This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer (raw, json) Hash identifier: BJuhb1lvGQJWdL0eYx+uhNeg0Ck+I8TIrbJK/qYxnxk= Subject key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC79D507C2147F70A26A252D7E9DF80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41638 AS: 214391 IP: 91.195.217.0/24 IP: 195.138.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9d:50:7c:21:47:f7:0a:26:a2:52:d7:e9:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f91e5b58da326e654e994fef2195276759579be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:8a:e9:2e:2c:a8:30:70:b9:59:bb:2d:32: 2c:92:e3:47:1f:36:a6:e2:08:ef:e6:45:2d:99:c8: b4:be:8f:d6:7d:de:1d:2e:03:f0:74:04:8d:8a:4d: 9a:61:3a:7e:e8:8d:22:88:6c:23:5a:df:0f:55:c2: 16:64:f3:7d:11:5e:75:40:fd:e6:d4:61:f8:86:fb: 47:40:a5:36:75:bb:01:31:0c:84:45:11:54:e3:84: 67:e8:43:d3:6f:37:a0:57:88:9a:b4:8d:15:11:8e: f8:f5:fa:cd:c1:10:5d:a1:b1:42:ad:a5:4b:48:ec: 28:a3:fa:11:cf:ab:72:f1:6b:2c:d5:9d:b1:16:c4: 75:25:0c:5f:01:f5:e6:5c:96:30:c7:45:e5:73:1b: 29:4f:57:a9:23:65:a0:0e:45:d0:9c:a2:a3:b5:da: 91:25:44:22:9e:54:47:5d:4b:b7:3d:84:6b:0c:c8: a3:69:4d:12:2d:0c:5b:83:b8:4c:22:63:e5:cc:80: 78:b9:d8:12:93:c5:c7:31:33:f2:ed:41:ed:48:04: 88:86:32:b2:10:9b:bb:d5:bb:48:5f:80:8c:e5:b4: 8d:95:7b:8c:41:fd:8a:2f:d0:65:7a:e3:c3:d5:66: 1d:3b:01:26:7f:06:89:e7:32:43:f9:5e:36:99:1f: 1e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.217.0/24 195.138.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41638 214391 Signature Algorithm: sha256WithRSAEncryption 4d:f5:0c:f8:e6:dd:4a:54:14:4a:3e:5f:f0:6d:94:6a:f6:68: 7b:99:c5:c3:e1:2d:f5:70:28:ce:3d:34:bc:d1:1a:a0:fa:49: 80:8b:49:06:30:79:a4:a9:62:7f:1b:94:dd:88:26:4d:00:25: 39:9c:26:4b:13:e7:3a:28:b6:95:73:de:c4:21:20:1d:8f:af: 10:c7:53:0d:3d:e0:92:da:53:ad:0f:d0:f9:5e:0e:7a:cf:36: 07:a7:e3:53:4d:14:90:00:29:eb:c4:c9:07:b3:ae:4f:53:3b: fc:21:a9:44:69:fc:cc:f7:23:77:ac:1b:e0:97:b0:6f:58:cc: 0d:4c:92:3b:58:c0:00:92:1b:b0:39:53:bc:d7:46:d5:a8:b8: fe:76:0c:3d:95:fa:63:d4:4a:4d:8c:0b:31:0c:a9:ab:49:61: 2d:c9:89:cc:cc:f8:69:28:57:e7:80:cf:0f:cd:9e:fa:33:69: 3b:6d:5b:45:cf:b2:14:60:bc:2f:f6:61:a3:30:ea:10:bd:14: 43:2c:00:9e:5c:3f:d4:43:8d:e8:65:de:95:7a:19:10:c7:ba: 2e:98:4e:fb:9a:51:12:4e:ea:37:19:fa:9f:17:f1:7d:89:ea: d6:2f:3b:08:55:d6:e2:e6:f7:98:29:b2:22:33:57:a2:4e:b0: 6e:a2:07:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt6x51QfCFH9womolLX6d+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjkxZTViNThkYTMyNmU2NTRlOTk0ZmVmMjE5NTI3Njc1OTU3OWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqciK6S4sqDBwuVm7LTIskuNHHzam 4gjv5kUtmci0vo/Wfd4dLgPwdASNik2aYTp+6I0iiGwjWt8PVcIWZPN9EV51QP3m 1GH4hvtHQKU2dbsBMQyERRFU44Rn6EPTbzegV4iatI0VEY749frNwRBdobFCraVL SOwoo/oRz6ty8Wss1Z2xFsR1JQxfAfXmXJYwx0XlcxspT1epI2WgDkXQnKKjtdqR JUQinlRHXUu3PYRrDMijaU0SLQxbg7hMImPlzIB4udgSk8XHMTPy7UHtSASIhjKy EJu71btIX4CM5bSNlXuMQf2KL9BleuPD1WYdOwEmfwaJ5zJD+V42mR8e4QIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFA+R5bWNoybmVOmU/vIZUnZ1lXm+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzI2NWVm YS1mMDQ5LTQ2NDctOGNmMS04MjRjY2VmZDljODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMjY1ZWZh LWYwNDktNDY0Ny04Y2YxLTgyNGNjZWZkOWM4MS8xL0Q1SGx0WTJqSnVaVTZaVC04 aGxTZG5XVmViNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW8PZAwQAw4reMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCipgIDA0V3MA0GCSqGSIb3DQEBCwUAA4IBAQBN9Qz45t1KVBRKPl/w bZRq9mh7mcXD4S31cCjOPTS80Rqg+kmAi0kGMHmkqWJ/G5TdiCZNACU5nCZLE+c6 KLaVc97EISAdj68Qx1MNPeCS2lOtD9D5Xg56zzYHp+NTTRSQACnrxMkHs65PUzv8 IalEafzM9yN3rBvgl7BvWMwNTJI7WMAAkhuwOVO810bVqLj+dgw9lfpj1EpNjAsx DKmrSWEtyYnMzPhpKFfngM8PzZ76M2k7bVtFz7IUYLwv9mGjMOoQvRRDLACeXD/U Q43oZd6VehkQx7oumE77mlESTuo3GfqfF/F9ierWLzsIVdbi5veYKbIiM1eiTrBu ogce -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:46 2026 by rpki-client