This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.cer (raw, json) Hash identifier: coI2IeMFsnaw8T0SnBINfFlrRDofgr44mehDXJeSQQ4= Subject key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3630304C69322A3369B0B8A40DCF6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29296 IP: 193.135.64.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:30:30:4c:69:32:2a:33:69:b0:b8:a4:0d:cf:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:39:df:e8:ef:cc:1f:e3:ea:fa:71:72:43: e4:bb:9a:49:97:10:e0:c9:06:4e:7e:7c:e9:0b:fd: 76:97:ba:34:43:f4:ea:e1:79:6e:f7:93:af:ba:2e: 43:91:45:6e:f5:17:d6:45:e7:4a:21:fb:39:d7:9a: 87:d2:05:6b:eb:c5:00:f3:22:db:d1:91:88:64:a7: 76:57:e1:66:54:ae:33:2b:a4:52:1a:52:ef:a5:a6: 04:fd:f8:21:98:33:7a:a4:01:06:f7:5f:a4:75:97: 46:e1:e0:b3:1e:81:09:65:4a:2d:b9:09:c3:7d:76: 8f:b9:a1:7b:5a:85:81:2b:3b:4c:09:d4:1a:9f:3b: 36:06:ad:62:3e:0b:a8:84:4c:ca:7b:87:85:a4:87: 0b:8c:6e:8b:2c:53:65:1b:22:26:a7:87:24:59:2d: 5d:60:bb:66:bd:90:2f:49:4f:0f:d9:3a:05:a1:c3: 8c:35:03:d9:8b:ce:ba:bc:de:ac:3e:c6:ae:ad:71: c6:72:79:99:e5:e8:1a:9b:fc:e1:51:6d:53:aa:05: 26:be:bd:4a:5c:a2:ed:d8:48:5a:df:ae:c3:07:91: 94:b7:8c:12:b1:d4:87:d1:f7:7c:31:41:96:eb:9b: 1e:68:3d:ae:47:d7:68:a8:d0:b7:ff:4f:ef:d6:2e: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29296 Signature Algorithm: sha256WithRSAEncryption 30:62:eb:82:57:57:e4:df:d8:ca:78:bc:c9:0c:fb:6e:6a:f9: 98:65:2c:45:73:5f:2c:bf:43:b1:2c:18:f6:ee:de:e8:a2:a6: 47:2d:02:6a:b8:23:ed:13:f0:a4:3c:79:e1:7f:79:64:f1:c9: f4:87:73:af:29:b2:7f:64:4f:72:e9:5c:57:cd:5d:da:66:7f: 79:9e:79:0b:e2:2c:17:ea:ba:22:91:fe:eb:9f:0c:1c:e9:26: cd:b3:59:07:82:e5:2f:15:b5:2a:4b:1f:ff:c0:68:54:23:e7: be:c5:e3:47:0e:eb:cb:53:d8:51:31:f9:8a:77:04:d3:9d:bf: d0:91:04:a2:f3:9f:fb:90:d0:12:b4:c7:c4:a7:b0:5a:59:42: 16:b9:68:3b:45:46:55:b6:81:b2:08:7c:09:24:1b:3f:67:07: 97:64:49:db:42:88:10:6c:61:df:41:bd:5a:8f:03:32:0d:33: f7:d0:66:f3:37:a5:dd:11:e4:d1:0d:85:56:8a:60:45:23:ea: d3:dd:a2:38:cd:1b:e6:55:9a:dd:48:87:a9:c9:c3:ab:66:7a: eb:6a:a6:7a:a8:ab:81:2b:0d:33:37:b2:64:b5:21:80:21:72: bf:2e:62:75:e4:55:bc:62:e9:7b:d1:3a:59:21:f9:c9:c2:84: 52:b2:bd:0c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7NjAwTGkyKjNpsLikDc9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQyNzFjM2ZhOTAzYTU5MGZkZjU0ODk5NDQ5ZTY5OGYyZTljNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnU53+jvzB/j6vpxckPku5pJlxDg yQZOfnzpC/12l7o0Q/Tq4Xlu95Ovui5DkUVu9RfWRedKIfs515qH0gVr68UA8yLb 0ZGIZKd2V+FmVK4zK6RSGlLvpaYE/fghmDN6pAEG91+kdZdG4eCzHoEJZUotuQnD fXaPuaF7WoWBKztMCdQanzs2Bq1iPguohEzKe4eFpIcLjG6LLFNlGyImp4ckWS1d YLtmvZAvSU8P2ToFocOMNQPZi866vN6sPsaurXHGcnmZ5egam/zhUW1TqgUmvr1K XKLt2Eha367DB5GUt4wSsdSH0fd8MUGW65seaD2uR9doqNC3/0/v1i6lKQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFOTSccP6kDpZD99UiZRJ5pjy6cYyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0Lzg5NzA5 Mi0wNzUwLTRkOTYtYjMyZi01ZjIwNTIzNmRlMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvODk3MDky LTA3NTAtNGQ5Ni1iMzJmLTVmMjA1MjM2ZGUxZi8xLzVOSnh3X3FRT2xrUDMxU0ps RW5tbVBMcHhqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFwYdAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnJwMA0GCSqGSIb3DQEBCwUAA4IBAQAwYuuCV1fk39jKeLzJDPtuavmYZSxFc18s v0OxLBj27t7ooqZHLQJquCPtE/CkPHnhf3lk8cn0h3OvKbJ/ZE9y6VxXzV3aZn95 nnkL4iwX6roikf7rnwwc6SbNs1kHguUvFbUqSx//wGhUI+e+xeNHDuvLU9hRMfmK dwTTnb/QkQSi85/7kNAStMfEp7BaWUIWuWg7RUZVtoGyCHwJJBs/ZweXZEnbQogQ bGHfQb1ajwMyDTP30GbzN6XdEeTRDYVWimBFI+rT3aI4zRvmVZrdSIepycOrZnrr aqZ6qKuBKw0zN7JktSGAIXK/LmJ15FW8Yul70TpZIfnJwoRSsr0M -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:58 2026 by rpki-client