This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer File: 5eaQaKix-3-geVuvm7OrhslORvw.cer (raw, json) Hash identifier: mkl/2r7WDpy7nE8ONFsz7Jb9rDGFnRajzaoPX49HcM0= Subject key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910952D697AFB48E54ABCD84F8D32F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15437 AS: 200043 IP: 31.3.160.0/19 IP: 45.10.220.0/22 IP: 62.220.64.0/19 IP: 109.238.112.0/20 IP: 185.63.168.0/22 IP: 185.98.8.0/22 IP: 185.104.24.0/22 IP: 185.213.4.0/22 IP: 194.50.54.0/24 IP: 2a01:ab00::/29 IP: 2a06:880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:95:2d:69:7a:fb:48:e5:4a:bc:d8:4f:8d:32:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:ba:be:ef:92:6d:eb:74:01:ea:0f:5b:40: d6:b5:5d:9a:54:69:01:b9:0d:bd:dd:df:59:cd:aa: 41:5f:0f:52:b1:d4:f4:9e:31:72:59:97:ca:a6:96: db:e1:81:8e:56:4f:1f:9e:52:f8:20:0b:8f:45:d3: db:ae:cb:0a:db:40:74:8a:65:6c:a0:c2:b4:2d:15: f1:40:9a:8c:66:dc:04:9d:e6:73:e2:97:72:dd:c4: 6b:2e:83:e5:84:8f:3b:6c:85:b9:d4:e6:93:56:85: a2:98:d0:db:61:d1:3d:62:e3:4e:b3:ed:b3:be:12: 35:bc:cf:e4:61:30:fa:ac:5e:4d:30:78:c0:fb:ae: c5:31:3a:ce:fa:eb:b5:54:b3:f6:29:60:42:a2:a1: 55:4d:99:08:60:b3:8f:e3:a9:17:b6:d0:58:49:ce: 54:8e:4e:fc:16:7c:81:62:9c:7d:27:21:61:d3:8d: d3:53:9f:ce:90:0f:40:d7:fc:8b:e4:88:8a:20:9c: 56:fa:1a:8f:4a:0c:bb:d4:2c:9e:bb:f0:fc:92:68: 0d:c6:51:de:66:28:5a:5e:3b:a3:20:c8:92:cc:46: 21:e2:8c:aa:9d:fd:fa:30:32:a0:4b:64:10:b6:61: ab:c6:60:2a:3c:58:2b:8c:e8:fb:da:4d:a9:d5:de: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.160.0/19 45.10.220.0/22 62.220.64.0/19 109.238.112.0/20 185.63.168.0/22 185.98.8.0/22 185.104.24.0/22 185.213.4.0/22 194.50.54.0/24 IPv6: 2a01:ab00::/29 2a06:880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15437 200043 Signature Algorithm: sha256WithRSAEncryption 6b:42:14:08:73:56:8a:5f:1d:8d:37:a6:47:9a:b0:e3:d6:ea: c5:b8:24:db:d6:34:d2:ae:20:31:bb:47:d1:6d:10:e8:35:33: 87:66:19:04:d7:f4:f7:cb:8f:b1:e8:d0:36:0c:17:91:74:cc: d2:48:b6:2d:4c:c7:62:8b:f9:42:30:b4:24:2e:01:05:8b:c1: 9a:3b:3c:93:f0:24:e0:67:27:08:1e:6e:da:60:e2:3b:1a:51: 60:a8:72:72:2c:d6:8e:8a:5a:6a:39:40:c1:aa:44:bc:88:d4: 51:f4:13:9a:ae:31:5a:5c:27:b8:9d:b8:39:fb:88:5f:9c:c3: b4:50:2f:95:57:d6:f8:14:05:49:e2:52:b9:a5:75:f7:c9:34: 55:e3:ff:17:36:1b:57:c6:b7:b2:03:bc:76:f6:9b:76:02:62: cc:2d:64:b9:cf:97:ad:77:ba:14:58:c9:c0:8d:a3:b6:4b:9e: 5d:4f:93:8c:d0:d8:af:5a:e2:8b:03:f3:9f:08:21:80:ee:80: 26:39:76:2f:3c:32:95:15:b6:53:89:56:35:61:83:04:1d:93: 02:11:dd:f8:a5:0d:39:f6:4e:5a:2c:75:e6:ba:cd:e9:15:a4: 2e:5e:73:c6:90:76:6d:77:4a:01:02:61:b2:45:7d:01:de:66: 7c:db:c3:e6 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt5EJUtaXr7SOVKvNhPjTL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWU2OTA2OGE4YjFmYjdmYTA3OTViYWY5YmIzYWI4NmM5NGU0NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrm6vu+Sbet0AeoPW0DWtV2aVGkB uQ293d9ZzapBXw9SsdT0njFyWZfKppbb4YGOVk8fnlL4IAuPRdPbrssK20B0imVs oMK0LRXxQJqMZtwEneZz4pdy3cRrLoPlhI87bIW51OaTVoWimNDbYdE9YuNOs+2z vhI1vM/kYTD6rF5NMHjA+67FMTrO+uu1VLP2KWBCoqFVTZkIYLOP46kXttBYSc5U jk78FnyBYpx9JyFh043TU5/OkA9A1/yL5IiKIJxW+hqPSgy71Cyeu/D8kmgNxlHe ZihaXjujIMiSzEYh4oyqnf36MDKgS2QQtmGrxmAqPFgrjOj72k2p1d42kwIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFOXmkGiosft/oHlbr5uzq4bJTkb8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzYyOWY0 ZC0zOTI5LTQ2MWUtYTE5NC1kZDEwMjg5OTFmZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNjI5ZjRk LTM5MjktNDYxZS1hMTk0LWRkMTAyODk5MWZmMy8xLzVlYVFhS2l4LTMtZ2VWdXZt N09yaHNsT1J2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF BwEHAQH/BFYwVDA8BAIAATA2AwQFHwOgAwQCLQrcAwQFPtxAAwQEbe5wAwQCuT+o AwQCuWIIAwQCuWgYAwQCudUEAwQAwjI2MBQEAgACMA4DBQMqAasAAwUDKgYIgDAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgI8TQIDAw1rMA0GCSqGSIb3DQEBCwUAA4IB AQBrQhQIc1aKXx2NN6ZHmrDj1urFuCTb1jTSriAxu0fRbRDoNTOHZhkE1/T3y4+x 6NA2DBeRdMzSSLYtTMdii/lCMLQkLgEFi8GaOzyT8CTgZycIHm7aYOI7GlFgqHJy LNaOilpqOUDBqkS8iNRR9BOarjFaXCe4nbg5+4hfnMO0UC+VV9b4FAVJ4lK5pXX3 yTRV4/8XNhtXxreyA7x29pt2AmLMLWS5z5etd7oUWMnAjaO2S55dT5OM0NivWuKL A/OfCCGA7oAmOXYvPDKVFbZTiVY1YYMEHZMCEd34pQ059k5aLHXmus3pFaQuXnPG kHZtd0oBAmGyRX0B3mZ828Pm -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:00 2026 by rpki-client