This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer File: F5WshDzYupAYj3MTZSu1YSmbKW8.cer (raw, json) Hash identifier: GbEonNe9NMqjvxwNg3hVC6FR5ndDb6F62pNXQRQlAMA= Subject key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBC2ADAD7B35EE74753EE70F9B3C9A15C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 11:01:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31313 AS: 208096 IP: 85.136.116.0/22 IP: 86.105.108.0/22 IP: 86.105.216.0/22 IP: 89.35.192.0/24 IP: 89.41.56.0/23 IP: 89.42.116.0/23 IP: 89.43.190.0/23 IP: 89.124.128.0 -- 89.124.223.255 IP: 89.200.246.0/23 IP: 91.235.4.0/23 IP: 93.113.29.0/24 IP: 130.195.57.0/24 IP: 176.126.220.0/23 IP: 176.126.252.0/22 IP: 185.57.80.0/22 IP: 185.59.240.0/22 IP: 185.233.148.0/22 IP: 193.151.28.0/22 IP: 193.169.21.0/24 IP: 195.242.244.0/22 IP: 203.25.143.0/24 IP: 213.177.0.0/19 IP: 2a00:5dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:2a:da:d7:b3:5e:e7:47:53:ee:70:f9:b3:c9:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 11:01:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1795ac843cd8ba90188f7313652bb561299b296f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:04:b2:30:d2:1f:16:6e:5f:5d:19:e2:f2: 7c:06:05:47:50:ce:29:0f:cc:18:ea:b4:8d:09:73: 38:8d:5a:e9:3f:b2:44:9e:5f:33:06:26:9c:d4:b5: a6:3b:f7:75:52:37:0f:b3:be:9f:ea:2a:0d:d7:07: d9:a8:8b:f8:5d:4e:9e:9e:d4:ab:1b:01:62:fa:35: 7a:c1:89:f1:1b:a0:3c:06:4d:58:04:9d:c3:b9:73: b9:36:3c:97:fe:3a:7e:27:19:8b:e4:6d:0a:17:23: 24:62:aa:3b:68:c3:a7:23:34:24:b1:0b:cf:d2:93: fe:e7:36:9e:50:3a:2e:ff:84:27:68:26:6f:94:ba: 22:97:ee:5f:f7:01:14:8e:34:b8:ce:ab:01:7d:0e: 08:77:b5:17:95:ca:dc:45:28:a1:2b:40:88:67:ca: 74:1e:d9:12:13:a0:0b:cd:28:0c:bc:7c:a6:36:64: ad:c2:56:a4:ff:89:6c:f5:ab:84:45:6d:68:45:05: c5:fa:f1:3e:2f:35:17:ae:ec:71:a9:ea:a2:68:3c: bd:2c:b5:85:d5:36:ce:48:37:f7:11:eb:99:97:e0: d2:cd:42:e8:43:9d:40:2c:3e:bc:bd:66:f3:15:7a: 60:a3:9f:cf:9e:e7:ac:07:ad:e2:f6:45:b9:3b:17: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.136.116.0/22 86.105.108.0/22 86.105.216.0/22 89.35.192.0/24 89.41.56.0/23 89.42.116.0/23 89.43.190.0/23 89.124.128.0-89.124.223.255 89.200.246.0/23 91.235.4.0/23 93.113.29.0/24 130.195.57.0/24 176.126.220.0/23 176.126.252.0/22 185.57.80.0/22 185.59.240.0/22 185.233.148.0/22 193.151.28.0/22 193.169.21.0/24 195.242.244.0/22 203.25.143.0/24 213.177.0.0/19 IPv6: 2a00:5dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31313 208096 Signature Algorithm: sha256WithRSAEncryption 9f:8e:fe:8a:a4:bc:38:9d:d6:75:f7:87:50:e9:70:c1:4e:e1: 0e:a3:0f:a5:f9:a1:f3:a1:f1:94:bd:6c:7f:24:5c:dc:2e:24: 8d:50:d7:64:89:87:d7:f5:3a:6f:de:93:db:37:ff:cd:84:23: 28:df:46:ee:df:c3:c3:8b:e4:7f:21:ce:87:29:e9:73:4b:d1: 54:13:5f:57:43:54:05:25:8b:58:8e:80:17:70:be:60:fc:a8: ea:f4:77:b1:a6:3c:37:16:05:b6:e4:5a:e9:b8:ea:ac:a1:73: 7d:e7:53:cf:a7:51:41:96:e2:f6:bc:3c:f0:f1:2d:b8:00:42: 94:77:a4:b2:92:ac:9d:d1:0e:2a:0b:90:34:d9:eb:d1:57:b9: 19:b6:2d:f1:e2:67:43:55:2b:f2:c3:0e:d7:61:17:66:59:8b: 23:eb:72:c4:c1:a9:87:b6:15:5c:01:a1:5a:2f:99:82:09:9d: 42:24:fb:cd:2a:1f:1e:56:61:c3:23:aa:87:2c:d8:28:d6:f8: cb:8b:d5:d5:f1:47:1c:eb:27:e0:e4:bf:91:2e:df:3b:e8:2c: 73:24:0a:93:73:4d:78:a2:be:69:74:66:c6:5a:47:3f:e6:ec: 96:9a:e8:0e:39:ed:20:ab:29:48:13:0c:12:c4:1a:bf:6e:34: 70:75:5f:80 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgISAZu8KtrXs17nR1PucPmzyaFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MTEwMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzk1YWM4NDNjZDhiYTkwMTg4ZjczMTM2NTJiYjU2MTI5OWIyOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFkEsjDSHxZuX10Z4vJ8BgVHUM4p D8wY6rSNCXM4jVrpP7JEnl8zBiac1LWmO/d1UjcPs76f6ioN1wfZqIv4XU6entSr GwFi+jV6wYnxG6A8Bk1YBJ3DuXO5NjyX/jp+JxmL5G0KFyMkYqo7aMOnIzQksQvP 0pP+5zaeUDou/4QnaCZvlLoil+5f9wEUjjS4zqsBfQ4Id7UXlcrcRSihK0CIZ8p0 HtkSE6ALzSgMvHymNmStwlak/4ls9auERW1oRQXF+vE+LzUXruxxqeqiaDy9LLWF 1TbOSDf3EeuZl+DSzULoQ51ALD68vWbzFXpgo5/PnuesB63i9kW5OxeX5QIDAQAB o4IDPjCCAzowHQYDVR0OBBYEFBeVrIQ82LqQGI9zE2UrtWEpmylvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzY2ODNm NC0zZWVjLTRkY2ItODc4Ny03MzFhYmM2Zjc1Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNjY4M2Y0 LTNlZWMtNGRjYi04Nzg3LTczMWFiYzZmNzVjYS8xL0Y1V3NoRHpZdXBBWWozTVRa U3UxWVNtYktXOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG4BggrBgEF BQcBBwEB/wSBqDCBpTCBkwQCAAEwgYwDBAJViHQDBAJWaWwDBAJWadgDBABZI8AD BAFZKTgDBAFZKnQDBAFZK74wDAMEB1l8gAMEBVl8wAMEAVnI9gMEAVvrBAMEAF1x HQMEAILDOQMEAbB+3AMEArB+/AMEArk5UAMEArk78AMEArnplAMEAsGXHAMEAMGp FQMEAsPy9AMEAMsZjwMEBdWxADANBAIAAjAHAwUDKgBdwDAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgJ6UQIDAyzgMA0GCSqGSIb3DQEBCwUAA4IBAQCfjv6KpLw4ndZ1 94dQ6XDBTuEOow+l+aHzofGUvWx/JFzcLiSNUNdkiYfX9Tpv3pPbN//NhCMo30bu 38PDi+R/Ic6HKelzS9FUE19XQ1QFJYtYjoAXcL5g/Kjq9Hexpjw3FgW25FrpuOqs oXN951PPp1FBluL2vDzw8S24AEKUd6Sykqyd0Q4qC5A02evRV7kZti3x4mdDVSvy ww7XYRdmWYsj63LEwamHthVcAaFaL5mCCZ1CJPvNKh8eVmHDI6qHLNgo1vjLi9XV 8Ucc6yfg5L+RLt876CxzJAqTc014or5pdGbGWkc/5uyWmugOOe0gqylIEwwSxBq/ bjRwdV+A -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:02 2026 by rpki-client