This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer File: 5UHTgH6p2K1130eFWJlQnubzKCA.cer (raw, json) Hash identifier: hpZwo2yabPaIJ1vF3yY8iOABfgxt95+62aaOM94wCco= Subject key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA45ADF67D6D37957533E52E3BA4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211314 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a4:5a:df:67:d6:d3:79:57:53:3e:52:e3:ba:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e541d3807ea9d8ad75df47855899509ee6f32820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:fb:6b:46:2b:b6:73:3a:40:3d:6c:b8:ba: 5f:50:de:d9:d8:77:3c:fd:6d:11:de:c5:ca:03:a2: 0b:c8:8d:23:c3:20:26:ca:d7:de:83:3f:f7:94:89: 2c:af:30:1d:f9:ff:45:06:28:65:7c:21:d9:38:65: e4:64:fe:19:21:8a:6a:42:a2:87:53:43:00:91:aa: 66:b1:d0:b9:40:5d:31:be:3b:3f:99:bc:9d:f9:19: 9c:2e:94:bf:b6:88:94:5d:11:fb:c2:d1:5c:01:ad: 6d:fc:41:a6:9a:04:b6:a8:26:36:94:24:ad:1e:c4: 92:5b:88:60:39:89:7b:6e:da:4e:78:ca:7f:ee:b2: 60:c7:18:a1:ac:60:d3:a9:0b:1e:a0:f3:1f:2e:2f: 97:ea:4c:27:c6:5c:57:90:38:3e:11:24:73:c7:39: ce:08:43:e2:c9:c6:bd:bd:a5:58:49:61:ff:63:df: 65:ca:34:89:75:6c:fc:30:2d:fc:81:96:82:7f:98: b3:04:86:ca:5e:1a:d1:3e:1c:c8:f8:6d:13:4e:48: a5:d3:1a:10:0b:5f:47:9a:ef:c3:c6:89:4e:33:2d: 45:b3:7b:32:8e:16:9d:09:98:15:cf:1b:dd:34:a9: 61:5b:f3:f9:33:ec:d6:80:04:e2:03:77:a5:de:61: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211314 Signature Algorithm: sha256WithRSAEncryption 53:56:2b:1d:36:5e:c8:bd:8a:e2:15:83:bb:2f:40:71:5f:1d: 76:7a:e0:fe:55:dc:43:08:99:82:77:06:57:29:c8:2c:bb:e6: ff:bc:11:05:e9:8c:64:3a:a1:f4:0b:bd:28:88:fb:c9:33:ee: 42:af:74:69:26:e3:88:f5:e2:b3:a8:9d:71:f1:61:8e:bf:6b: 57:db:02:df:5d:c6:aa:92:16:fb:7c:d5:6d:ad:18:15:36:9d: 73:3a:ae:9a:d7:f3:a6:d7:17:dc:c0:dc:dc:9f:b7:c6:f0:41: d7:7b:f6:73:1c:45:c0:1f:c5:4d:54:a1:2a:62:93:61:14:6c: 90:bb:0b:da:e7:38:12:dd:b5:99:c2:27:b4:58:76:e8:44:17: 50:d9:2d:32:cb:4e:a1:8c:4d:ce:a4:c9:8d:23:e9:96:b5:83: 78:88:e9:f9:3a:d3:75:4c:a2:5c:b9:72:96:7c:b3:7b:28:79: 7e:ca:60:93:60:5b:ec:53:8d:dd:02:43:c1:11:09:a3:7b:30: d7:ca:0b:5b:0e:ab:20:7f:b9:3b:d9:fa:66:b7:c5:f0:23:a2: 38:fd:c7:0c:d2:dc:dd:86:05:f8:c8:c0:27:44:e0:52:94:80: d6:22:e1:5f:35:76:ac:1d:e4:a7:70:82:a2:15:49:41:8d:77: 60:b8:68:c6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57KRa32fW03lXUz5S47pLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQxZDM4MDdlYTlkOGFkNzVkZjQ3ODU1ODk5NTA5ZWU2ZjMyODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qn7a0YrtnM6QD1suLpfUN7Z2Hc8 /W0R3sXKA6ILyI0jwyAmytfegz/3lIksrzAd+f9FBihlfCHZOGXkZP4ZIYpqQqKH U0MAkapmsdC5QF0xvjs/mbyd+RmcLpS/toiUXRH7wtFcAa1t/EGmmgS2qCY2lCSt HsSSW4hgOYl7btpOeMp/7rJgxxihrGDTqQseoPMfLi+X6kwnxlxXkDg+ESRzxznO CEPiyca9vaVYSWH/Y99lyjSJdWz8MC38gZaCf5izBIbKXhrRPhzI+G0TTkil0xoQ C19Hmu/DxolOMy1Fs3syjhadCZgVzxvdNKlhW/P5M+zWgATiA3el3mHlzwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOVB04B+qditdd9HhViZUJ7m8yggMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzJiYWU1 MC1mYWNhLTRkNGUtYWUzOC0yZDA3N2I3ODJjNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMmJhZTUw LWZhY2EtNGQ0ZS1hZTM4LTJkMDc3Yjc4MmM3Mi8xLzVVSFRnSDZwMksxMTMwZUZX SmxRbnViektDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5cjANBgkqhkiG9w0BAQsFAAOCAQEAU1YrHTZeyL2K 4hWDuy9AcV8ddnrg/lXcQwiZgncGVynILLvm/7wRBemMZDqh9Au9KIj7yTPuQq90 aSbjiPXis6idcfFhjr9rV9sC313GqpIW+3zVba0YFTadczqumtfzptcX3MDc3J+3 xvBB13v2cxxFwB/FTVShKmKTYRRskLsL2uc4Et21mcIntFh26EQXUNktMstOoYxN zqTJjSPplrWDeIjp+TrTdUyiXLlylnyzeyh5fspgk2Bb7FON3QJDwREJo3sw18oL Ww6rIH+5O9n6ZrfF8COiOP3HDNLc3YYF+MjAJ0TgUpSA1iLhXzV2rB3kp3CCohVJ QY13YLhoxg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:01 2026 by rpki-client