This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer File: 5QxErpgedJLTuiHihHIIAYA5jWQ.cer (raw, json) Hash identifier: QUXC0T19I/A9hQHoELugbG0ZBuxjixtCaThDcJvdcMk= Subject key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3810AF46E10F0B011A1BA11B2EB8F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20932 AS: 39381 IP: 185.68.204.0/22 IP: 194.11.221.0/24 IP: 194.147.245.0/24 IP: 217.169.128.0/19 IP: 2001:67c:2fe0::/48 IP: 2001:41e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:10:af:46:e1:0f:0b:01:1a:1b:a1:1b:2e:b8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e50c44ae981e7492d3ba21e28472080180398d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:e7:bc:97:52:7b:4b:30:f6:d6:b7:cf:a1: 60:7e:46:42:01:84:33:d9:47:2c:dc:84:ba:55:51: c0:a4:56:cb:f2:95:9d:56:c0:de:54:55:be:88:1f: 81:76:94:92:c2:13:8b:d4:cd:52:15:82:88:64:8e: 8b:c7:4b:31:79:08:ac:4a:53:f1:d8:42:74:c6:b2: bc:d1:24:8a:4a:87:bf:b1:8d:c8:7b:7b:54:12:bb: d8:3a:8c:69:67:5d:a8:c7:fb:27:4b:b0:c1:e0:16: 27:46:1c:4a:ae:54:2a:0b:c9:60:a1:28:d1:95:16: 82:93:25:87:1d:c6:47:72:b6:b9:87:b5:96:65:b5: 7d:29:e7:8e:87:43:1a:bc:0c:41:44:f1:1b:31:57: 30:cd:b8:b8:fc:09:b1:68:42:34:56:78:db:93:2a: cc:e9:14:e7:8e:d9:41:c5:75:c0:9a:ec:32:a9:ec: 5e:b1:57:68:2e:33:3a:a4:ce:50:71:f5:38:68:2a: b6:0e:02:ab:5c:6a:d0:eb:3d:f2:0d:07:05:95:99: 7b:28:46:ec:bd:91:c9:1f:df:df:15:53:b8:db:8b: 20:0a:3b:ea:35:04:67:47:3e:04:e9:1e:7b:f1:e4: bf:76:6d:87:dd:53:01:e0:b8:2d:d9:6a:c2:42:f0: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.204.0/22 194.11.221.0/24 194.147.245.0/24 217.169.128.0/19 IPv6: 2001:67c:2fe0::/48 2001:41e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20932 39381 Signature Algorithm: sha256WithRSAEncryption 8a:76:87:74:a9:4c:91:44:9b:ca:4f:ab:13:20:1a:98:d0:f0: 6e:bf:ce:f0:7e:2d:36:0d:75:f7:8c:1d:54:d7:a7:4c:08:4a: cc:d1:f9:62:22:74:24:61:f2:6c:95:8e:10:ac:4b:4e:59:fe: 64:3f:0a:7a:57:7f:66:93:7c:5e:3c:6a:68:38:41:da:9e:09: 47:70:12:cb:e8:ac:78:81:f6:95:0c:8f:e5:6d:93:f2:17:c7: 48:4c:2d:de:62:4c:8c:09:24:51:2f:6f:bb:4b:5b:db:37:02: 5d:83:5a:43:84:43:b0:2f:5b:26:8d:e0:c7:58:ce:57:3d:e5: da:99:1b:b7:b3:6d:40:b7:50:6d:a3:ae:80:41:2f:8b:31:fe: 10:7c:46:c9:d9:07:9f:42:45:b6:f5:98:2f:c8:48:70:47:73: f8:44:5b:39:90:24:cb:95:e6:aa:fd:b3:c4:21:b1:96:91:41: c1:c8:95:95:91:e0:67:31:4e:8e:41:05:7b:a0:d0:50:a8:ed: 61:21:e8:04:a5:e2:31:3d:27:5f:3f:63:5e:d3:3d:7e:23:06: da:86:c6:91:40:74:47:67:ad:02:59:f9:1f:55:94:21:54:17: d2:4c:59:58:45:b7:ff:fa:c7:24:4c:c6:8b:81:0b:7e:a6:2e: 09:f9:51:43 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt+OBCvRuEPCwEaG6EbLrjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTBjNDRhZTk4MWU3NDkyZDNiYTIxZTI4NDcyMDgwMTgwMzk4ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1evnvJdSe0sw9ta3z6FgfkZCAYQz 2Ucs3IS6VVHApFbL8pWdVsDeVFW+iB+BdpSSwhOL1M1SFYKIZI6Lx0sxeQisSlPx 2EJ0xrK80SSKSoe/sY3Ie3tUErvYOoxpZ12ox/snS7DB4BYnRhxKrlQqC8lgoSjR lRaCkyWHHcZHcra5h7WWZbV9KeeOh0MavAxBRPEbMVcwzbi4/AmxaEI0VnjbkyrM 6RTnjtlBxXXAmuwyqexesVdoLjM6pM5QcfU4aCq2DgKrXGrQ6z3yDQcFlZl7KEbs vZHJH9/fFVO424sgCjvqNQRnRz4E6R578eS/dm2H3VMB4Lgt2WrCQvAUfQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFOUMRK6YHnSS07oh4oRyCAGAOY1kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzIyNjAx OC0wZTA2LTQzNWUtYWJmZC1mNWZmZWUxNzIwYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMjI2MDE4 LTBlMDYtNDM1ZS1hYmZkLWY1ZmZlZTE3MjBjMS8xLzVReEVycGdlZEpMVHVpSGlo SElJQVlBNWpXUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODAeBAIAATAYAwQCuUTMAwQAwgvdAwQAwpP1AwQF2amAMBYEAgAC MBADBwAgAQZ8L+ADBQAgAUHgMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlHEAgMA mdUwDQYJKoZIhvcNAQELBQADggEBAIp2h3SpTJFEm8pPqxMgGpjQ8G6/zvB+LTYN dfeMHVTXp0wISszR+WIidCRh8myVjhCsS05Z/mQ/CnpXf2aTfF48amg4QdqeCUdw EsvorHiB9pUMj+Vtk/IXx0hMLd5iTIwJJFEvb7tLW9s3Al2DWkOEQ7AvWyaN4MdY zlc95dqZG7ezbUC3UG2jroBBL4sx/hB8RsnZB59CRbb1mC/ISHBHc/hEWzmQJMuV 5qr9s8QhsZaRQcHIlZWR4GcxTo5BBXug0FCo7WEh6ASl4jE9J18/Y17TPX4jBtqG xpFAdEdnrQJZ+R9VlCFUF9JMWVhFt//6xyRMxouBC36mLgn5UUM= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:53 2026 by rpki-client