This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer File: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer (raw, json) Hash identifier: TDb+UsU9xCu4lCRPmo6R2iUMe0x1FhVjENquDAXp3eU= Subject key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79111E6908B8DA47B2631677B13E130D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207766 IP: 213.240.32.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1e:69:08:b8:da:47:b2:63:16:77:b1:3e:13:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:66:94:38:7c:b8:e5:9d:ba:05:45:f7:73: 83:46:84:30:63:1b:fe:8c:71:cf:24:0e:f0:48:bf: b7:48:2c:e5:ed:32:ef:93:f4:24:66:0b:ba:6a:3b: 73:b2:6a:ba:e3:0a:8f:05:7e:06:b9:ed:14:15:c3: a4:3f:4a:97:57:31:4b:bd:2c:45:c4:61:32:70:c2: 75:31:6e:59:80:bb:ca:76:43:1e:28:79:fe:b4:46: 4a:22:1e:c0:f0:0f:7f:03:4f:b9:ac:19:af:55:48: 63:9a:07:04:b1:d0:08:ca:36:7b:27:48:00:ad:67: 09:eb:1c:75:6f:25:c8:7b:0d:cf:7a:89:08:47:97: 56:8c:05:b6:8e:20:ce:d6:31:bb:f0:ab:88:78:83: 40:94:98:d4:09:f6:75:13:c9:3d:06:8f:36:e5:a4: 79:82:e6:4f:63:ea:0d:6f:db:11:fa:8b:9a:81:e8: ce:07:e1:70:25:57:e7:36:dd:0d:4c:7c:b9:72:e5: 0b:f1:af:f3:6c:cc:82:8a:29:e6:1d:74:8d:47:58: 6b:11:27:cb:60:6c:e1:51:dd:6c:fa:ea:19:2d:e0: e4:36:bf:28:6a:26:9a:1e:ff:ec:5a:ca:e5:d2:5b: 15:28:c1:66:82:9e:19:53:fa:b9:e5:4c:a5:bc:fb: d0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.240.32.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207766 Signature Algorithm: sha256WithRSAEncryption 54:da:c7:c1:3d:ff:f4:52:2f:6f:b9:bc:7c:49:00:09:61:af: 12:8a:60:2f:93:71:11:aa:6f:4a:9f:db:ae:5b:4e:a5:c6:c4: 67:d8:2d:d1:2c:f4:9b:75:a5:f4:92:a2:61:90:74:f4:05:98: da:10:02:56:67:e9:c1:0f:83:7b:7a:9a:d6:0f:fd:a4:63:ee: d2:f9:33:76:cf:79:fb:f5:7f:9f:81:62:2c:cc:92:ec:d0:52: 07:97:32:13:7f:74:49:1c:ec:1b:8e:b2:23:86:a8:80:82:38: ab:77:20:58:7a:96:87:ab:28:f2:fe:45:e9:9c:5f:89:01:ca: 46:f2:ec:6a:e7:48:fc:b4:1c:3e:1e:88:12:0c:da:10:24:46: ad:c0:47:ae:9e:8d:11:a6:da:f5:2d:4c:2c:7f:a3:2f:18:fb: 51:87:de:09:c9:1e:aa:c8:88:f2:f8:2e:7e:55:7c:1f:9e:e8: 31:3b:be:d3:36:2c:26:cf:78:98:35:33:32:74:c3:e3:bc:9e: 78:68:13:f4:f3:82:b2:32:b0:ee:88:ce:8b:22:58:45:b3:d9: 82:a0:ea:8b:97:4a:ab:3e:c5:da:d5:d4:00:4f:c3:ef:12:3d: 3b:c8:50:27:de:76:f5:10:ad:1a:0f:2b:8b:0d:9e:40:07:da: 34:83:cc:f0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ER5pCLjaR7JjFnexPhMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTJjYjg1Y2E3OTNmYWQ1NjViNDYwOGUyNmQ4MmE2YWUyN2RjMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfhmlDh8uOWdugVF93ODRoQwYxv+ jHHPJA7wSL+3SCzl7TLvk/QkZgu6ajtzsmq64wqPBX4Gue0UFcOkP0qXVzFLvSxF xGEycMJ1MW5ZgLvKdkMeKHn+tEZKIh7A8A9/A0+5rBmvVUhjmgcEsdAIyjZ7J0gA rWcJ6xx1byXIew3PeokIR5dWjAW2jiDO1jG78KuIeINAlJjUCfZ1E8k9Bo825aR5 guZPY+oNb9sR+ouagejOB+FwJVfnNt0NTHy5cuUL8a/zbMyCiinmHXSNR1hrESfL YGzhUd1s+uoZLeDkNr8oaiaaHv/sWsrl0lsVKMFmgp4ZU/q55UylvPvQNQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOUsuFynk/rVZbRgjibYKmrifcIyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzk1YmFk OS0yMGZlLTRiOGQtOGYwMy05YzI5OTlkMDliOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTViYWQ5 LTIwZmUtNGI4ZC04ZjAzLTljMjk5OWQwOWI4Zi8xLzVTeTRYS2VULXRWbHRHQ09K dGdxYXVKOXdqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1fAgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMrljANBgkqhkiG9w0BAQsFAAOCAQEAVNrHwT3/9FIvb7m8fEkACWGvEopgL5Nx EapvSp/brltOpcbEZ9gt0Sz0m3Wl9JKiYZB09AWY2hACVmfpwQ+De3qa1g/9pGPu 0vkzds95+/V/n4FiLMyS7NBSB5cyE390SRzsG46yI4aogII4q3cgWHqWh6so8v5F 6ZxfiQHKRvLsaudI/LQcPh6IEgzaECRGrcBHrp6NEaba9S1MLH+jLxj7UYfeCcke qsiI8vguflV8H57oMTu+0zYsJs94mDUzMnTD47yeeGgT9POCsjKw7ojOiyJYRbPZ gqDqi5dKqz7F2tXUAE/D7xI9O8hQJ9529RCtGg8riw2eQAfaNIPM8A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:48 2026 by rpki-client