This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer (raw, json) Hash identifier: FAD+ZrQf+ue78sZ8CJl0bhn5/o7QH5EI8QkkVC8xc9c= Subject key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C412889844234FD0A978EEB65C10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204576 AS: 208649 IP: 185.75.221.0/24 IP: 2a0d:a640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c4:12:88:98:44:23:4f:d0:a9:78:ee:b6:5c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7334ad9b3fc521030be99a5157211b663216c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:77:39:14:c3:50:39:de:9d:db:95:dc:04: 19:ec:e7:45:3f:84:0e:89:1b:43:6a:7c:ba:8c:e8: 95:86:4a:6e:a4:22:f8:cb:12:f2:09:66:76:39:3a: 34:e3:61:06:88:b0:6a:12:94:4c:67:b8:6f:22:96: e6:ac:03:08:d5:b3:16:30:c2:b7:69:b4:f3:db:69: af:f8:35:48:71:9c:1c:29:19:87:66:62:9b:d1:52: f1:ad:d8:40:df:a7:b1:62:72:99:98:5e:1c:a0:bd: 00:ae:25:5d:39:3e:e8:8f:ec:cd:24:18:52:bf:b9: 7e:82:c0:90:bc:47:54:68:b0:4f:bf:d5:a5:d3:01: f8:fd:47:7b:01:0d:74:c5:97:0c:c2:c0:4b:34:1f: e4:0f:8b:57:d0:11:08:a1:a5:89:df:70:42:ca:13: e7:e5:fe:bb:3b:f6:9f:cd:57:c0:f6:7c:58:c5:5a: c9:c8:11:68:30:8e:83:ba:20:08:43:3c:59:50:00: 07:3e:aa:6f:47:63:31:65:f6:92:45:d8:ab:81:ee: b7:14:f8:11:b1:d1:e0:9f:cc:b4:46:8f:35:5b:b2: 58:52:64:1c:d9:d8:bb:76:31:69:cd:5f:23:f2:1c: e5:fc:28:00:14:48:12:15:05:3a:e5:dc:c4:93:76: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.221.0/24 IPv6: 2a0d:a640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204576 208649 Signature Algorithm: sha256WithRSAEncryption 33:09:4d:a9:ce:aa:96:da:7d:ac:ed:6f:99:45:0e:a8:c9:cb: 88:a6:a1:e9:f8:dc:bc:49:79:c3:ed:f1:e3:8b:dc:48:18:55: 8a:e6:39:c1:3c:4c:9e:6d:7e:4a:3d:d0:9c:85:02:94:fc:e5: 94:53:cc:ef:3f:14:c7:98:39:8a:d8:65:30:68:04:9c:b2:31: 94:a3:69:4e:06:5b:6e:7f:cc:fc:68:82:11:7b:fb:50:f5:d1: 23:a5:d6:12:d5:95:db:31:81:22:49:a3:6d:75:61:58:75:35: af:24:27:53:5d:e2:6b:e6:53:c7:33:4f:f8:92:95:6f:a5:1e: f6:0c:55:59:77:29:5b:29:19:2e:aa:14:fa:98:ee:06:37:5a: f0:a5:53:71:e9:b8:20:11:95:dd:d3:2f:59:5e:b7:4c:8e:7f: cb:75:75:01:90:f6:22:f7:e6:46:c2:2b:37:dd:30:20:7e:3b: c9:9d:18:3c:dc:45:68:40:76:8c:ae:20:74:7b:80:1c:67:6e: 4a:8b:fe:05:aa:9b:0a:6e:39:08:66:46:48:15:06:5c:e7:55: fc:21:f9:6f:29:d2:7a:8a:a4:a0:8e:6a:38:a1:6a:41:c2:be: 76:3f:55:78:d9:1b:b1:e9:c1:32:3f:9e:f8:df:45:a6:1d:db: 85:2e:5c:16 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7pMQSiJhEI0/QqXjutlwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzMzNGFkOWIzZmM1MjEwMzBiZTk5YTUxNTcyMTFiNjYzMjE2Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh53ORTDUDnenduV3AQZ7OdFP4QO iRtDany6jOiVhkpupCL4yxLyCWZ2OTo042EGiLBqEpRMZ7hvIpbmrAMI1bMWMMK3 abTz22mv+DVIcZwcKRmHZmKb0VLxrdhA36exYnKZmF4coL0AriVdOT7oj+zNJBhS v7l+gsCQvEdUaLBPv9Wl0wH4/Ud7AQ10xZcMwsBLNB/kD4tX0BEIoaWJ33BCyhPn 5f67O/afzVfA9nxYxVrJyBFoMI6DuiAIQzxZUAAHPqpvR2MxZfaSRdirge63FPgR sdHgn8y0Ro81W7JYUmQc2di7djFpzV8j8hzl/CgAFEgSFQU65dzEk3bhVwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFOczStmz/FIQML6ZpRVyEbZjIWyUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2IwNGIy ZS03M2U2LTQ4ODctOGRmMS0zNzIyZGYwNzM2MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYjA0YjJl LTczZTYtNDg4Ny04ZGYxLTM3MjJkZjA3MzYwMy8xLzV6TksyYlA4VWhBd3ZwbWxG WElSdG1NaGJKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuUvdMA0EAgACMAcDBQMqDaZAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMfIAIDAy8JMA0GCSqGSIb3DQEBCwUAA4IBAQAzCU2p zqqW2n2s7W+ZRQ6oycuIpqHp+Ny8SXnD7fHji9xIGFWK5jnBPEyebX5KPdCchQKU /OWUU8zvPxTHmDmK2GUwaAScsjGUo2lOBltuf8z8aIIRe/tQ9dEjpdYS1ZXbMYEi SaNtdWFYdTWvJCdTXeJr5lPHM0/4kpVvpR72DFVZdylbKRkuqhT6mO4GN1rwpVNx 6bggEZXd0y9ZXrdMjn/LdXUBkPYi9+ZGwis33TAgfjvJnRg83EVoQHaMriB0e4Ac Z25Ki/4FqpsKbjkIZkZIFQZc51X8IflvKdJ6iqSgjmo4oWpBwr52P1V42Rux6cEy P57430WmHduFLlwW -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:59 2026 by rpki-client