This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer (raw, json) Hash identifier: eKLREP8qzj6MSo6pvzoj7GHxGHAr76LCrfyWvMcx3Gs= Subject key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C806D1C2EEB4CE0F21C3D0E88860A4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39021 IP: 83.243.24.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6d:1c:2e:eb:4c:e0:f2:1c:3d:0e:88:86:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e578bc065072b40baf08416e216a1307b24bc44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:45:a1:c6:8b:ce:4e:0a:57:47:ad:ea:0a: 80:b6:8b:8a:38:75:da:8d:10:06:33:78:1f:0d:3e: ab:45:de:51:08:94:79:7c:70:bd:ce:fa:ee:a1:f7: ff:12:c5:5f:4c:8a:f3:ed:99:f8:60:96:f5:64:87: 59:d2:c3:cd:c3:45:9f:61:22:74:d2:8f:c6:e5:e5: ba:8d:7d:a1:20:d1:8c:ff:62:3b:42:b7:ae:42:f4: e1:6a:54:e9:4a:d3:83:80:55:c7:72:00:b4:23:3c: 1a:ef:2c:cc:d2:73:40:2c:6e:2f:ed:2d:45:2a:2b: cc:f4:f4:4e:7f:56:9d:5e:50:be:f3:88:e6:07:6d: a2:6e:ab:32:63:43:42:8c:02:d9:24:c9:38:71:a7: d9:f5:f0:38:05:f5:d6:48:97:fb:d7:90:3f:52:7f: 05:56:5d:48:c0:8e:26:ec:f1:1c:7e:23:b3:98:75: 0f:31:cd:ac:72:ad:9f:99:8d:61:d8:f0:03:8b:81: 58:0d:02:c4:1d:ad:dc:30:d5:ca:b2:3b:fb:9c:0c: b3:47:35:c2:bf:7b:c4:82:f2:86:97:70:68:c6:68: 40:b7:e6:e2:dd:7b:19:b8:ac:13:3b:51:28:12:8c: 41:1e:04:61:c7:ef:34:b7:83:49:14:3a:5f:ad:11: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.243.24.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39021 Signature Algorithm: sha256WithRSAEncryption b1:f3:b4:a7:94:0b:c6:75:a5:a2:7f:3b:35:d1:29:f4:6a:df: 65:1f:7b:66:10:97:60:9e:db:7c:95:23:19:e9:80:6e:6b:fb: 84:61:e0:59:c0:cf:17:cc:0b:2f:d6:93:1f:19:10:e5:f0:58: a8:ba:32:c1:56:16:48:a7:20:3c:95:89:86:da:f1:85:00:52: ea:9b:93:39:66:bc:73:06:ca:20:b5:a4:cd:e9:5e:b2:77:fb: 24:d8:d5:fc:fe:5b:32:d2:97:6a:cf:07:9a:3b:74:0b:79:ef: 53:1b:72:ba:95:d8:42:19:ce:4c:e3:fa:22:af:7c:fe:05:7d: cc:95:0a:d3:fb:1b:b4:3f:c5:9b:41:29:67:63:08:55:80:2e: 53:0f:0e:55:b1:71:64:a1:8a:37:d8:c6:b9:cb:22:0a:4c:64: 99:ef:a4:19:8a:8a:b5:9a:88:67:be:31:24:94:4f:6b:84:43: 38:2f:8c:df:69:f0:ea:2e:82:01:8b:fd:c9:75:f7:d0:d2:0d: 55:68:e2:36:94:7f:ec:f1:dc:06:eb:a1:23:38:c9:b6:bc:94: 33:16:bf:66:9d:d5:14:08:f1:51:8b:5b:c9:7a:c8:1f:45:ac: bd:2d:a2:98:4a:99:50:a6:b8:02:7a:35:b0:6a:70:87:71:30: f2:19:12:4f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gG0cLutM4PIcPQ6IhgpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTc4YmMwNjUwNzJiNDBiYWYwODQxNmUyMTZhMTMwN2IyNGJjNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4lFocaLzk4KV0et6gqAtouKOHXa jRAGM3gfDT6rRd5RCJR5fHC9zvruoff/EsVfTIrz7Zn4YJb1ZIdZ0sPNw0WfYSJ0 0o/G5eW6jX2hINGM/2I7QreuQvThalTpStODgFXHcgC0Izwa7yzM0nNALG4v7S1F KivM9PROf1adXlC+84jmB22ibqsyY0NCjALZJMk4cafZ9fA4BfXWSJf715A/Un8F Vl1IwI4m7PEcfiOzmHUPMc2scq2fmY1h2PADi4FYDQLEHa3cMNXKsjv7nAyzRzXC v3vEgvKGl3BoxmhAt+bi3XsZuKwTO1EoEoxBHgRhx+80t4NJFDpfrRH26QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOV4vAZQcrQLrwhBbiFqEweyS8RLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1Lzc5ZTU4 OS1hMmMyLTRiMGEtYmYxYS1mYmZmNjBjZmI5NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvNzllNTg5 LWEyYzItNGIwYS1iZjFhLWZiZmY2MGNmYjk2YS8xLzVYaThCbEJ5dEF1dkNFRnVJ V29UQjdKTHhFcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDU/MYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCYbTANBgkqhkiG9w0BAQsFAAOCAQEAsfO0p5QLxnWlon87NdEp9GrfZR97ZhCX YJ7bfJUjGemAbmv7hGHgWcDPF8wLL9aTHxkQ5fBYqLoywVYWSKcgPJWJhtrxhQBS 6puTOWa8cwbKILWkzelesnf7JNjV/P5bMtKXas8Hmjt0C3nvUxtyupXYQhnOTOP6 Iq98/gV9zJUK0/sbtD/Fm0EpZ2MIVYAuUw8OVbFxZKGKN9jGucsiCkxkme+kGYqK tZqIZ74xJJRPa4RDOC+M32nw6i6CAYv9yXX30NINVWjiNpR/7PHcBuuhIzjJtryU Mxa/Zp3VFAjxUYtbyXrIH0WsvS2imEqZUKa4Ano1sGpwh3Ew8hkSTw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:00 2026 by rpki-client