This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer File: L89hnM7Pg29WpyAQ6C-33SQEAvk.cer (raw, json) Hash identifier: CdrIIE/3iF8ZFcV9gPVzULUq7kf8bFLiqywCk3nIb/A= Subject key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E1E194FBE319E7F7FFD393D8DB176 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209095 IP: 5.182.136.0/22 IP: 2a0e:3400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1e:19:4f:be:31:9e:7f:7f:fd:39:3d:8d:b1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:ac:93:73:ad:33:63:fb:30:ce:58:86:cc: d4:f2:c5:e2:c7:d8:fb:13:3f:bb:2d:93:de:b3:25: 3b:ad:ae:35:a3:52:19:f0:67:e2:1f:5e:04:46:79: 93:06:d5:cd:9a:a8:39:0c:2b:69:e7:d0:e4:45:f6: 89:1a:79:2b:38:5b:66:11:de:18:70:07:0c:fe:70: 9c:61:20:2a:c0:cd:3d:6f:7e:19:01:6f:dc:15:15: 96:ff:81:6e:ed:ec:f6:c0:5e:aa:8f:15:33:f1:56: e7:52:33:8e:f6:e3:23:2d:ac:2b:38:e4:ab:16:02: 53:0a:ed:22:ec:d8:af:3a:20:0f:b6:c1:85:0b:62: 83:6e:48:76:a5:44:45:ad:87:86:b9:ab:75:30:11: 22:57:25:f6:09:0a:a9:71:63:7c:a6:6b:c2:8d:99: 90:6d:4f:54:8e:f4:42:e9:4a:a2:46:36:de:fb:75: f7:61:99:48:ee:b5:b5:91:1b:57:77:9b:ee:2c:3c: a5:b4:f6:e5:f2:af:9d:4d:fb:50:57:c8:78:cf:f6: d3:79:b9:f9:3c:4d:28:3f:ec:63:34:89:f1:9b:07: 42:43:8a:28:74:5e:b1:11:cf:f7:98:85:a6:81:a2: 83:fb:5c:e4:8c:c1:06:fa:46:56:7c:b0:44:b2:03: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.136.0/22 IPv6: 2a0e:3400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209095 Signature Algorithm: sha256WithRSAEncryption 25:e3:7f:c9:48:a7:b7:e0:f3:d5:d1:1b:b1:60:15:d0:ca:15: 19:ff:a7:93:5a:18:a7:2e:0f:93:77:4e:58:fb:75:f3:f3:59: b0:94:5e:b3:d4:ac:c5:6d:d2:b9:0e:08:50:3b:c9:ea:cb:8f: 99:a2:e9:62:4b:29:2a:d1:ad:84:6d:0a:d0:f7:1f:db:c0:b0: 4e:5f:68:dc:39:27:03:3d:c1:9a:3b:9c:8c:89:40:f7:7e:4e: 3c:85:a6:0c:7b:30:69:d3:f1:94:29:f5:26:69:29:1b:6e:45: 2c:2e:a9:1a:d0:8d:ef:93:3d:af:c9:2d:59:a4:7b:8b:5d:15: d7:87:2a:1f:f0:d1:7e:d1:7a:96:65:95:8d:3c:ca:43:2e:70: 98:27:48:8c:aa:2e:8c:e6:4b:1b:43:40:3f:3b:6b:ab:3f:08: 7c:6d:52:64:a3:75:0a:69:df:e5:bf:0c:c4:b6:6e:0a:e4:49: 8b:14:d4:e2:4d:34:70:a4:03:82:fd:af:96:9a:19:25:90:0d: af:c0:10:c7:9e:e0:64:15:18:aa:0c:f8:02:2c:8d:aa:e0:e7: ec:25:5f:b2:4b:aa:57:cf:43:37:ce:90:80:56:24:0b:c3:97: 34:9a:ff:10:f0:a3:26:8d:3f:3d:95:17:0a:b6:f8:2a:27:ef: 63:0e:82:e5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fh4ZT74xnn9//Tk9jbF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmNmNjE5Y2NlY2Y4MzZmNTZhNzIwMTBlODJmYjdkZDI0MDQwMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQqsk3OtM2P7MM5YhszU8sXix9j7 Ez+7LZPesyU7ra41o1IZ8GfiH14ERnmTBtXNmqg5DCtp59DkRfaJGnkrOFtmEd4Y cAcM/nCcYSAqwM09b34ZAW/cFRWW/4Fu7ez2wF6qjxUz8VbnUjOO9uMjLawrOOSr FgJTCu0i7NivOiAPtsGFC2KDbkh2pURFrYeGuat1MBEiVyX2CQqpcWN8pmvCjZmQ bU9UjvRC6UqiRjbe+3X3YZlI7rW1kRtXd5vuLDyltPbl8q+dTftQV8h4z/bTebn5 PE0oP+xjNInxmwdCQ4oodF6xEc/3mIWmgaKD+1zkjMEG+kZWfLBEsgOsIwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC/PYZzOz4NvVqcgEOgvt90kBAL5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2M1ZGM3 My05YmUyLTQ1MDMtODI4MS00YjM1MGVhY2M4NmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvYzVkYzcz LTliZTItNDUwMy04MjgxLTRiMzUwZWFjYzg2Yi8xL0w4OWhuTTdQZzI5V3B5QVE2 Qy0zM1NRRUF2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbaIMA0EAgACMAcDBQMqDjQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwxzANBgkqhkiG9w0BAQsFAAOCAQEAJeN/yUint+Dz 1dEbsWAV0MoVGf+nk1oYpy4Pk3dOWPt18/NZsJRes9SsxW3SuQ4IUDvJ6suPmaLp YkspKtGthG0K0Pcf28CwTl9o3DknAz3BmjucjIlA935OPIWmDHswadPxlCn1Jmkp G25FLC6pGtCN75M9r8ktWaR7i10V14cqH/DRftF6lmWVjTzKQy5wmCdIjKoujOZL G0NAPztrqz8IfG1SZKN1Cmnf5b8MxLZuCuRJixTU4k00cKQDgv2vlpoZJZANr8AQ x57gZBUYqgz4AiyNquDn7CVfskuqV89DN86QgFYkC8OXNJr/EPCjJo0/PZUXCrb4 KifvYw6C5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:43 2026 by rpki-client