This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer File: 5jGwgNTqb9Bham5wHHyBXW_4fAA.cer (raw, json) Hash identifier: igWaV57pTFp4h8llAyvg+i6xXL4VsmqIl8mqo41Lrsw= Subject key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EACECDA0F838E3308722445609412D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28788 AS: 35735 AS: 41241 AS: 50319 AS: 202016 AS: 202692 IP: 5.159.32.0/21 IP: 5.180.140.0/22 IP: 62.133.192.0/18 IP: 91.206.246.0/23 IP: 91.208.110.0/24 IP: 185.84.196.0/22 IP: 185.144.196.0/22 IP: 185.156.208.0/22 IP: 185.189.8.0/22 IP: 193.16.234.0/24 IP: 193.105.215.0/24 IP: 194.88.236.0/23 IP: 194.145.244.0/22 IP: 2a03:71e0::/32 IP: 2a03:bec0::/32 IP: 2a07:a140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ce:cd:a0:f8:38:e3:30:87:22:44:56:09:41:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:a0:0b:eb:f0:85:eb:c9:b9:5f:c4:5c:62: 52:5c:cb:f1:52:60:72:70:28:f1:cf:15:a4:d4:00: 53:5b:c6:8a:6e:f2:e8:96:12:bd:f1:54:3a:63:2f: ba:2d:7e:84:46:26:4b:7f:cf:06:87:80:ab:28:5b: 39:ac:16:81:14:3a:4a:2d:be:49:7d:42:1c:b0:b0: f4:63:09:00:1c:ec:0a:6c:f2:cd:d8:eb:79:38:9a: 7d:69:eb:fa:7c:46:50:df:75:24:71:b1:50:68:10: 88:ee:37:0c:7e:30:e3:2c:38:7d:28:a0:56:6d:94: e3:2d:8f:fa:11:49:f3:93:f7:16:b5:ce:6c:fb:1e: cb:fb:31:21:5e:02:08:07:2f:f9:47:cb:c6:ec:bc: b7:d5:4b:68:66:39:94:18:f8:aa:2b:e1:49:00:72: 41:76:6b:09:84:8b:bb:72:5d:2c:72:b4:0c:d5:5d: 6a:2a:82:c1:a2:35:d3:b1:b9:a6:54:c4:38:2a:2a: 6d:cf:35:36:bf:89:66:b7:b8:be:e0:5f:4c:38:4d: b5:e5:87:97:3d:46:64:73:94:83:30:71:9c:c9:c2: bd:6e:60:33:c9:9e:53:f6:62:55:07:c2:42:bd:b1: 5b:86:3b:e1:00:7d:1e:de:eb:a0:0d:da:86:21:9c: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.32.0/21 5.180.140.0/22 62.133.192.0/18 91.206.246.0/23 91.208.110.0/24 185.84.196.0/22 185.144.196.0/22 185.156.208.0/22 185.189.8.0/22 193.16.234.0/24 193.105.215.0/24 194.88.236.0/23 194.145.244.0/22 IPv6: 2a03:71e0::/32 2a03:bec0::/32 2a07:a140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28788 35735 41241 50319 202016 202692 Signature Algorithm: sha256WithRSAEncryption 93:7e:cb:75:f9:f4:27:4b:ea:59:38:76:a3:fb:19:76:d9:93: 54:5e:a6:01:3b:b8:1b:6f:e8:95:48:87:97:78:ff:74:1c:3a: 01:09:97:55:0a:d6:b5:5b:e3:49:61:2f:c6:ad:6c:67:e6:10: 30:a8:58:9f:59:20:0f:b4:e3:27:dd:56:ec:69:1d:a9:c6:29: 81:af:3a:01:48:7c:d3:13:df:11:db:16:c2:d7:0c:47:11:ef: 2a:8e:cb:c4:ef:26:ce:d4:64:9a:42:7d:6d:21:c5:6d:ba:ee: c8:fe:72:14:b8:bf:68:74:79:a4:2f:99:7e:b0:ae:d9:0b:fc: eb:bc:31:31:df:a7:af:39:90:0d:5e:89:0b:a3:ff:bc:b5:26: 99:70:d5:9f:7e:8b:02:47:c9:6b:10:07:da:e6:86:e3:55:0c: 27:56:1a:03:22:53:14:54:1b:b4:5a:7a:ba:53:7c:ce:58:8b: f4:ef:43:0f:e1:35:9a:50:52:84:26:15:cd:dc:fa:ec:3c:84: f2:51:ed:f3:d3:00:90:f7:2c:b6:fd:a6:b2:96:0c:aa:63:d3: db:4c:52:24:8e:a1:8c:d5:32:b9:b1:ef:48:61:2e:cc:d2:1e: 7b:4b:d0:61:7f:fa:0a:fb:2e:1b:bc:5e:77:81:7b:9e:3e:72: 85:cf:23:4b -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAZt26s7NoPg44zCHIkRWCUEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjMxYjA4MGQ0ZWE2ZmQwNjE2YTZlNzAxYzdjODE1ZDZmZjg3YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgygC+vwhevJuV/EXGJSXMvxUmBy cCjxzxWk1ABTW8aKbvLolhK98VQ6Yy+6LX6ERiZLf88Gh4CrKFs5rBaBFDpKLb5J fUIcsLD0YwkAHOwKbPLN2Ot5OJp9aev6fEZQ33UkcbFQaBCI7jcMfjDjLDh9KKBW bZTjLY/6EUnzk/cWtc5s+x7L+zEhXgIIBy/5R8vG7Ly31UtoZjmUGPiqK+FJAHJB dmsJhIu7cl0scrQM1V1qKoLBojXTsbmmVMQ4KiptzzU2v4lmt7i+4F9MOE215YeX PUZkc5SDMHGcycK9bmAzyZ5T9mJVB8JCvbFbhjvhAH0e3uugDdqGIZyueQIDAQAB o4IDHjCCAxowHQYDVR0OBBYEFOYxsIDU6m/QYWpucBx8gV1v+HwAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0L2RjZGFl Ni1kNjk1LTQyNjYtYmE5Yi05M2IzYTM2OTZkOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvZGNkYWU2 LWQ2OTUtNDI2Ni1iYTliLTkzYjNhMzY5NmQ5Ni8xLzVqR3dnTlRxYjlCaGFtNXdI SHlCWFdfNGZBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGEBggrBgEF BQcBBwEB/wR1MHMwVAQCAAEwTgMEAwWfIAMEAgW0jAMEBj6FwAMEAVvO9gMEAFvQ bgMEArlUxAMEArmQxAMEArmc0AMEArm9CAMEAMEQ6gMEAMFp1wMEAcJY7AMEAsKR 9DAbBAIAAjAVAwUAKgNx4AMFACoDvsADBQMqB6FAMDIGCCsGAQUFBwEIAQH/BCMw IaAfMB0CAnB0AgMAi5cCAwChGQIDAMSPAgMDFSACAwMXxDANBgkqhkiG9w0BAQsF AAOCAQEAk37Ldfn0J0vqWTh2o/sZdtmTVF6mATu4G2/olUiHl3j/dBw6AQmXVQrW tVvjSWEvxq1sZ+YQMKhYn1kgD7TjJ91W7GkdqcYpga86AUh80xPfEdsWwtcMRxHv Ko7LxO8mztRkmkJ9bSHFbbruyP5yFLi/aHR5pC+ZfrCu2Qv867wxMd+nrzmQDV6J C6P/vLUmmXDVn36LAkfJaxAH2uaG41UMJ1YaAyJTFFQbtFp6ulN8zliL9O9DD+E1 mlBShCYVzdz67DyE8lHt89MAkPcstv2mspYMqmPT20xSJI6hjNUyubHvSGEuzNIe e0vQYX/6CvsuG7xed4F7nj5yhc8jSw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:25 2026 by rpki-client