This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer (raw, json) Hash identifier: MdE8keBSPoSIAl5RDhctkCVMNCAaTFEsYhLKZv27Ci4= Subject key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834AD86400A90684934E7E0C019A5DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1890 IP: 193.67.0.0/16 IP: 193.78.0.0/15 IP: 194.178.0.0/16 IP: 194.229.0.0/16 IP: 194.247.96.0/19 IP: 195.108.0.0/15 IP: 195.193.0.0/16 IP: 212.136.0.0/16 IP: 212.153.0.0/16 IP: 212.206.0.0/16 IP: 213.53.0.0/16 IP: 2a02:2aa8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ad:86:40:0a:90:68:49:34:e7:e0:c0:19:a5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e57731ea857b903aa40a8e5fd8d88446505b5233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:c9:d7:ea:dd:a0:e0:b6:d1:57:71:20:66: 51:34:97:8c:64:82:62:9f:6d:bf:f3:95:0d:10:bc: 57:5e:da:98:99:7b:80:73:5e:3b:7c:d5:50:76:79: ab:96:8b:17:97:38:a3:9f:a5:81:63:2c:10:72:6b: e2:cd:74:e7:79:b7:1e:0c:19:a7:98:57:8a:21:45: 1f:b8:7c:1c:59:1c:13:ff:0d:24:5b:e5:00:61:53: d6:75:8e:2d:48:4e:7c:96:19:20:ad:f4:0a:34:19: 72:c9:97:81:e8:4f:e0:af:4c:19:ae:d0:fe:ea:5e: 64:ce:8b:24:a1:bf:31:31:77:2e:fe:8c:92:e5:19: bc:a5:e6:e7:b3:7e:bd:cb:8c:2c:11:68:d8:c9:bd: b7:55:f9:e1:13:f1:0a:62:5f:d1:7d:79:4e:63:40: c6:32:92:36:74:9f:46:3e:b7:26:52:72:b8:01:f9: 9b:34:ad:e4:43:05:38:44:8d:59:dd:eb:a3:4e:de: ca:bb:d1:d2:c0:b3:bd:0e:fc:22:0d:da:db:76:0b: 5b:56:11:bd:c6:6a:5d:7f:0a:4e:ca:1e:10:f4:b3: bd:ed:f7:24:1d:54:b8:7e:10:4e:e4:62:e3:ab:77: 97:f8:0b:0a:ad:bc:ad:1d:2c:67:89:bb:70:47:e2: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.67.0.0/16 193.78.0.0/15 194.178.0.0/16 194.229.0.0/16 194.247.96.0/19 195.108.0.0/15 195.193.0.0/16 212.136.0.0/16 212.153.0.0/16 212.206.0.0/16 213.53.0.0/16 IPv6: 2a02:2aa8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1890 Signature Algorithm: sha256WithRSAEncryption 4c:5a:31:cf:1e:16:3f:3e:84:6e:4e:a1:12:06:1e:e6:ee:7e: 4e:17:04:40:4f:fd:53:4a:41:6c:1d:34:b5:43:66:96:39:ff: 17:94:f3:21:8f:1a:75:47:3a:40:12:29:0f:ae:e7:55:88:d9: 56:d8:a4:56:a1:3b:53:dc:69:11:e2:b1:bf:6a:55:45:1d:8d: 34:c0:59:83:2f:dc:de:03:1a:8b:c3:c2:83:51:3b:e5:92:24: 79:f4:5e:9d:4e:53:cb:c0:74:8c:b8:6f:09:1d:18:32:97:74: fe:d3:6e:d3:91:17:56:a4:ab:4d:b3:c6:fa:66:c5:5d:8a:96: 06:75:72:c7:4d:3c:0c:be:59:eb:4e:81:0a:c7:65:96:37:56: f5:36:7f:f7:63:2d:aa:0c:ab:89:74:4b:e6:6b:78:f1:60:fc: 90:d5:af:ec:75:dd:3f:c6:07:e6:20:9b:3a:95:c5:6e:4f:97: 92:50:43:85:88:83:e9:94:ec:95:a7:a6:88:b5:dc:a3:1d:07: a3:92:89:3b:da:18:8d:b6:07:f9:c9:45:53:ed:41:25:81:24: 54:63:5f:1d:93:11:b4:a0:d9:d4:78:8b:e3:f4:35:c4:d4:d2: 52:46:d5:9b:cc:0e:93:52:e4:64:09:1a:8b:97:76:b2:d1:16: 36:40:df:a6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt4NK2GQAqQaEk05+DAGaXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTc3MzFlYTg1N2I5MDNhYTQwYThlNWZkOGQ4ODQ0NjUwNWI1MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/J1+rdoOC20VdxIGZRNJeMZIJi n22/85UNELxXXtqYmXuAc147fNVQdnmrlosXlzijn6WBYywQcmvizXTnebceDBmn mFeKIUUfuHwcWRwT/w0kW+UAYVPWdY4tSE58lhkgrfQKNBlyyZeB6E/gr0wZrtD+ 6l5kzoskob8xMXcu/oyS5Rm8pebns369y4wsEWjYyb23VfnhE/EKYl/RfXlOY0DG MpI2dJ9GPrcmUnK4AfmbNK3kQwU4RI1Z3eujTt7Ku9HSwLO9DvwiDdrbdgtbVhG9 xmpdfwpOyh4Q9LO97fckHVS4fhBO5GLjq3eX+AsKrbytHSxnibtwR+J8OQIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFOV3MeqFe5A6pAqOX9jYhEZQW1IzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FmYmI2 Mi0wMDk4LTQyYjMtODFhZS1mMGJiMmUxNWY2ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWZiYjYy LTAwOTgtNDJiMy04MWFlLWYwYmIyZTE1ZjZkMC8xLzVYY3g2b1Y3a0Rxa0NvNWYy TmlFUmxCYlVqTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzA+BAIAATA4AwMAwUMDAwHBTgMDAMKyAwMAwuUDBAXC92ADAwHD bAMDAMPBAwMA1IgDAwDUmQMDANTOAwMA1TUwDQQCAAIwBwMFAyoCKqgwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICB2IwDQYJKoZIhvcNAQELBQADggEBAExaMc8eFj8+ hG5OoRIGHubufk4XBEBP/VNKQWwdNLVDZpY5/xeU8yGPGnVHOkASKQ+u51WI2VbY pFahO1PcaRHisb9qVUUdjTTAWYMv3N4DGovDwoNRO+WSJHn0Xp1OU8vAdIy4bwkd GDKXdP7TbtORF1akq02zxvpmxV2KlgZ1csdNPAy+WetOgQrHZZY3VvU2f/djLaoM q4l0S+ZrePFg/JDVr+x13T/GB+YgmzqVxW5Pl5JQQ4WIg+mU7JWnpoi13KMdB6OS iTvaGI22B/nJRVPtQSWBJFRjXx2TEbSg2dR4i+P0NcTU0lJG1ZvMDpNS5GQJGouX drLRFjZA36Y= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:39 2026 by rpki-client