This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer File: A5gx97o94vvvFtRkn9SGDBXp1sM.cer (raw, json) Hash identifier: FUL78HaFugJPpAEJJdFG0Wkleoi9Cp4GVYUm4vGZOgE= Subject key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C713E31FE3B807D3BEE35D670C71F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211403 IP: 213.110.230.0/23 IP: 213.110.238.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:13:e3:1f:e3:b8:07:d3:be:e3:5d:67:0c:71:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:15:4e:c6:70:83:bf:f0:e5:61:d9:5f:22: dc:46:3b:7a:d4:d6:ee:e3:cd:f1:3b:ee:2a:69:f4: 4b:82:f7:61:91:0f:92:70:72:36:b9:0a:19:39:89: cb:8d:6f:19:00:4c:6f:d5:6b:04:59:da:60:6c:f3: ae:a5:0e:65:e7:f2:e6:7b:ae:51:0c:e2:60:34:91: 1d:1c:80:41:45:49:54:06:a9:8c:d8:7b:3c:95:24: 98:0b:9c:80:cd:89:35:85:aa:58:ac:8a:74:c3:ea: 44:2c:90:52:31:60:ea:38:cb:b0:6e:34:0f:b6:1e: e1:a0:f8:ea:57:a4:d2:9c:b2:04:e4:e7:1f:e8:c8: a4:2b:8c:4b:da:de:b6:6d:a9:46:62:45:0b:d9:ce: f1:29:af:94:7e:81:27:71:72:b7:b2:7f:ce:0e:46: 78:ca:c1:e0:36:dd:6c:f8:f8:c0:b4:92:8e:da:bc: 27:c4:be:93:56:9e:9b:2c:42:cb:72:26:ce:03:76: 29:49:36:ef:9b:ea:9e:14:17:f9:62:9e:14:68:89: 02:fa:a7:00:ab:d0:ae:e1:9f:c6:a9:94:2a:ca:89: 8e:cf:16:b0:cd:09:dd:dd:07:66:58:e9:89:cf:01: 70:7f:bd:7e:99:e7:51:8e:e7:39:35:ce:8e:56:86: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.110.230.0/23 213.110.238.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211403 Signature Algorithm: sha256WithRSAEncryption 06:3c:bd:3d:3a:f6:e0:ac:0d:3b:8a:5d:c9:06:cf:9c:8b:d6: ba:dd:6d:9a:68:9c:ee:5a:f8:7a:aa:93:27:31:b3:93:33:11: 85:e5:77:1d:23:55:e1:8c:1e:ef:80:1c:5e:26:61:ed:f8:f4: 27:73:85:9a:5c:8d:e8:2f:b8:d6:a0:70:08:e5:e3:8b:94:8f: 54:ac:fa:da:b1:7a:33:78:a2:0e:90:87:9d:0c:95:41:2d:9c: 8c:b7:0e:b6:b8:9a:df:b6:5a:de:f1:75:74:c1:e4:44:c2:a6: 8d:2c:68:bb:cb:9c:63:e7:ba:b4:86:22:e5:14:90:4b:b3:24: 75:b0:4f:33:36:05:f8:0d:e8:6a:b9:e1:2a:d2:25:3f:df:51: 07:96:a8:62:9d:24:aa:4d:e2:c9:41:7a:73:d2:67:5f:5c:2c: 3e:a3:1c:e1:3f:d8:e8:85:f4:d0:4b:26:02:9d:01:c2:61:52: 6e:59:cc:b1:3e:36:77:96:20:fe:94:6f:71:8c:26:51:2f:0f: 7a:ac:85:fb:0b:3f:76:9d:65:e3:a6:be:cf:67:2d:d6:84:2d: fe:b1:f6:77:7f:a5:71:3e:e1:83:85:06:a8:37:5e:50:2a:ae: c5:da:d4:bf:17:4f:49:99:22:34:0a:63:d2:1a:81:a3:6f:6c: 00:24:99:8e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt3xxPjH+O4B9O+411nDHH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzk4MzFmN2JhM2RlMmZiZWYxNmQ0NjQ5ZmQ0ODYwYzE1ZTlkNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IoVTsZwg7/w5WHZXyLcRjt61Nbu 483xO+4qafRLgvdhkQ+ScHI2uQoZOYnLjW8ZAExv1WsEWdpgbPOupQ5l5/Lme65R DOJgNJEdHIBBRUlUBqmM2Hs8lSSYC5yAzYk1hapYrIp0w+pELJBSMWDqOMuwbjQP th7hoPjqV6TSnLIE5Ocf6MikK4xL2t62balGYkUL2c7xKa+UfoEncXK3sn/ODkZ4 ysHgNt1s+PjAtJKO2rwnxL6TVp6bLELLcibOA3YpSTbvm+qeFBf5Yp4UaIkC+qcA q9Cu4Z/GqZQqyomOzxawzQnd3QdmWOmJzwFwf71+medRjuc5Nc6OVoZWWwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFAOYMfe6PeL77xbUZJ/UhgwV6dbDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2U0NDk0 ZS0xZTMzLTQ0MzctODQzMy0wMzdiNWE3Yjk1NDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvZTQ0OTRl LTFlMzMtNDQzNy04NDMzLTAzN2I1YTdiOTU0NC8xL0E1Z3g5N285NHZ2dkZ0Umtu OVNHREJYcDFzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQB1W7mAwQB1W7uMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwM5yzANBgkqhkiG9w0BAQsFAAOCAQEABjy9PTr24KwNO4pdyQbPnIvW ut1tmmic7lr4eqqTJzGzkzMRheV3HSNV4Ywe74AcXiZh7fj0J3OFmlyN6C+41qBw COXji5SPVKz62rF6M3iiDpCHnQyVQS2cjLcOtria37Za3vF1dMHkRMKmjSxou8uc Y+e6tIYi5RSQS7MkdbBPMzYF+A3oarnhKtIlP99RB5aoYp0kqk3iyUF6c9JnX1ws PqMc4T/Y6IX00EsmAp0BwmFSblnMsT42d5Yg/pRvcYwmUS8PeqyF+ws/dp1l46a+ z2ct1oQt/rH2d3+lcT7hg4UGqDdeUCquxdrUvxdPSZkiNApj0hqBo29sACSZjg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:29 2026 by rpki-client