This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer (raw, json) Hash identifier: BZk7/P6jtiYEEvKi1zoqMvfJL4O3QJkq5nOVVE33Jvc= Subject key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECEEDB78A4F8E6DE499ECAEB686067 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209786 IP: 213.139.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ee:db:78:a4:f8:e6:de:49:9e:ca:eb:68:60:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:3d:a9:5e:73:e3:93:4a:85:79:0b:91:62: 47:a8:96:6b:5e:e7:3e:fc:65:21:e1:9a:a7:a0:18: 37:10:fc:1f:df:d0:df:db:8c:fa:88:19:9c:c2:ea: 6d:30:27:44:a2:b8:e5:00:1e:c5:8f:a5:33:6d:89: 8b:f7:87:ea:c2:73:89:96:c2:a8:1b:bb:71:2f:7a: 18:85:e2:af:f5:a0:7e:b3:18:0d:bd:ec:c8:27:f0: 80:2b:a9:45:6e:b8:de:dc:96:16:a5:1d:0d:8a:8f: bf:ac:0d:62:bc:cf:8c:dd:59:53:ae:ff:f9:b0:95: 37:95:8a:e8:60:48:f2:fe:0a:31:2e:bd:1a:e1:59: ea:69:b4:8b:ec:d6:d8:f2:08:03:b0:c7:d7:9e:4c: 2d:34:38:ca:e9:e2:5b:9d:d9:fc:e4:48:f4:31:de: f3:31:d8:f0:b7:5d:11:1a:10:f2:74:75:b6:57:24: 20:cf:da:a9:2a:69:f7:51:7d:35:52:c7:ac:7e:b6: 9f:62:5f:44:78:7e:20:9f:a9:97:36:d5:46:b1:3a: 87:52:0e:e6:1b:43:0a:3e:ae:1a:51:b2:0a:aa:38: 0c:64:05:6c:8d:c0:18:be:61:87:df:c8:b3:0f:c9: 7e:56:e8:6b:53:de:40:17:8f:68:d2:72:98:36:b8: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209786 Signature Algorithm: sha256WithRSAEncryption 18:2e:10:bc:01:1c:96:3a:5a:a6:38:e3:1a:ce:b0:c0:1d:0d: 2d:5d:23:f0:bf:12:e7:a1:73:f5:2f:e7:07:69:98:62:2c:4f: 72:a6:fa:b1:91:0d:90:3e:10:cc:ac:68:4f:84:d4:b8:b8:19: f6:3c:99:f2:f9:eb:e2:05:8c:eb:4a:4f:d6:92:83:43:2d:6b: cd:3c:8e:83:3d:9c:df:4e:3b:61:17:30:2c:3f:9d:fb:d1:ae: 70:48:ad:9c:66:b8:4c:5e:21:6a:dd:cf:29:4f:ae:27:84:f3: 25:f5:f2:eb:13:dd:d2:d5:96:6a:32:38:6c:48:dc:8d:bf:1e: e4:f9:e6:39:33:d2:c3:24:bd:e9:50:d3:ba:54:68:ae:03:3f: 33:56:98:5d:8f:09:f8:1b:f0:92:a7:a4:55:2e:da:fb:9f:b5: 0c:c2:0f:8a:c8:b7:50:00:a0:96:21:3c:63:98:45:3a:e6:cf: 15:b8:d5:ed:35:7b:e6:11:72:88:c8:af:08:93:68:0a:ea:82: 45:d8:6a:0f:0a:0d:3c:36:a2:33:96:3b:4d:6c:33:7e:67:e5: 08:36:55:a7:95:a3:d6:1a:a3:a4:14:1c:9e:4f:91:c1:d9:65: 44:d4:8c:88:39:84:34:fd:67:3a:0b:13:f6:a6:0b:52:71:a2: f3:0f:c9:32 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87O7beKT45t5JnsrraGBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjZlNzcyNmZmNTNhMTNjODBjY2JjYTRkNWQzOTRlNGU4YWVmNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1g9qV5z45NKhXkLkWJHqJZrXuc+ /GUh4ZqnoBg3EPwf39Df24z6iBmcwuptMCdEorjlAB7Fj6UzbYmL94fqwnOJlsKo G7txL3oYheKv9aB+sxgNvezIJ/CAK6lFbrje3JYWpR0Nio+/rA1ivM+M3VlTrv/5 sJU3lYroYEjy/goxLr0a4VnqabSL7NbY8ggDsMfXnkwtNDjK6eJbndn85Ej0Md7z Mdjwt10RGhDydHW2VyQgz9qpKmn3UX01UsesfrafYl9EeH4gn6mXNtVGsTqHUg7m G0MKPq4aUbIKqjgMZAVsjcAYvmGH38izD8l+VuhrU95AF49o0nKYNrgXvwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOZudyb/U6E8gMy8pNXTlOTorvVCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzMxYjEx Zi0yYjZiLTQyNTItOTkwYi01MTZjYTg0ZmU1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMzFiMTFm LTJiNmItNDI1Mi05OTBiLTUxNmNhODRmZTVmZS8xLzVtNTNKdjlUb1R5QXpMeWsx ZE9VNU9pdTlVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQC1YvsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMzejANBgkqhkiG9w0BAQsFAAOCAQEAGC4QvAEcljpapjjjGs6wwB0NLV0j8L8S 56Fz9S/nB2mYYixPcqb6sZENkD4QzKxoT4TUuLgZ9jyZ8vnr4gWM60pP1pKDQy1r zTyOgz2c3047YRcwLD+d+9GucEitnGa4TF4hat3PKU+uJ4TzJfXy6xPd0tWWajI4 bEjcjb8e5PnmOTPSwyS96VDTulRorgM/M1aYXY8J+BvwkqekVS7a+5+1DMIPisi3 UACgliE8Y5hFOubPFbjV7TV75hFyiMivCJNoCuqCRdhqDwoNPDaiM5Y7TWwzfmfl CDZVp5Wj1hqjpBQcnk+RwdllRNSMiDmENP1nOgsT9qYLUnGi8w/JMg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:52 2026 by rpki-client