This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.cer (raw, json) Hash identifier: tWAl31Qv8hlzljvlFlnLpgEjx7lH25C/BW6RviNKrEQ= Subject key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3809FF98E6CEE6FAE17C196E01542A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202900 IP: 91.142.142.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:09:ff:98:e6:ce:e6:fa:e1:7c:19:6e:01:54:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:66:26:7a:c3:51:cb:2d:28:5f:4a:92:c3: 8f:cf:33:61:35:6e:70:d1:11:65:b9:d9:eb:c8:50: cf:01:6b:c5:41:8b:e8:d8:ba:62:49:17:9b:4e:82: 0d:ba:c8:e9:5e:ba:ae:70:a2:16:eb:e1:b3:9b:29: 06:07:16:18:9d:bd:88:f6:92:8c:b5:ef:2d:57:b9: a2:af:a5:f9:48:b8:61:f4:e7:89:da:41:27:63:0c: a9:7c:8d:15:07:25:96:8b:f1:7e:9e:ed:4f:29:c2: da:1c:d2:be:73:38:e4:1e:b1:20:dd:96:6f:62:af: 5b:3e:4a:04:3c:4d:93:b5:5d:d2:aa:28:80:d9:0a: fd:5d:d8:af:87:16:6c:5d:99:7c:1f:f2:88:24:d5: 3d:8c:08:02:3e:57:11:2c:65:01:8c:58:2d:21:e7: 6c:32:eb:e5:3c:13:c7:8c:29:f4:d9:11:27:93:b5: 4a:07:4c:d7:4b:20:55:ce:06:aa:d9:1d:07:57:cc: 33:59:2e:3b:16:38:78:30:12:06:6f:ee:34:9b:91: 37:2b:b5:11:37:dd:fe:d7:b7:ca:46:c9:bc:bc:a1: 12:c1:9d:ba:8f:6a:bb:39:e5:27:56:1e:f5:88:71: 03:a2:fc:b3:66:3c:9b:eb:3d:27:c0:a3:36:91:94: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.142.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202900 Signature Algorithm: sha256WithRSAEncryption 68:c2:30:40:9e:58:a8:9e:a1:7d:67:06:58:0f:68:5a:40:3d: ce:bd:67:6d:5d:24:1a:56:5a:47:20:19:43:e7:e7:0d:2f:3f: 92:c6:45:ca:05:54:e2:0b:cc:af:32:40:e2:43:19:a3:b2:bc: 53:57:a3:4d:89:0c:fa:53:f2:5e:c7:ef:d7:43:48:73:80:9d: d9:aa:2b:cf:59:7f:ff:79:b4:28:2a:16:18:68:e3:27:65:10: c7:98:7e:ae:19:6e:34:58:45:ea:0c:fd:07:14:d5:b2:dd:53: ac:28:6d:ba:39:33:de:e9:ef:a1:b9:ec:35:75:10:76:55:11: 80:f6:d5:e4:8c:88:d6:43:39:0f:1c:e7:f5:f0:61:3f:74:ea: 19:4e:9e:ae:82:25:44:01:9e:ad:6d:93:24:1e:76:13:cd:76: 4a:59:de:cf:23:28:3e:b8:08:55:f9:03:f7:dc:b0:58:f3:63: 12:d8:67:85:dc:64:a4:84:4e:99:04:eb:11:f3:e5:b2:d7:1b: 43:5b:c4:8c:1a:ec:68:fa:c7:bc:fb:ed:3d:98:0a:3f:3e:7b: 35:97:bf:27:a7:0b:7e:97:ba:48:01:36:62:66:fe:94:8b:89: b3:97:67:7c:13:7e:12:70:8c:ee:bb:6b:03:a8:c4:13:b4:7e: 6c:20:a3:22 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OAn/mObO5vrhfBluAVQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGVmMTdmNGNiNGZlOTJhZDA1M2VlZjI1ZjM5ZDYzYWUxMjA3ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFBmJnrDUcstKF9KksOPzzNhNW5w 0RFludnryFDPAWvFQYvo2LpiSRebToINusjpXrqucKIW6+GzmykGBxYYnb2I9pKM te8tV7mir6X5SLhh9OeJ2kEnYwypfI0VByWWi/F+nu1PKcLaHNK+czjkHrEg3ZZv Yq9bPkoEPE2TtV3SqiiA2Qr9XdivhxZsXZl8H/KIJNU9jAgCPlcRLGUBjFgtIeds MuvlPBPHjCn02REnk7VKB0zXSyBVzgaq2R0HV8wzWS47Fjh4MBIGb+40m5E3K7UR N93+17fKRsm8vKESwZ26j2q7OeUnVh71iHEDovyzZjyb6z0nwKM2kZTYiQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOTvF/TLT+kq0FPu8l851jrhIH3TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzE1MDM1 NS1jMTFhLTRkMzctYTE4Mi0yMzc2MmFhMDk3MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMTUwMzU1 LWMxMWEtNGQzNy1hMTgyLTIzNzYyYWEwOTcxNy8xLzVPOFg5TXRQNlNyUVUtN3lY em5XT3VFZ2ZkTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW46OMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMYlDANBgkqhkiG9w0BAQsFAAOCAQEAaMIwQJ5YqJ6hfWcGWA9oWkA9zr1nbV0k GlZaRyAZQ+fnDS8/ksZFygVU4gvMrzJA4kMZo7K8U1ejTYkM+lPyXsfv10NIc4Cd 2aorz1l//3m0KCoWGGjjJ2UQx5h+rhluNFhF6gz9BxTVst1TrChtujkz3unvobns NXUQdlURgPbV5IyI1kM5Dxzn9fBhP3TqGU6eroIlRAGerW2TJB52E812SlnezyMo PrgIVfkD99ywWPNjEthnhdxkpIROmQTrEfPlstcbQ1vEjBrsaPrHvPvtPZgKPz57 NZe/J6cLfpe6SAE2Ymb+lIuJs5dnfBN+EnCM7rtrA6jEE7R+bCCjIg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:09 2026 by rpki-client