This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.cer (raw, json) Hash identifier: iY7KpMsK0tTZA4nEMv7OM8uzqpRJ7lm3uonqfluwzJc= Subject key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECBE1C9B78574BDFFE85492779437E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48388 IP: 91.209.132.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:be:1c:9b:78:57:4b:df:fe:85:49:27:79:43:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:cd:e3:64:2f:08:15:46:2b:9c:14:ce:3e: ba:12:38:ad:de:39:bd:f5:f7:ed:88:70:79:a6:1d: 9b:4e:f4:c3:51:52:d3:4a:31:5f:92:0f:61:c8:3e: 27:01:75:2d:c9:71:19:03:7e:06:6c:a1:b0:d0:7a: 96:28:0d:70:83:91:4d:fb:e3:47:5b:51:3f:77:a4: 30:a8:7d:ab:74:36:1d:60:5f:fc:92:a7:c0:8b:7a: 44:da:ea:22:c1:4a:41:12:14:e4:68:86:6a:4f:95: 66:10:9f:32:b1:72:87:4f:31:95:8c:7a:63:36:1e: aa:47:e8:1b:c7:38:e5:c3:1a:50:53:dd:c3:dd:ae: b6:c2:37:6f:0c:8f:15:97:13:89:01:52:09:61:0d: 8f:df:f5:0f:d6:2f:0f:36:bc:9f:75:e6:b3:cf:9c: d9:de:a0:c2:4d:b8:d5:c0:55:18:1a:b0:ab:ff:11: 6a:74:12:c4:58:0d:50:7f:30:49:b4:96:e2:03:eb: ee:15:f4:7f:4c:e1:ec:3f:95:8d:24:50:38:7a:b1: 25:95:d4:f6:db:b7:f3:fe:29:d0:c0:6a:92:0e:e9: 26:ca:3a:ee:19:03:03:a7:69:21:21:5e:c7:d2:d1: 02:03:bc:0d:0c:2e:58:33:27:01:db:9f:df:1c:2d: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.132.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48388 Signature Algorithm: sha256WithRSAEncryption 33:ec:23:29:9a:29:43:45:ad:70:19:2b:c1:3e:df:d5:47:6e: a7:5f:d5:22:aa:70:ae:d9:23:06:75:d5:24:ea:de:e7:d3:35: c0:6b:a3:53:01:47:a9:96:2c:51:2c:1b:36:e2:00:fb:ff:8f: a5:a7:38:ac:04:fa:07:cc:bf:3e:2c:48:21:40:ba:07:d1:0a: e9:67:77:4e:0a:86:1a:7c:5e:55:68:7f:e2:fa:39:98:c0:8e: 4f:6b:70:08:63:04:b6:f7:71:b4:bb:77:6e:c4:eb:14:d2:93: 93:6a:69:ee:d3:e6:ca:3f:ed:92:14:25:79:85:34:eb:a6:06: 0f:76:4b:f2:78:66:a8:ee:6a:8f:24:fb:78:63:52:ee:27:4b: bc:a7:81:18:c1:b5:a8:86:1b:2b:2e:60:20:19:11:75:d8:59: 66:9c:28:78:dc:38:06:00:32:01:0e:0a:35:47:14:40:fa:76: 70:91:95:be:39:65:e6:1c:05:bb:9c:5a:da:9d:20:dc:32:ee: be:28:a7:9b:4d:f0:6e:19:63:49:54:db:3d:58:86:f3:b4:ee: eb:70:62:a7:40:87:4d:17:58:0c:df:3a:9f:e5:34:e5:a6:29: 87:c5:53:53:0d:e7:d9:6d:84:a9:89:ee:b6:0e:22:7f:81:24: b3:1d:76:a4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87L4cm3hXS9/+hUkneUN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE0Y2I3NGNmNTI0YzE4MTIxZDUzYjUzMmMwM2MwNmY0YWQ2YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY7N42QvCBVGK5wUzj66Ejit3jm9 9fftiHB5ph2bTvTDUVLTSjFfkg9hyD4nAXUtyXEZA34GbKGw0HqWKA1wg5FN++NH W1E/d6QwqH2rdDYdYF/8kqfAi3pE2uoiwUpBEhTkaIZqT5VmEJ8ysXKHTzGVjHpj Nh6qR+gbxzjlwxpQU93D3a62wjdvDI8VlxOJAVIJYQ2P3/UP1i8PNryfdeazz5zZ 3qDCTbjVwFUYGrCr/xFqdBLEWA1QfzBJtJbiA+vuFfR/TOHsP5WNJFA4erElldT2 27fz/inQwGqSDukmyjruGQMDp2khIV7H0tECA7wNDC5YMycB25/fHC0dmwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOaky3TPUkwYEh1TtTLAPAb0rWvmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2Y5Zjc3 My0xMjFlLTQ1MGQtYjYwNi05OGJmNDI4OWRmM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZjlmNzcz LTEyMWUtNDUwZC1iNjA2LTk4YmY0Mjg5ZGYzYi8xLzVxVExkTTlTVEJnU0hWTzFN c0E4QnZTdGEtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9GEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9BDANBgkqhkiG9w0BAQsFAAOCAQEAM+wjKZopQ0WtcBkrwT7f1Udup1/VIqpw rtkjBnXVJOre59M1wGujUwFHqZYsUSwbNuIA+/+Ppac4rAT6B8y/PixIIUC6B9EK 6Wd3TgqGGnxeVWh/4vo5mMCOT2twCGMEtvdxtLt3bsTrFNKTk2pp7tPmyj/tkhQl eYU066YGD3ZL8nhmqO5qjyT7eGNS7idLvKeBGMG1qIYbKy5gIBkRddhZZpwoeNw4 BgAyAQ4KNUcUQPp2cJGVvjll5hwFu5xa2p0g3DLuviinm03wbhljSVTbPViG87Tu 63Bip0CHTRdYDN86n+U05aYph8VTUw3n2W2EqYnutg4if4Eksx12pA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:47 2026 by rpki-client