This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer File: E5Mngu53WJkEBPocz7CewjqGEj8.cer (raw, json) Hash identifier: sG2SHTxc0wfLWXNhv1iA5xgR6EVOvhGgizSPew0FJgA= Subject key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8060D53330511AD4402756249588DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3344 AS: 9153 IP: 46.248.96.0/19 IP: 82.136.0.0/18 IP: 85.116.0.0/19 IP: 194.1.148.0/24 IP: 195.22.128.0/23 IP: 195.68.206.0/23 IP: 2001:4088::/32 IP: 2001:4bd0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:d5:33:30:51:1a:d4:40:27:56:24:95:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13932782ee7758990404fa1ccfb09ec23a86123f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:dd:48:2c:ed:a3:b5:d7:2f:5e:bc:df:9a: 1d:c4:f9:67:94:59:1f:fb:de:dd:dd:be:cb:ab:ad: 6d:58:c1:06:d7:75:ea:1b:e5:37:ed:e7:72:f9:28: cb:75:7e:fa:8f:72:8d:6c:37:62:ed:88:5d:ac:52: 07:47:10:26:51:e7:20:50:0f:be:7f:7e:63:a0:ea: 6a:6b:e1:37:e9:a4:6e:a6:51:d8:7a:c4:6b:90:d5: 6c:dd:47:10:45:a7:59:33:14:8b:86:c2:d4:e1:82: 5e:08:8f:ac:12:4a:e3:45:30:f4:d0:fc:54:d5:bf: 47:60:5c:82:d5:72:30:00:09:ee:6c:f1:c7:76:2f: 69:9b:24:96:29:00:15:6f:c2:5b:25:8e:31:64:ba: c5:84:39:59:de:1e:50:15:93:71:a9:0e:43:5c:ff: 7b:bc:f7:e7:84:be:08:05:c7:61:75:25:c7:69:2b: 32:39:12:6b:b9:dc:bb:1f:53:3f:ff:c3:0b:8b:3c: b8:0d:04:53:89:c6:6a:19:8b:62:06:37:68:16:b4: fe:1d:6e:ea:41:e1:b3:d1:86:ad:f7:c7:ff:97:f2: cd:d5:4d:5c:8c:1a:a9:b3:da:0b:bd:d3:20:8e:ef: a9:d4:4c:61:86:e5:9a:36:b3:28:00:45:0c:55:6c: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.96.0/19 82.136.0.0/18 85.116.0.0/19 194.1.148.0/24 195.22.128.0/23 195.68.206.0/23 IPv6: 2001:4088::/32 2001:4bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3344 9153 Signature Algorithm: sha256WithRSAEncryption 3b:56:65:2a:14:d1:bb:ce:8f:11:9c:ae:0a:f9:0a:ca:48:33: a3:5e:6b:8d:98:b8:3a:94:5a:ff:19:79:ee:98:04:ec:9b:5f: 6d:f2:6c:74:ff:69:41:8d:69:d3:a7:4c:d8:3e:8e:f3:58:9f: 32:40:f4:4b:dc:68:c5:57:d3:b2:59:5d:e2:9d:88:e2:48:f2: 4f:5b:03:bb:af:47:58:ae:ff:c4:63:83:65:21:f5:41:a8:c7: dd:be:6a:b8:4e:1c:01:8b:38:d1:75:34:fb:0a:de:b2:d4:e1: 84:36:22:22:1f:ed:35:d1:8f:0b:7e:9b:2f:4b:36:71:36:d9: b5:ca:a7:bc:cb:b4:de:9d:cc:4c:89:3b:17:4d:95:26:5e:41: 66:7d:d9:0f:61:b9:9b:c6:39:e7:3e:88:e7:4f:ae:a3:e4:c8: c1:70:7d:1f:e8:6d:95:37:d7:ad:35:9d:62:7f:31:cb:4f:6f: ff:e7:56:34:ea:37:5d:4f:82:a7:8d:12:85:2c:5f:c7:6a:1a: e6:07:6d:b1:83:e4:fc:2b:95:b4:6c:76:fd:65:93:5f:2b:25: 01:7b:b3:be:94:2f:e9:8d:ca:96:a8:ab:27:f3:67:da:01:df: e6:2c:44:6f:f6:8d:81:d8:3a:df:39:e3:d9:26:e1:12:b9:bd: cf:92:fe:1f -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt8gGDVMzBRGtRAJ1YklYjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzkzMjc4MmVlNzc1ODk5MDQwNGZhMWNjZmIwOWVjMjNhODYxMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rdSCzto7XXL16835odxPlnlFkf +97d3b7Lq61tWMEG13XqG+U37edy+SjLdX76j3KNbDdi7YhdrFIHRxAmUecgUA++ f35joOpqa+E36aRuplHYesRrkNVs3UcQRadZMxSLhsLU4YJeCI+sEkrjRTD00PxU 1b9HYFyC1XIwAAnubPHHdi9pmySWKQAVb8JbJY4xZLrFhDlZ3h5QFZNxqQ5DXP97 vPfnhL4IBcdhdSXHaSsyORJrudy7H1M//8MLizy4DQRTicZqGYtiBjdoFrT+HW7q QeGz0Yat98f/l/LN1U1cjBqps9oLvdMgju+p1ExhhuWaNrMoAEUMVWyZPQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzgyODY1 Mi1hZGRmLTRmZTgtOWZlNi00YjFmNjE2NTNmM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvODI4NjUy LWFkZGYtNGZlOC05ZmU2LTRiMWY2MTY1M2YzZC8xL0U1TW5ndTUzV0prRUJQb2N6 N0Nld2pxR0VqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQFLvhgAwQGUogAAwQFVXQAAwQAwgGUAwQBwxaA AwQBw0TOMBQEAgACMA4DBQAgAUCIAwUAIAFL0DAdBggrBgEFBQcBCAEB/wQOMAyg CjAIAgINEAICI8EwDQYJKoZIhvcNAQELBQADggEBADtWZSoU0bvOjxGcrgr5CspI M6Nea42YuDqUWv8Zee6YBOybX23ybHT/aUGNadOnTNg+jvNYnzJA9EvcaMVX07JZ XeKdiOJI8k9bA7uvR1iu/8Rjg2Uh9UGox92+arhOHAGLONF1NPsK3rLU4YQ2IiIf 7TXRjwt+my9LNnE22bXKp7zLtN6dzEyJOxdNlSZeQWZ92Q9huZvGOec+iOdPrqPk yMFwfR/obZU31601nWJ/MctPb//nVjTqN11PgqeNEoUsX8dqGuYHbbGD5PwrlbRs dv1lk18rJQF7s76UL+mNypaoqyfzZ9oB3+YsRG/2jYHYOt8549km4RK5vc+S/h8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:02 2026 by rpki-client