This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer (raw, json) Hash identifier: Cj4vJ1VUAPmJXRtp7pejdr1IjBv2Fkvjty9oVJfMMlk= Subject key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A809CC86EF67BBC4BE58D73C49478 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203714 AS: 203948 AS: 211343 IP: 45.156.21.0 -- 45.156.27.255 IP: 176.53.180.0/22 IP: 185.53.104.0/22 IP: 185.207.2.0/24 IP: 193.176.153.0/24 IP: 193.176.190.0/24 IP: 194.36.170.0/23 IP: 194.36.209.0/24 IP: 194.116.214.0 -- 194.116.217.255 IP: 194.120.24.0/24 IP: 194.120.116.0/24 IP: 2a09:d900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:80:9c:c8:6e:f6:7b:bc:4b:e5:8d:73:c4:94:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:77:bb:c3:96:16:1e:14:27:de:c9:28:90: 1b:28:77:b2:7f:f7:08:dd:c6:50:65:f1:d3:0e:56: 19:9e:f0:86:b9:a3:0f:12:c8:d8:a5:2e:c9:7b:07: 0f:e0:f0:d5:17:7c:de:34:a6:2a:01:c7:f6:64:96: 85:f6:26:07:f6:cf:3e:d9:19:c7:29:94:19:4d:b4: 35:f1:9b:83:02:6a:ba:6d:17:6b:cf:03:bc:53:c3: 7d:ae:e8:a5:70:7e:4a:aa:90:ab:88:71:14:ac:19: 6d:ea:79:63:90:f8:57:7b:9d:38:54:79:29:83:0e: 4e:45:56:ba:5d:a3:ca:66:a6:fd:97:fc:46:0b:e1: 25:31:b2:aa:07:90:f2:44:a5:a0:ba:4f:41:a5:e9: 72:59:39:a3:19:95:0b:c3:ea:08:57:61:d5:d1:04: ab:83:9b:e8:3d:a1:ee:c9:50:76:49:21:07:28:9b: 12:85:b2:89:f5:3a:91:b0:a1:93:09:3b:3a:01:78: ec:63:44:f1:84:e2:ea:a9:e1:99:ca:7b:a7:4f:b7: 9e:d8:5a:04:f1:0e:19:c3:5d:0c:43:3a:16:cf:db: a7:05:be:c6:55:74:20:77:32:7b:f5:2d:5f:cc:fe: 8c:40:d6:13:66:93:ff:6e:ed:8a:5b:d8:22:2b:00: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.21.0-45.156.27.255 176.53.180.0/22 185.53.104.0/22 185.207.2.0/24 193.176.153.0/24 193.176.190.0/24 194.36.170.0/23 194.36.209.0/24 194.116.214.0-194.116.217.255 194.120.24.0/24 194.120.116.0/24 IPv6: 2a09:d900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203714 203948 211343 Signature Algorithm: sha256WithRSAEncryption 83:4c:3f:7b:9a:5c:0c:58:5f:9a:82:e0:2d:0b:de:cf:0a:5e: 10:5a:7e:9f:0c:ba:ca:b6:04:29:f3:73:30:89:1a:65:92:da: d7:00:22:7f:93:59:2d:44:46:e7:93:57:82:e8:88:d5:50:6c: 19:2e:35:a5:cf:90:a8:82:e6:02:9b:1b:27:f1:9d:51:69:bc: c3:35:b4:c3:dc:58:77:80:c1:e0:ff:a8:68:e4:38:8e:23:6d: 75:12:df:ad:9d:c2:08:db:05:ed:1e:c8:ec:f8:25:16:54:2d: ff:aa:ff:89:36:e4:7a:5a:aa:df:d4:bd:32:03:31:1a:2a:89: f1:f8:5d:54:9a:9a:57:c7:91:4e:e0:79:b5:41:41:fb:40:af: 40:aa:e2:5c:4b:95:b3:fb:60:f0:bf:d0:8b:c0:d4:97:d8:80: ea:e1:01:95:bc:bf:c1:28:ce:41:56:4d:21:cf:6f:5e:08:f2: 1f:3a:f8:45:cf:2a:19:92:09:37:60:cf:a6:f1:fb:e2:55:51: f2:98:72:42:8e:df:bf:17:64:da:9c:a9:c3:46:cc:25:ae:f4: 51:68:4e:ba:5d:8b:af:a0:63:48:5b:d0:6a:89:1d:d3:a2:b5: 0d:0f:e2:28:53:c6:ff:ab:3c:28:a9:86:79:f7:28:50:98:d0: 42:fe:37:90 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt6WoCcyG72e7xL5Y1zxJR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjEzNWQ2Mzk3NjhhM2E2M2VkOWM1ZmY0MGFmNWVkMDFkZjc0MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM13u8OWFh4UJ97JKJAbKHeyf/cI 3cZQZfHTDlYZnvCGuaMPEsjYpS7JewcP4PDVF3zeNKYqAcf2ZJaF9iYH9s8+2RnH KZQZTbQ18ZuDAmq6bRdrzwO8U8N9ruilcH5KqpCriHEUrBlt6nljkPhXe504VHkp gw5ORVa6XaPKZqb9l/xGC+ElMbKqB5DyRKWguk9BpelyWTmjGZULw+oIV2HV0QSr g5voPaHuyVB2SSEHKJsShbKJ9TqRsKGTCTs6AXjsY0TxhOLqqeGZynunT7ee2FoE 8Q4Zw10MQzoWz9unBb7GVXQgdzJ79S1fzP6MQNYTZpP/bu2KW9giKwAg2wIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFOYTXWOXaKOmPtnF/0CvXtAd90HLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzc0NmE3 NS1kMzYxLTRlOTEtODczYS0wYTc3MGYwYzc2MDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvNzQ2YTc1 LWQzNjEtNGU5MS04NzNhLTBhNzcwZjBjNzYwOC8xLzVoTmRZNWRvbzZZLTJjWF9R SzllMEIzM1Fjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTBYBAIAATBSMAwDBAAtnBUDBAItnBgDBAKwNbQDBAK5NWgDBAC5 zwIDBADBsJkDBADBsL4DBAHCJKoDBADCJNEwDAMEAcJ01gMEAcJ02AMEAMJ4GAME AMJ4dDANBAIAAjAHAwUDKgnZADAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDG8IC AwMcrAIDAzmPMA0GCSqGSIb3DQEBCwUAA4IBAQCDTD97mlwMWF+aguAtC97PCl4Q Wn6fDLrKtgQp83MwiRplktrXACJ/k1ktREbnk1eC6IjVUGwZLjWlz5CoguYCmxsn 8Z1RabzDNbTD3Fh3gMHg/6ho5DiOI211Et+tncII2wXtHsjs+CUWVC3/qv+JNuR6 Wqrf1L0yAzEaKonx+F1UmppXx5FO4Hm1QUH7QK9AquJcS5Wz+2Dwv9CLwNSX2IDq 4QGVvL/BKM5BVk0hz29eCPIfOvhFzyoZkgk3YM+m8fviVVHymHJCjt+/F2TanKnD RswlrvRRaE66XYuvoGNIW9BqiR3TorUND+IoU8b/qzwoqYZ59yhQmNBC/jeQ -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:17 2026 by rpki-client