This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer (raw, json) Hash identifier: J71tNUdXehkEQGkxoY78ZXxZsNEs5qkZvpZ0rPJ8Zvg= Subject key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7339AB764B46C49AF4D0E668ED327 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31010 IP: 91.212.85.0/24 IP: 2001:678:598::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:9a:b7:64:b4:6c:49:af:4d:0e:66:8e:d3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:b2:1e:a1:5f:e2:49:63:30:81:99:1d:fd: 96:c9:68:1e:31:a4:03:f9:59:92:9f:79:53:7a:1f: 0a:ac:fa:77:de:ce:ec:e7:89:06:47:a8:9e:fc:65: 80:6f:dd:60:9a:40:25:ca:b3:fc:d4:7f:8d:72:66: 63:7b:f7:8e:ed:fd:bc:65:56:21:39:87:68:c8:da: ce:c9:1e:06:21:6f:5a:fe:89:2b:04:9c:23:0d:ed: 5c:17:27:ad:8c:4c:7b:84:a7:71:10:51:a6:a6:5b: 1a:9d:d8:06:f5:23:a7:92:c5:11:a8:86:52:5b:2d: 30:6f:65:a3:53:1c:e0:85:b3:50:84:11:0f:e1:a8: 25:b2:00:e1:b1:be:b8:dd:1a:20:07:78:c1:e6:63: c4:7d:68:a3:3c:96:b6:63:96:31:b9:c4:49:9f:b4: d0:bd:f7:ed:7d:15:39:75:35:e7:48:44:81:55:9a: d5:d9:18:40:1a:0c:b0:ff:80:53:b6:b5:ce:e6:8e: 00:df:f9:e8:d8:07:6f:77:74:eb:4b:2d:51:e2:ef: 46:4e:eb:67:c6:6f:bd:83:02:52:65:ea:00:59:98: ea:e2:2a:17:35:8c:8c:78:b3:5b:5d:60:5e:68:9f: 19:93:35:2a:88:2e:bb:d6:6b:93:36:71:2b:9b:6a: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.85.0/24 IPv6: 2001:678:598::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31010 Signature Algorithm: sha256WithRSAEncryption 37:6d:d5:11:00:c6:04:9e:43:94:2c:03:c5:f9:38:f9:e6:bf: 99:63:1c:85:46:c6:bd:d4:ff:dd:26:d0:58:73:0b:85:e7:f7: aa:86:68:75:d5:98:8d:5d:6e:ba:e8:cb:7f:bb:8d:a6:be:9b: 51:56:74:59:9a:34:5b:8f:d2:7c:3e:e5:bf:af:43:b6:a5:bb: 11:c3:1a:6a:2b:76:2d:77:17:54:f3:98:b5:6a:3f:2d:32:dd: 57:50:d4:0a:2a:48:e9:5f:24:40:b4:7d:86:0d:d7:b6:ab:29: 43:8e:fd:36:ad:13:9f:e3:3f:2b:49:46:21:7d:6e:61:f1:97: cb:cc:7d:87:b2:11:85:90:69:31:0f:25:cd:bf:7e:60:1c:0b: fb:08:08:da:a3:88:b6:b9:c9:12:1c:fd:4d:c4:80:85:aa:10: a5:25:cb:d9:5a:a0:ab:c4:fd:ed:3c:3e:34:28:80:0a:cd:ee: 6e:2e:04:3f:ac:b5:86:d7:8b:d3:00:95:6d:91:0e:10:e0:5c: f8:cc:f0:73:f7:e0:3a:8c:6c:71:b1:e1:48:ab:86:2c:4f:9e: 4e:c9:38:42:3c:14:6e:69:c1:dc:ee:6b:9e:f5:8d:ac:52:66: 5b:3a:35:9c:13:4f:89:dc:d1:71:19:7d:49:63:3a:e9:26:bf: 6a:1e:47:b6 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt3xzOat2S0bEmvTQ5mjtMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmNjNjVjMjdjMjMyOThiMGM1YTBlMGJjNzRiYTUxMDM0YTcwNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCKyHqFf4kljMIGZHf2WyWgeMaQD +VmSn3lTeh8KrPp33s7s54kGR6ie/GWAb91gmkAlyrP81H+NcmZje/eO7f28ZVYh OYdoyNrOyR4GIW9a/okrBJwjDe1cFyetjEx7hKdxEFGmplsandgG9SOnksURqIZS Wy0wb2WjUxzghbNQhBEP4aglsgDhsb643RogB3jB5mPEfWijPJa2Y5YxucRJn7TQ vfftfRU5dTXnSESBVZrV2RhAGgyw/4BTtrXO5o4A3/no2Advd3TrSy1R4u9GTutn xm+9gwJSZeoAWZjq4ioXNYyMeLNbXWBeaJ8ZkzUqiC671muTNnErm2omTwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFObMZcJ8IymLDFoOC8dLpRA0pwTIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzBlOGJh ZC0xMjFjLTRhNTYtOTZjZC1hYWNmYzBkYmVkMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvMGU4YmFk LTEyMWMtNGE1Ni05NmNkLWFhY2ZjMGRiZWQxMi8xLzVzeGx3bndqS1lzTVdnNEx4 MHVsRURTbkJNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9RVMA8EAgACMAkDBwAgAQZ4BZgwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICeSIwDQYJKoZIhvcNAQELBQADggEBADdt1REAxgSe Q5QsA8X5OPnmv5ljHIVGxr3U/90m0FhzC4Xn96qGaHXVmI1dbrroy3+7jaa+m1FW dFmaNFuP0nw+5b+vQ7aluxHDGmordi13F1TzmLVqPy0y3VdQ1AoqSOlfJEC0fYYN 17arKUOO/TatE5/jPytJRiF9bmHxl8vMfYeyEYWQaTEPJc2/fmAcC/sICNqjiLa5 yRIc/U3EgIWqEKUly9laoKvE/e08PjQogArN7m4uBD+stYbXi9MAlW2RDhDgXPjM 8HP34DqMbHGx4UirhixPnk7JOEI8FG5pwdzua571jaxSZls6NZwTT4nc0XEZfUlj Oukmv2oeR7Y= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:10 2026 by rpki-client