This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer (raw, json) Hash identifier: sVPvxFbbLQxdmdXtMtkwnsozQ6CfeYmo19hyA5UypUs= Subject key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC7F6C6907D488B44386AD25204ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214977 IP: 91.228.249.0/24 IP: 194.11.239.0/24 IP: 2a14:4800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c7:f6:c6:90:7d:48:8b:44:38:6a:d2:52:04:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:1b:51:d0:ff:12:d3:31:49:af:c7:bb:39: be:9b:4f:83:42:25:4f:31:62:3f:ea:a8:5a:f7:b9: af:f3:49:34:ea:d8:98:ec:05:ac:92:a4:7e:6c:dc: f2:a3:92:12:de:c2:75:75:41:d3:b2:3d:d8:17:bb: 61:f6:1c:3a:b5:12:4c:05:50:b8:ab:1c:39:97:81: ea:13:25:8d:4f:d5:38:0b:6e:11:4b:b5:e4:93:4a: cb:99:6c:b2:ed:37:62:b5:ee:f4:71:7e:97:99:77: 84:83:96:23:8b:16:c7:7c:f7:8c:19:c5:cd:d7:10: 1a:e7:77:33:5d:33:a3:49:be:6c:79:9b:c0:f1:c6: 4e:90:ac:49:83:2e:eb:1c:38:4e:a3:1a:4c:93:99: aa:a7:16:1a:43:96:51:7f:34:0e:7a:55:98:35:cd: cf:73:1c:3d:ac:e4:d6:a6:b2:3c:22:19:2b:d4:9e: bb:e5:7a:e2:e7:7c:dd:83:63:5a:76:38:99:b9:b1: 4e:74:43:a1:45:72:fb:1b:b5:a1:f2:5a:15:9c:7c: ec:00:58:91:a1:13:e4:74:ea:f4:3c:c7:ca:33:18: 38:52:3d:32:b3:84:c3:78:63:47:17:40:e8:c7:b9: cf:44:10:df:6d:5e:bb:4e:17:c2:b6:95:c0:b3:c6: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.249.0/24 194.11.239.0/24 IPv6: 2a14:4800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214977 Signature Algorithm: sha256WithRSAEncryption 47:01:2f:be:7f:9b:b4:97:e6:6a:6c:ed:39:4a:b0:40:18:81: 27:9b:22:de:d5:29:46:d0:d2:14:8e:a3:07:58:d9:76:71:91: 59:c0:cd:83:b8:b0:b1:bd:84:65:2d:98:f0:c6:06:6c:cd:95: 90:bd:ae:f2:65:84:42:56:b6:ce:4f:c2:ba:3e:17:f8:7d:0f: db:39:9c:a8:0a:10:78:3c:b5:23:28:2d:d0:03:85:25:62:3d: cc:7d:b4:38:0d:9f:ac:52:61:fe:38:61:a7:d7:4a:d5:82:69: 8c:ed:63:2f:f0:5f:3b:33:15:50:37:59:eb:e0:2d:2c:ae:8a: 0c:ba:bd:7f:c2:4f:c2:49:97:f5:55:21:81:d7:2e:a8:fa:38: 02:82:54:da:38:22:90:a5:3f:4b:e5:6d:be:a7:45:84:de:3c: 93:9a:cc:cc:a7:21:19:05:81:dd:47:c2:5f:82:b6:1e:45:63: d8:53:ee:e1:45:8f:f9:0d:af:09:38:ca:6c:22:ca:c2:fb:2e: 7f:05:42:4c:38:ef:0a:83:73:39:73:35:98:20:79:e9:e8:9e: 4e:60:f4:64:e2:d4:8b:b8:04:39:75:b4:a0:a0:b3:7d:54:3e: bd:ed:74:c8:3f:1b:fd:b6:c6:24:76:c7:a2:62:13:2f:74:80: 95:8f:cc:3d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8f8f2xpB9SItEOGrSUgTtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQ2MDhlMGY3YTEwODZjODQ1MWRlNWQ2Mzc4NDdiNTIyMTdhYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NsbUdD/EtMxSa/Huzm+m0+DQiVP MWI/6qha97mv80k06tiY7AWskqR+bNzyo5IS3sJ1dUHTsj3YF7th9hw6tRJMBVC4 qxw5l4HqEyWNT9U4C24RS7Xkk0rLmWyy7Tdite70cX6XmXeEg5YjixbHfPeMGcXN 1xAa53czXTOjSb5seZvA8cZOkKxJgy7rHDhOoxpMk5mqpxYaQ5ZRfzQOelWYNc3P cxw9rOTWprI8Ihkr1J675Xri53zdg2NadjiZubFOdEOhRXL7G7Wh8loVnHzsAFiR oRPkdOr0PMfKMxg4Uj0ys4TDeGNHF0Dox7nPRBDfbV67ThfCtpXAs8aDvQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOTWCOD3oQhshFHeXWN4R7UiF6u0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2VlYzcw YS1hYTlmLTQyYWUtOGFkNi1iN2JiZjVhMWFjNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZWVjNzBh LWFhOWYtNDJhZS04YWQ2LWI3YmJmNWExYWM3My8xLzVOWUk0UGVoQ0d5RVVkNWRZ M2hIdFNJWHE3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW+T5AwQAwgvvMA0EAgACMAcDBQMqFEgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHwTANBgkqhkiG9w0BAQsFAAOCAQEARwEv vn+btJfmamztOUqwQBiBJ5si3tUpRtDSFI6jB1jZdnGRWcDNg7iwsb2EZS2Y8MYG bM2VkL2u8mWEQla2zk/Cuj4X+H0P2zmcqAoQeDy1Iygt0AOFJWI9zH20OA2frFJh /jhhp9dK1YJpjO1jL/BfOzMVUDdZ6+AtLK6KDLq9f8JPwkmX9VUhgdcuqPo4AoJU 2jgikKU/S+VtvqdFhN48k5rMzKchGQWB3UfCX4K2HkVj2FPu4UWP+Q2vCTjKbCLK wvsufwVCTDjvCoNzOXM1mCB56eieTmD0ZOLUi7gEOXW0oKCzfVQ+ve10yD8b/bbG JHbHomITL3SAlY/MPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:21 2026 by rpki-client