This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer (raw, json) Hash identifier: iP+8GaLhmEBlW/7exS+9E5vqxePqD7dRWyvR4a/yZlM= Subject key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B39DFC400609080469AAAB1725079 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51232 IP: 91.216.60.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:39:df:c4:00:60:90:80:46:9a:aa:b1:72:50:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=039916dc890f08fe55c75bb4439d6016704b7a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:c2:1a:b5:3c:3f:2f:29:73:22:19:da:2c: 42:37:bb:0d:87:db:74:14:05:f1:92:b0:89:9d:cd: 45:1a:cd:b5:96:21:fe:a4:ea:52:c6:7c:f2:c6:61: 44:3d:dd:2c:38:f9:eb:ce:a5:2b:8e:c5:0f:e4:ca: 13:a8:a5:37:88:f6:eb:a5:e9:0f:8f:07:66:d8:1b: 7c:68:b6:b2:d0:52:52:59:6e:3b:cb:5b:21:76:b0: 7c:86:47:2f:e4:81:57:d6:a8:08:7d:b9:4d:d2:fc: 86:c7:7e:08:b1:37:36:09:63:3b:2a:a7:15:0c:b2: f0:fa:a9:65:47:6e:05:15:4b:72:47:f6:a3:e2:f0: b9:ba:70:1a:5f:b4:a8:4c:37:16:66:cd:db:1f:82: 22:77:28:91:7a:b3:84:d9:e6:c7:25:8f:53:5d:29: 76:b2:39:0c:d9:e9:53:35:af:b4:3a:6d:d8:2a:5e: a8:9a:f2:2f:bf:b9:94:77:f1:fa:ec:6f:fb:27:f9: 0e:15:b5:f8:eb:cf:08:3d:36:2d:e4:b1:b2:7d:9a: ba:97:b1:4e:b3:37:d3:f1:8c:8b:9e:65:06:ce:63: 5c:00:32:24:59:01:4a:f9:c2:3e:02:4d:63:27:86: 97:81:e5:24:4d:67:ac:ff:8a:a5:90:8e:b3:f4:a2: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.60.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51232 Signature Algorithm: sha256WithRSAEncryption 34:c8:49:44:94:aa:1e:cd:dd:81:48:88:9b:10:c2:d5:9e:7e: c5:10:25:08:f6:57:c5:3f:02:d7:f7:77:f0:d5:c8:92:6e:c1: 75:9e:26:e8:ad:6c:96:5f:34:9f:f0:0d:26:cc:2c:3b:cf:5e: ff:85:24:21:db:32:e9:75:3e:11:71:6f:67:85:f4:9d:24:09: 4e:ad:0c:d0:a4:d6:b9:0b:ae:da:48:01:58:af:eb:36:12:7d: 4d:33:fd:c6:7b:b1:a8:28:3e:6a:40:dd:d9:48:8f:12:36:bf: 41:b6:e4:8f:a5:e3:4c:74:ec:f3:04:7c:0e:01:9d:15:8c:f2: c1:1a:9f:c4:03:00:53:03:fb:ba:da:7c:76:c8:dc:a9:5f:a9: 66:2f:fe:71:96:17:48:2c:80:5e:db:d8:00:39:ca:b3:79:34: 77:d8:d2:31:47:3e:5a:69:90:a3:f9:22:02:36:1d:9e:2a:a5: df:79:e4:48:f9:2b:ac:59:b9:79:43:ae:5c:ac:6d:3e:bb:b7: 5b:45:a8:73:c8:fb:4a:3a:79:2e:af:0a:4f:65:b7:ee:04:2e: 2b:8e:4a:75:4f:cb:aa:aa:31:68:74:58:d9:1a:80:53:83:ab: 96:cc:4a:98:07:d0:f7:7f:b4:65:ca:f6:ed:69:0a:96:71:2e: 1c:2a:78:e1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WznfxABgkIBGmqqxclB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzk5MTZkYzg5MGYwOGZlNTVjNzViYjQ0MzlkNjAxNjcwNGI3YTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj7CGrU8Py8pcyIZ2ixCN7sNh9t0 FAXxkrCJnc1FGs21liH+pOpSxnzyxmFEPd0sOPnrzqUrjsUP5MoTqKU3iPbrpekP jwdm2Bt8aLay0FJSWW47y1shdrB8hkcv5IFX1qgIfblN0vyGx34IsTc2CWM7KqcV DLLw+qllR24FFUtyR/aj4vC5unAaX7SoTDcWZs3bH4IidyiRerOE2ebHJY9TXSl2 sjkM2elTNa+0Om3YKl6omvIvv7mUd/H67G/7J/kOFbX4688IPTYt5LGyfZq6l7FO szfT8YyLnmUGzmNcADIkWQFK+cI+Ak1jJ4aXgeUkTWes/4qlkI6z9KLdeQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAOZFtyJDwj+VcdbtEOdYBZwS3phMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzZiYjQ0 NC1jMGFjLTQwNjAtODBkNS1lM2Q0MjcyMTFhODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNmJiNDQ0 LWMwYWMtNDA2MC04MGQ1LWUzZDQyNzIxMWE4My8xL0E1a1czSWtQQ1A1VngxdTBR NTFnRm5CTGVtRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9g8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDIIDANBgkqhkiG9w0BAQsFAAOCAQEANMhJRJSqHs3dgUiImxDC1Z5+xRAlCPZX xT8C1/d38NXIkm7BdZ4m6K1sll80n/ANJswsO89e/4UkIdsy6XU+EXFvZ4X0nSQJ Tq0M0KTWuQuu2kgBWK/rNhJ9TTP9xnuxqCg+akDd2UiPEja/Qbbkj6XjTHTs8wR8 DgGdFYzywRqfxAMAUwP7utp8dsjcqV+pZi/+cZYXSCyAXtvYADnKs3k0d9jSMUc+ WmmQo/kiAjYdniql33nkSPkrrFm5eUOuXKxtPru3W0Woc8j7Sjp5Lq8KT2W37gQu K45KdU/LqqoxaHRY2RqAU4OrlsxKmAfQ93+0Zcr27WkKlnEuHCp44Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:30 2026 by rpki-client