UM Vz0VbIemY5kAy9QKbg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:29 2026 by rpki-client