This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer File: F5meIRkUpo24Pq8_f9OExT50dFU.cer (raw, json) Hash identifier: urIAFB9buKN3cKz+1RebhC5j85vZsOe4OMjEbciYTMA= Subject key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED271D129ED8DA91C7DAFC56D5B8CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211037 IP: 185.21.134.0/24 IP: 2a04:4480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:27:1d:12:9e:d8:da:91:c7:da:fc:56:d5:b8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17999e211914a68db83eaf3f7fd384c53e747455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:78:5e:a6:43:16:36:dc:f8:e5:1b:69:89: e5:c7:0c:4c:4e:eb:7f:f9:17:1f:75:48:5e:90:98: f0:b5:b2:20:e0:61:b2:eb:2d:7c:c7:b6:e7:a1:cd: a4:69:3a:53:e9:7c:c5:0e:aa:a2:f5:98:b4:62:cb: f5:87:99:51:cf:c2:58:97:5f:41:f0:e9:1a:12:2c: 59:33:a1:94:1c:ea:dd:7d:c5:3b:f7:b5:27:fb:da: 80:14:a6:1f:aa:14:2e:e1:28:6c:4f:15:12:95:04: da:31:6b:3e:8e:48:08:2b:1f:46:20:c4:c7:b2:72: 3d:c5:6d:67:a7:70:ac:66:ea:50:59:7a:71:80:a7: 42:64:62:c5:15:81:e3:bc:cd:35:87:40:e5:be:87: 35:97:23:af:7e:87:18:08:82:23:d4:99:7b:64:ba: af:05:12:a2:99:62:96:c6:81:17:84:b2:6b:04:17: ef:84:97:14:8d:05:1a:8a:03:ef:ff:5b:10:65:d2: ec:bf:b9:d1:95:25:45:b3:53:23:4f:c5:5b:a0:4c: 42:53:a2:58:e8:b0:31:af:4e:10:75:65:26:f6:16: 76:db:35:28:b7:f9:35:10:3c:61:da:8e:46:fe:18: a0:d4:01:a3:b3:c1:e3:ca:da:b1:fa:14:5f:33:40: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.134.0/24 IPv6: 2a04:4480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211037 Signature Algorithm: sha256WithRSAEncryption 71:32:16:e7:88:2f:52:9b:0c:71:26:f0:45:3e:ee:93:63:eb: 89:8c:7c:32:60:7e:96:10:90:b2:3d:5f:ae:30:57:bb:49:ef: 38:0f:c3:71:89:30:5d:e0:cc:8a:3e:ec:96:95:17:92:52:64: ec:1e:8d:55:73:2a:fe:d3:5f:fa:be:05:54:b4:20:bb:e8:3d: 1f:bf:ff:17:d3:7e:9e:68:69:c7:1d:d5:06:31:a2:f6:44:d8: 13:ff:c1:58:c0:5e:1f:2c:35:e9:75:6f:0e:a4:a5:cf:3d:e0: 02:6a:cf:06:b3:73:3f:40:eb:c2:b9:4f:aa:ff:40:3e:20:b5: 16:e4:cd:74:16:e5:10:d8:c9:f7:cc:2e:5c:a4:e0:db:00:1f: d8:01:a9:0e:ba:73:eb:83:6a:7c:41:fe:68:91:0f:d2:7a:8e: b6:21:7c:50:5b:a2:04:74:98:80:bd:70:d9:ef:6b:e8:34:8d: 7f:29:62:03:f2:f6:67:16:34:b1:ca:a8:d7:09:80:8a:6e:07: a4:b7:1d:cc:88:f5:fa:91:1a:03:41:3c:0b:0a:ed:55:21:b8: ad:3b:a9:43:b5:e6:e3:35:df:e5:1a:59:cd:c9:74:3d:fd:ed: 89:fb:2a:2a:89:97:67:e5:1f:7a:85:df:6b:22:69:a5:39:f9: 15:db:91:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57ScdEp7Y2pHH2vxW1bjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzk5OWUyMTE5MTRhNjhkYjgzZWFmM2Y3ZmQzODRjNTNlNzQ3NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+l4XqZDFjbc+OUbaYnlxwxMTut/ +RcfdUhekJjwtbIg4GGy6y18x7bnoc2kaTpT6XzFDqqi9Zi0Ysv1h5lRz8JYl19B 8OkaEixZM6GUHOrdfcU797Un+9qAFKYfqhQu4ShsTxUSlQTaMWs+jkgIKx9GIMTH snI9xW1np3CsZupQWXpxgKdCZGLFFYHjvM01h0Dlvoc1lyOvfocYCIIj1Jl7ZLqv BRKimWKWxoEXhLJrBBfvhJcUjQUaigPv/1sQZdLsv7nRlSVFs1MjT8VboExCU6JY 6LAxr04QdWUm9hZ22zUot/k1EDxh2o5G/hig1AGjs8Hjytqx+hRfM0BjMwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBeZniEZFKaNuD6vP3/ThMU+dHRVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2VhMTE3 YS00MTJhLTQ5ZTItODkwZi00YmI0M2JhM2NkZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZWExMTdh LTQxMmEtNDllMi04OTBmLTRiYjQzYmEzY2RlMy8xL0Y1bWVJUmtVcG8yNFBxOF9m OU9FeFQ1MGRGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuRWGMA0EAgACMAcDBQAqBESAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4XTANBgkqhkiG9w0BAQsFAAOCAQEAcTIW54gvUpsM cSbwRT7uk2PriYx8MmB+lhCQsj1frjBXu0nvOA/DcYkwXeDMij7slpUXklJk7B6N VXMq/tNf+r4FVLQgu+g9H7//F9N+nmhpxx3VBjGi9kTYE//BWMBeHyw16XVvDqSl zz3gAmrPBrNzP0DrwrlPqv9APiC1FuTNdBblENjJ98wuXKTg2wAf2AGpDrpz64Nq fEH+aJEP0nqOtiF8UFuiBHSYgL1w2e9r6DSNfyliA/L2ZxY0scqo1wmAim4HpLcd zIj1+pEaA0E8CwrtVSG4rTupQ7Xm4zXf5RpZzcl0Pf3tifsqKomXZ+UfeoXfayJp pTn5FduRfg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:28 2026 by rpki-client