This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer File: 5oBHj67Itn3f7OY1fPJc8sodhdA.cer (raw, json) Hash identifier: JBu8ssUDeFMwowwfpWHHbZid9zXpPP4J5g8moWRCYJI= Subject key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B7F62701DE12367406955847BF7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207424 IP: 2001:67c:2fc0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b7:f6:27:01:de:12:36:74:06:95:58:47:bf:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:da:2f:42:09:ed:89:9e:fb:94:ef:88:80: a7:54:5f:10:ac:d6:6b:9d:d0:8d:b8:65:05:43:70: f5:a6:8d:bb:36:b0:5f:0e:e2:4e:bf:6c:51:f9:ef: 67:e0:07:92:35:cd:ff:00:0e:c3:7f:d4:90:0a:fe: fd:fc:fb:7b:f6:0d:34:53:d2:9e:a1:a6:18:30:65: 91:e8:9a:26:ad:e4:a8:68:44:bf:1b:4c:99:f3:1c: ec:5d:44:15:a5:92:99:c7:ff:0d:72:92:67:dd:5b: c1:d7:c4:a2:cf:c9:9e:9f:bd:a1:b9:65:ff:37:16: 15:30:c0:79:53:e6:30:3c:65:d5:7a:82:cb:68:8c: 16:cc:94:27:de:10:8a:41:81:ea:83:c7:8a:91:21: 54:70:e0:d6:64:8e:ee:67:61:5f:4a:93:cb:d1:aa: bf:76:9c:b4:36:64:3a:20:1f:3e:a4:7d:c3:14:c0: ba:49:ab:87:7a:e8:f5:c8:26:6d:30:3e:73:61:2d: 4f:0d:60:b2:a3:3f:e9:8b:27:f4:1a:d3:aa:eb:5e: b1:95:6d:15:4e:38:44:c0:59:b6:0a:a1:b6:df:09: c3:ee:f6:2c:06:3c:1b:ac:38:12:23:89:88:26:58: df:1b:be:9a:ca:4f:f2:f4:f8:68:5d:c3:d0:6e:85: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2fc0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207424 Signature Algorithm: sha256WithRSAEncryption 03:ef:87:b3:a2:68:4b:ce:c6:9d:a0:4a:9d:a4:76:87:d7:85: 55:27:dc:10:f6:c3:3b:d3:29:0f:b6:0e:47:13:7e:78:f4:89: a5:8e:88:d4:ae:7e:c4:2a:ab:97:1a:6b:b7:4d:b3:83:92:72: da:49:dc:c7:bb:5f:94:cb:35:9f:f5:34:46:7c:fd:c1:29:91: 53:6e:87:9c:de:d9:77:24:da:96:9b:d6:4e:e3:6a:10:ac:d3: d1:d1:1d:1b:5b:bd:17:65:69:39:2f:cc:14:0a:0a:47:6f:cd: c3:b2:21:2a:38:b2:6c:6f:41:24:4b:02:f2:0e:21:04:bc:a3: da:40:4b:a8:23:73:74:70:2a:5e:52:f2:49:40:dc:1f:48:9e: 60:3a:c1:72:40:72:8f:a8:99:c2:bc:c3:79:a7:df:ef:19:59: c9:8d:a7:4d:97:25:e8:17:b3:99:43:59:12:1c:f9:d2:db:21: 08:bb:5f:5e:4e:1b:5a:8b:81:3f:65:cf:14:5e:99:30:50:67: 75:bb:85:f8:db:1e:c1:1d:2d:f1:a7:4a:48:6d:63:f3:48:3c: a9:ed:7a:7c:b4:d9:b6:b9:3a:30:1b:7e:42:b6:16:2d:7e:fa: 79:90:82:a5:6e:70:a6:bc:21:71:91:81:13:3b:2d:fc:e9:b1: 6c:31:77:4b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6yLf2JwHeEjZ0BpVYR797MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjgwNDc4ZmFlYzhiNjdkZGZlY2U2MzU3Y2YyNWNmMmNhMWQ4NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAranaL0IJ7Yme+5TviICnVF8QrNZr ndCNuGUFQ3D1po27NrBfDuJOv2xR+e9n4AeSNc3/AA7Df9SQCv79/Pt79g00U9Ke oaYYMGWR6JomreSoaES/G0yZ8xzsXUQVpZKZx/8NcpJn3VvB18Siz8men72huWX/ NxYVMMB5U+YwPGXVeoLLaIwWzJQn3hCKQYHqg8eKkSFUcODWZI7uZ2FfSpPL0aq/ dpy0NmQ6IB8+pH3DFMC6SauHeuj1yCZtMD5zYS1PDWCyoz/piyf0GtOq616xlW0V TjhEwFm2CqG23wnD7vYsBjwbrDgSI4mIJljfG76ayk/y9PhoXcPQboV4NQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOaAR4+uyLZ93+zmNXzyXPLKHYXQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzI1YTAx Yi01ZmIwLTQ0NGUtYTJjNy0zMzljOWQ0ODc3NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMjVhMDFi LTVmYjAtNDQ0ZS1hMmM3LTMzOWM5ZDQ4Nzc0Yy8xLzVvQkhqNjdJdG4zZjdPWTFm UEpjOHNvZGhkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMqQDANBgkqhkiG9w0BAQsFAAOCAQEAA++Hs6JoS87GnaBKnaR2h9eFVSfc EPbDO9MpD7YORxN+ePSJpY6I1K5+xCqrlxprt02zg5Jy2kncx7tflMs1n/U0Rnz9 wSmRU26HnN7ZdyTalpvWTuNqEKzT0dEdG1u9F2VpOS/MFAoKR2/Nw7IhKjiybG9B JEsC8g4hBLyj2kBLqCNzdHAqXlLySUDcH0ieYDrBckByj6iZwrzDeaff7xlZyY2n TZcl6BezmUNZEhz50tshCLtfXk4bWouBP2XPFF6ZMFBndbuF+NsewR0t8adKSG1j 80g8qe16fLTZtrk6MBt+QrYWLX76eZCCpW5wprwhcZGBEzst/OmxbDF3Sw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:53 2026 by rpki-client