This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer File: 5cn_8vjtDWWq0LlPgDby7hru6go.cer (raw, json) Hash identifier: 3xjFEAvw3CGjYzInatMsZVpeb3b5srEFoKRkcaKTPOE= Subject key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E27849666518FAF3C0AC77CB1E078 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51095 IP: 89.35.237.0/24 IP: 185.40.106.0/24 IP: 213.170.143.0/24 IP: 2a0c:e080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:27:84:96:66:51:8f:af:3c:0a:c7:7c:b1:e0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:b8:50:a9:f3:d8:70:76:f5:99:f3:b1:1b: 76:1b:cf:aa:b7:9a:b5:27:73:16:c7:61:6b:a9:38: 9d:e7:89:35:78:37:99:2e:92:0c:8c:88:2a:b2:d5: e8:ff:4a:a7:2b:b7:36:5f:c6:e8:0e:49:0d:07:a2: 5b:ff:9f:8e:70:54:6e:ea:2e:82:a8:fe:44:c7:a3: 3d:c4:f0:1e:97:06:d4:90:61:db:60:18:70:6a:04: 1b:ac:37:cf:8d:b5:b7:dd:f5:c9:28:78:26:1d:56: 00:38:b0:d4:b4:58:bb:91:37:70:83:2b:dd:9d:e6: 4e:40:2c:23:a7:85:a8:61:8d:6d:74:36:99:ce:41: c9:df:86:9e:ec:d7:da:3d:9d:65:05:1b:1f:bf:d0: b5:07:07:54:7c:37:e8:99:a4:28:0f:e0:f1:99:95: f7:3f:a5:95:47:31:c9:25:36:35:70:6e:74:09:b4: d7:ec:9c:f6:0b:60:b8:d2:cd:04:09:44:bb:77:b8: f2:aa:f7:bd:38:f3:e8:16:63:9f:fc:44:33:68:49: 9b:e5:9f:24:b7:bd:47:4c:d4:b7:26:c5:ae:f1:0d: a7:dc:ef:97:e5:4b:fc:36:ec:48:2b:e0:3e:08:fb: d0:57:f8:ee:2c:ce:11:7f:c0:24:ff:3d:76:de:52: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.237.0/24 185.40.106.0/24 213.170.143.0/24 IPv6: 2a0c:e080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51095 Signature Algorithm: sha256WithRSAEncryption 8f:fe:82:33:86:99:cc:b2:d0:83:25:a6:cd:57:2f:b0:48:f5: 29:17:3f:52:31:f0:90:6c:d0:d5:64:59:3f:72:fb:5a:f0:fa: fa:c5:24:f0:aa:5f:71:e9:78:6c:88:a3:5e:7a:f2:8d:f9:16: 34:fc:2d:54:38:aa:a7:27:b9:97:01:81:c1:e9:07:10:29:59: 86:f0:10:9f:4a:ab:49:53:f7:5f:82:70:11:82:1b:99:ae:11: 71:ed:42:21:6a:27:fb:70:21:c7:d3:cb:15:3a:f7:93:59:2a: 44:28:96:ca:6e:0e:b8:dc:37:32:8e:b2:bd:9c:7c:d5:39:0d: 2a:30:20:91:1a:db:04:25:91:66:01:b3:dc:26:7e:a5:f1:5f: 0e:94:be:78:b3:85:c5:d0:36:e0:f1:2b:0f:89:09:0a:7c:fd: 45:59:ed:d2:3f:c0:66:a6:81:d4:66:6c:86:74:9c:ff:23:5e: 55:1c:9b:d8:31:b3:26:51:5d:db:4b:6f:2c:d7:c3:69:9b:b6: 3b:52:45:8e:7d:d9:77:c9:94:78:b4:38:30:26:b7:0d:af:c3: 0e:e7:e8:f3:07:3b:be:eb:85:b0:cb:ef:76:04:a1:8f:63:90: 7b:4f:f8:1f:53:5a:80:40:79:9b:b9:a2:5c:83:96:f4:6f:51: bc:88:7c:69 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5fieElmZRj688Csd8seB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM5ZmZmMmY4ZWQwZDY1YWFkMGI5NGY4MDM2ZjJlZTFhZWVlYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLa4UKnz2HB29ZnzsRt2G8+qt5q1 J3MWx2FrqTid54k1eDeZLpIMjIgqstXo/0qnK7c2X8boDkkNB6Jb/5+OcFRu6i6C qP5Ex6M9xPAelwbUkGHbYBhwagQbrDfPjbW33fXJKHgmHVYAOLDUtFi7kTdwgyvd neZOQCwjp4WoYY1tdDaZzkHJ34ae7NfaPZ1lBRsfv9C1BwdUfDfomaQoD+DxmZX3 P6WVRzHJJTY1cG50CbTX7Jz2C2C40s0ECUS7d7jyqve9OPPoFmOf/EQzaEmb5Z8k t71HTNS3JsWu8Q2n3O+X5Uv8NuxIK+A+CPvQV/juLM4Rf8Ak/z123lKa+wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFOXJ//L47Q1lqtC5T4A28u4a7uoKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2FmMjNj Ni1lZmVjLTQ5MWItODdjZC05ZmFhNjJhMWYxNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvYWYyM2M2 LWVmZWMtNDkxYi04N2NkLTlmYWE2MmExZjE3OC8xLzVjbl84dmp0RFdXcTBMbFBn RGJ5N2hydTZnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAWSPtAwQAuShqAwQA1aqPMA0EAgACMAcDBQMq DOCAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDHlzANBgkqhkiG9w0BAQsFAAOC AQEAj/6CM4aZzLLQgyWmzVcvsEj1KRc/UjHwkGzQ1WRZP3L7WvD6+sUk8Kpfcel4 bIijXnryjfkWNPwtVDiqpye5lwGBwekHEClZhvAQn0qrSVP3X4JwEYIbma4Rce1C IWon+3Ahx9PLFTr3k1kqRCiWym4OuNw3Mo6yvZx81TkNKjAgkRrbBCWRZgGz3CZ+ pfFfDpS+eLOFxdA24PErD4kJCnz9RVnt0j/AZqaB1GZshnSc/yNeVRyb2DGzJlFd 20tvLNfDaZu2O1JFjn3Zd8mUeLQ4MCa3Da/DDufo8wc7vuuFsMvvdgShj2OQe0/4 H1NagEB5m7miXIOW9G9RvIh8aQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:32 2026 by rpki-client