This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer File: 5jRhbtvWAVT6Pax36pDb18aKEy0.cer (raw, json) Hash identifier: cBRCB4vNBYB9UyrPcbDtrWMjEDSYfUOlAeGMCXYLyOo= Subject key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E87FD4310C09369D76BD4BA54FEA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.1.191.0/24 IP: 195.245.85.0/24 IP: 2001:7f8:105::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:87:fd:43:10:c0:93:69:d7:6b:d4:ba:54:fe:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:46:a3:c3:10:83:f1:39:72:40:6c:d9:e8: 07:2a:6c:6d:d7:da:c4:19:66:d4:e6:ef:e3:8d:ab: d9:69:26:7b:e1:16:1c:eb:d7:01:38:18:8e:b4:c9: f4:cf:98:0e:11:f5:3f:61:7b:06:51:1f:01:a1:52: 6a:fe:22:f5:8f:9c:98:5d:b6:02:40:97:85:54:24: 35:ed:dc:5f:a8:da:1a:88:fe:e3:cb:26:7b:58:1d: aa:a2:fa:0a:38:52:77:e4:98:ca:d1:d6:20:df:ee: 52:c3:79:7d:d1:b9:d0:c0:a0:11:05:81:3c:aa:a2: e8:b3:f6:40:5f:92:fc:0b:e5:a5:ac:df:07:29:fa: 4a:09:72:83:b3:aa:c5:e3:e4:b5:8f:91:6c:1d:07: 88:30:5a:a1:1e:9d:99:15:44:0e:bd:47:38:8b:cc: d6:b4:00:cf:87:4f:00:fb:c2:26:a8:8b:83:e5:4f: 88:cc:be:61:d4:31:fd:d6:e1:39:2f:41:cc:7c:5d: b7:7d:e9:0b:ec:fa:d0:db:98:5e:2c:a9:d6:00:f6: 0a:8e:e8:26:34:68:c4:ac:85:49:c6:60:9e:90:99: 7c:86:af:0f:58:cb:d7:85:f2:3d:6f:18:b0:9b:ef: bc:ea:18:1e:8a:b3:b7:82:f7:25:2c:86:17:ca:cb: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.191.0/24 195.245.85.0/24 IPv6: 2001:7f8:105::/48 Signature Algorithm: sha256WithRSAEncryption 0a:67:cd:02:af:03:64:52:a4:df:2d:30:e7:bf:9e:73:0c:51: d3:a3:88:e2:73:37:f6:8b:40:b2:d1:e8:d1:02:56:0b:66:36: 2a:13:f8:2b:a6:a4:d0:4a:c3:36:2b:a6:d2:90:1c:5c:a9:6b: 7d:d8:a3:7a:ca:91:54:f7:1f:0f:2b:e2:34:0a:2e:e1:04:cf: f1:fe:c2:16:c4:43:75:44:68:67:64:85:f5:03:f2:80:13:43: eb:85:eb:34:87:83:80:e2:0c:c4:3e:7b:ae:5b:8f:bf:99:c2: f9:e8:9e:24:f1:62:ff:a2:d3:80:5e:ba:6e:33:37:2f:64:83: 6c:8c:83:7b:bc:b2:22:34:84:a9:1d:5e:e6:ce:f8:ac:cb:f5: 06:1c:c7:6f:51:56:c2:e6:01:f7:fc:5d:5b:24:4e:27:4a:33: e0:85:4e:b4:7f:84:5e:57:0d:7e:e7:f4:27:4a:2c:9d:f6:19: 45:33:8e:71:cf:bd:22:19:d0:79:a4:02:26:06:e9:95:c9:ce: 5a:29:87:10:38:cb:55:88:be:52:f8:23:30:75:2f:a2:82:b5: 9e:9d:cb:06:ae:a8:cc:2b:82:fe:9d:0b:c2:ec:e8:db:15:75: a2:99:67:23:ca:9a:08:8c:55:53:f7:3d:a9:8b:d3:47:74:4a: 50:0d:d7:35 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt5fof9QxDAk2nXa9S6VP6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjM0NjE2ZWRiZDYwMTU0ZmEzZGFjNzdlYTkwZGJkN2M2OGExMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FxGo8MQg/E5ckBs2egHKmxt19rE GWbU5u/jjavZaSZ74RYc69cBOBiOtMn0z5gOEfU/YXsGUR8BoVJq/iL1j5yYXbYC QJeFVCQ17dxfqNoaiP7jyyZ7WB2qovoKOFJ35JjK0dYg3+5Sw3l90bnQwKARBYE8 qqLos/ZAX5L8C+WlrN8HKfpKCXKDs6rF4+S1j5FsHQeIMFqhHp2ZFUQOvUc4i8zW tADPh08A+8ImqIuD5U+IzL5h1DH91uE5L0HMfF23fekL7PrQ25heLKnWAPYKjugm NGjErIVJxmCekJl8hq8PWMvXhfI9bxiwm++86hgeirO3gvclLIYXysvE+QIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFOY0YW7b1gFU+j2sd+qQ29fGihMtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2YyOTI2 OC0yYzZhLTRlOWQtYWEyZC1kOTkyMzFlNDY0NTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvZjI5MjY4 LTJjNmEtNGU5ZC1hYTJkLWQ5OTIzMWU0NjQ1Ny8xLzVqUmhidHZXQVZUNlBheDM2 cERiMThhS0V5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAuQG/AwQAw/VVMA8EAgACMAkDBwAgAQf4AQUw DQYJKoZIhvcNAQELBQADggEBAApnzQKvA2RSpN8tMOe/nnMMUdOjiOJzN/aLQLLR 6NECVgtmNioT+CumpNBKwzYrptKQHFypa33Yo3rKkVT3Hw8r4jQKLuEEz/H+whbE Q3VEaGdkhfUD8oATQ+uF6zSHg4DiDMQ+e65bj7+ZwvnoniTxYv+i04Beum4zNy9k g2yMg3u8siI0hKkdXubO+KzL9QYcx29RVsLmAff8XVskTidKM+CFTrR/hF5XDX7n 9CdKLJ32GUUzjnHPvSIZ0HmkAiYG6ZXJzlophxA4y1WIvlL4IzB1L6KCtZ6dywau qMwrgv6dC8Ls6NsVdaKZZyPKmgiMVVP3PamL00d0SlAN1zU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:33 2026 by rpki-client