This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.cer (raw, json) Hash identifier: eBbPtDhd/P5CAfnvK7/vB8ysx5Yh5XZV8YFy3TpBh6M= Subject key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34E0E606DF60D2EE5DDE172B21F17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48807 AS: 200725 IP: 185.1.67.0/24 IP: 185.90.144.0/22 IP: 2001:7f8:5c::/48 IP: 2a05:e240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4e:0e:60:6d:f6:0d:2e:e5:dd:e1:72:b2:1f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:b4:9b:5d:d2:b4:79:aa:19:ab:3e:b0:01: 11:a2:f2:cd:26:82:14:de:6c:76:9c:f0:24:c5:f8: c7:5a:83:f7:68:ea:30:db:f5:e1:10:a9:9b:3a:e2: a3:e6:38:a7:a2:ba:e4:ab:bf:48:e4:4e:59:e5:90: 28:81:85:ac:71:02:e9:db:53:96:51:54:e2:42:82: 52:a3:43:a4:b0:a1:5c:bf:13:60:8c:bf:fd:9f:15: b2:09:e5:2a:dc:69:d4:71:c5:80:8f:40:1a:e1:fd: 84:9a:92:5e:b1:35:ea:90:bb:bb:15:7f:21:62:9d: 71:8e:cb:5c:fd:fa:7a:31:98:6f:bd:31:5f:1c:91: 04:f0:db:bc:08:90:13:79:ec:b9:3e:94:03:55:58: 3c:6f:84:ce:41:1d:93:83:02:80:52:39:23:ca:e6: 8e:17:3f:07:a6:6c:26:4b:81:9d:96:9c:bb:09:a4: c2:53:80:3d:9e:4a:cc:fa:70:d1:dc:11:b4:c1:ab: 32:7f:15:0b:49:c5:77:d3:11:8e:62:3d:fd:ae:ad: 70:0c:b2:24:d0:ce:ef:eb:15:37:f6:f7:7c:51:21: 0a:02:90:46:43:90:d3:42:84:c0:04:2b:e8:a6:b3: aa:4a:af:13:6f:d4:11:47:2b:e8:3f:4b:37:ed:c5: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.67.0/24 185.90.144.0/22 IPv6: 2001:7f8:5c::/48 2a05:e240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48807 200725 Signature Algorithm: sha256WithRSAEncryption 2d:9a:33:93:1b:dd:46:7e:b8:34:31:bf:ef:fb:5c:c5:bb:ba: ae:55:0d:6c:29:0c:c7:71:2f:90:2a:22:a2:a2:c5:db:c2:49: f4:1b:7f:dd:88:6c:32:4e:90:65:69:89:89:21:0f:30:db:df: cf:4a:7c:07:45:2a:74:86:79:4e:65:2c:43:2d:b8:49:08:14: 2d:9f:da:8c:e8:91:4c:60:b2:a1:61:1a:b3:de:e5:fe:d4:73: 35:da:31:a1:97:b7:86:62:99:b5:66:8b:a7:7e:ba:33:ea:31: 22:e0:33:8c:3c:3e:65:69:25:6a:96:ac:7a:c7:9d:02:18:12: 04:6e:0b:23:3c:11:e5:12:6c:08:64:df:d0:31:a4:5f:df:95: a6:2b:c7:fd:1a:e8:24:6d:e4:91:ef:c1:2d:1d:57:f8:50:f0: 0e:3c:df:e5:30:b2:b5:29:64:1f:6f:ca:6e:f1:e3:5c:0a:13: b7:87:fe:7a:8a:ab:b3:43:db:f5:f2:7e:1e:9c:59:25:b7:58: f3:7d:b0:d2:b2:be:f5:67:34:71:cf:2f:d9:7b:01:1c:6f:0b: 5a:7b:03:8a:df:4e:d9:15:bc:43:fc:26:10:a0:4f:51:9b:2c: e2:ff:4c:ae:4d:68:87:ce:7f:ee:80:df:12:97:ca:5e:25:b8: dc:a5:7b:cb -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt4o04OYG32DS7l3eFysh8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGYyYTg2NjIwMmY0YjhjYmMzMzM4MmQ2ZTgyZDgxZDg5NjRjODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApge0m13StHmqGas+sAERovLNJoIU 3mx2nPAkxfjHWoP3aOow2/XhEKmbOuKj5jinorrkq79I5E5Z5ZAogYWscQLp21OW UVTiQoJSo0OksKFcvxNgjL/9nxWyCeUq3GnUccWAj0Aa4f2EmpJesTXqkLu7FX8h Yp1xjstc/fp6MZhvvTFfHJEE8Nu8CJATeey5PpQDVVg8b4TOQR2TgwKAUjkjyuaO Fz8HpmwmS4Gdlpy7CaTCU4A9nkrM+nDR3BG0wasyfxULScV30xGOYj39rq1wDLIk 0M7v6xU39vd8USEKApBGQ5DTQoTABCvoprOqSq8Tb9QRRyvoP0s37cXL7wIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFOTyqGYgL0uMvDM4LW6C2B2JZMgOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3Lzg3OTFh MS1lNjc5LTQ2NjMtYTJkYS0xYTUxM2RmMDY5ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvODc5MWEx LWU2NzktNDY2My1hMmRhLTFhNTEzZGYwNjlmYy8xLzVQS29aaUF2UzR5OE16Z3Ri b0xZSFlsa3lBNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQAuQFDAwQCuVqQMBYEAgACMBADBwAgAQf4AFwD BQMqBeJAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC+pwIDAxAVMA0GCSqGSIb3 DQEBCwUAA4IBAQAtmjOTG91Gfrg0Mb/v+1zFu7quVQ1sKQzHcS+QKiKiosXbwkn0 G3/diGwyTpBlaYmJIQ8w29/PSnwHRSp0hnlOZSxDLbhJCBQtn9qM6JFMYLKhYRqz 3uX+1HM12jGhl7eGYpm1Zounfroz6jEi4DOMPD5laSVqlqx6x50CGBIEbgsjPBHl EmwIZN/QMaRf35WmK8f9GugkbeSR78EtHVf4UPAOPN/lMLK1KWQfb8pu8eNcChO3 h/56iquzQ9v18n4enFklt1jzfbDSsr71ZzRxzy/ZewEcbwtaewOK307ZFbxD/CYQ oE9Rmyzi/0yuTWiHzn/ugN8Sl8peJbjcpXvL -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:41 2026 by rpki-client