This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer File: 5YW66mL41gYmJIc4xF370iFzf0w.cer (raw, json) Hash identifier: /ElFC50hWtR/tXDZgcdHO6WGaQ0K2J6GQwJsASS8oVs= Subject key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FEF043A5DEAB908C90DFB58AB72E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200460 IP: 185.97.32.0/22 IP: 2a00:66c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ef:04:3a:5d:ea:b9:08:c9:0d:fb:58:ab:72:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e585baea62f8d60626248738c45dfbd221737f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b6:a0:0a:74:f2:58:c9:37:8f:e1:71:82:e6: 38:85:32:cd:a7:7b:b8:40:2b:80:65:58:e2:e5:6d: e2:e5:7b:ed:f3:ed:80:6f:bd:40:5a:04:f3:2b:05: 4e:03:8b:b1:4f:4b:34:99:ef:38:9c:d4:77:92:f8: b5:62:2c:35:c7:ac:01:d3:6f:f5:21:08:06:d2:e1: a4:f8:33:4f:43:ef:c1:b3:78:cd:64:ef:a7:14:bf: a3:e2:64:a0:e7:28:3d:8f:fc:2c:df:4f:82:be:6f: 3c:1c:e0:30:cc:6d:50:73:95:78:cb:f0:41:25:09: 40:0d:01:da:0f:ea:01:24:14:ad:28:5f:51:3c:35: de:7b:57:80:08:2b:30:9b:42:7a:54:c8:47:43:85: bb:26:e2:9d:b6:82:2e:de:9d:64:93:80:7a:d5:c6: fe:7e:2d:db:3c:c1:5b:ce:26:40:b8:eb:b0:49:b2: c8:c2:b3:ca:bb:35:67:e3:c4:d8:c3:72:59:d4:07: 91:20:df:a7:4a:ec:64:a6:2b:d7:9c:17:d6:cc:76: d1:fb:85:32:ef:05:cf:c5:7e:33:3a:00:61:c8:f2: 2f:9e:0e:f6:24:1c:8f:99:f2:6e:a6:a3:16:77:be: 6a:09:f5:d0:de:1e:09:c5:44:0b:68:1e:f2:41:75: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.32.0/22 IPv6: 2a00:66c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200460 Signature Algorithm: sha256WithRSAEncryption 73:00:05:63:74:52:f1:4c:5e:8b:66:90:93:f3:14:3f:70:fb: 5a:c3:cf:79:c0:a4:f8:a6:b5:a7:cc:2c:b7:24:fe:7f:3c:f2: d1:8b:d6:39:40:e4:05:fb:36:a0:eb:d6:53:57:81:ad:c0:3f: 50:1f:3b:cb:a1:7b:9d:93:64:6d:1b:dd:73:ef:de:d3:d8:c2: 0a:d5:e2:81:42:36:0a:ed:6d:69:21:f9:0f:c6:c2:49:5e:5e: 77:79:53:1b:fa:8a:c3:63:5c:23:36:03:77:d0:41:7e:3b:a3: 1a:55:50:b1:eb:b5:84:a0:f5:80:8e:68:da:77:1f:53:4f:5d: 31:e3:8d:58:29:74:d3:07:50:f0:e8:2a:bf:54:3a:1b:1d:06: e8:29:a9:c7:a3:2e:8f:66:09:c9:e7:c6:b4:9e:db:bf:93:5b: c5:3c:48:f6:a4:be:14:13:fd:98:1f:06:6c:71:e3:aa:01:46: 9b:42:8a:89:3b:d1:5c:57:41:cb:25:58:6f:1f:24:56:26:83: 06:6e:d3:20:35:36:37:63:1d:b5:9c:71:9c:30:a1:64:8f:4d: f7:98:b6:f8:3a:f5:89:e4:43:d8:66:df:0f:a1:6e:99:6d:83: 7b:2e:45:99:3a:5c:0a:15:a9:fa:2e:06:37:d1:55:56:5e:da: d1:e3:83:46 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f+8EOl3quQjJDftYq3LkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTg1YmFlYTYyZjhkNjA2MjYyNDg3MzhjNDVkZmJkMjIxNzM3ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbagCnTyWMk3j+FxguY4hTLNp3u4 QCuAZVji5W3i5Xvt8+2Ab71AWgTzKwVOA4uxT0s0me84nNR3kvi1Yiw1x6wB02/1 IQgG0uGk+DNPQ+/Bs3jNZO+nFL+j4mSg5yg9j/ws30+Cvm88HOAwzG1Qc5V4y/BB JQlADQHaD+oBJBStKF9RPDXee1eACCswm0J6VMhHQ4W7JuKdtoIu3p1kk4B61cb+ fi3bPMFbziZAuOuwSbLIwrPKuzVn48TYw3JZ1AeRIN+nSuxkpivXnBfWzHbR+4Uy 7wXPxX4zOgBhyPIvng72JByPmfJupqMWd75qCfXQ3h4JxUQLaB7yQXVB4wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOWFuupi+NYGJiSHOMRd+9Ihc39MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2JkYTNl Zi00YTJmLTRjY2MtYjI5NS1iMjJlYjk0ODUxNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYmRhM2Vm LTRhMmYtNGNjYy1iMjk1LWIyMmViOTQ4NTE1Yy8xLzVZVzY2bUw0MWdZbUpJYzR4 RjM3MGlGemYwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWEgMA0EAgACMAcDBQAqAGbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPDDANBgkqhkiG9w0BAQsFAAOCAQEAcwAFY3RS8Uxe i2aQk/MUP3D7WsPPecCk+Ka1p8wstyT+fzzy0YvWOUDkBfs2oOvWU1eBrcA/UB87 y6F7nZNkbRvdc+/e09jCCtXigUI2Cu1taSH5D8bCSV5ed3lTG/qKw2NcIzYDd9BB fjujGlVQseu1hKD1gI5o2ncfU09dMeONWCl00wdQ8Ogqv1Q6Gx0G6Cmpx6Muj2YJ yefGtJ7bv5NbxTxI9qS+FBP9mB8GbHHjqgFGm0KKiTvRXFdByyVYbx8kViaDBm7T IDU2N2MdtZxxnDChZI9N95i2+Dr1ieRD2GbfD6FumW2Dey5FmTpcChWp+i4GN9FV Vl7a0eODRg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:05 2026 by rpki-client