This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer File: P5YkCZj85BJMPLTfusuw7RYYQFo.cer (raw, json) Hash identifier: f5ErMa5qANikzd1joD4J2/T/m0hjdicG2FEcYjppGN0= Subject key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21D3CCF036BD6EB12C76739BF3857 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198101 AS: 201457 IP: 185.52.216.0/22 IP: 185.74.204.0/22 IP: 2a03:4760::/29 IP: 2a04:bf80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1d:3c:cf:03:6b:d6:eb:12:c7:67:39:bf:38:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:52:f3:26:53:aa:c3:ad:59:aa:c2:ac:44: 3d:5c:53:a6:3d:b1:8a:59:4b:78:6f:30:7b:e1:be: 81:bd:ae:b9:03:93:d6:c1:e0:3f:0e:1a:c5:63:a4: 0e:30:b8:ad:06:97:b6:93:33:ef:87:48:02:e9:8c: 91:42:44:fd:c8:a2:76:33:e4:d8:f4:f8:7a:b6:51: 98:a0:66:fe:86:bc:69:1f:a4:74:da:ba:24:80:20: 58:d5:50:a8:4d:c9:fa:f6:d9:ff:61:3e:6e:60:c9: b0:fc:05:7f:d6:8f:01:79:ca:3d:67:16:dd:17:e2: 49:b2:34:d5:1f:f3:d9:61:c7:ef:da:ed:fa:39:85: 6c:4d:10:80:ea:32:46:f3:64:f3:3a:06:77:53:0d: c6:e9:ad:f2:a4:e4:67:ac:c8:21:bb:52:96:bf:d3: 93:3e:c1:62:c6:8c:28:7a:ff:10:63:28:fc:cc:b6: ad:52:66:a0:b9:91:1a:25:51:fc:13:7f:d3:8e:97: 57:b1:35:3c:17:88:45:f4:ad:7c:69:2d:8d:8d:82: 88:03:98:78:43:4b:d8:fc:2e:2b:f2:84:95:3c:84: 5d:32:cb:6f:a2:11:a3:22:56:fd:d2:fc:f5:61:fc: 0e:a9:62:8f:b9:19:33:8a:97:f9:f1:e6:fd:d6:d3: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.216.0/22 185.74.204.0/22 IPv6: 2a03:4760::/29 2a04:bf80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198101 201457 Signature Algorithm: sha256WithRSAEncryption 23:96:d1:a4:ee:cb:6c:49:1f:d5:49:bf:d6:0e:9b:b3:58:2d: e9:bb:55:18:f0:e7:a7:05:07:d0:13:31:3b:5c:03:63:ac:4c: b9:a2:f0:93:62:0b:63:6b:ef:43:87:c0:01:0c:9d:3b:fa:98: f4:3d:b7:1b:69:38:9c:cd:13:87:f5:70:d1:06:97:b9:f4:0e: 6b:bf:15:5f:95:dd:39:a3:32:69:d5:ed:4e:47:0f:52:82:25: 1f:6e:04:51:b8:6c:eb:5c:ba:2a:b8:3a:f4:89:46:ce:10:30: ba:c2:ef:29:df:3d:71:54:20:16:75:30:8e:c9:6a:07:93:47: 00:f1:19:f7:8e:87:5b:fa:2d:a5:5c:0c:34:3e:d7:b2:9b:b3: 14:ac:fb:80:4d:8f:97:1b:90:88:08:88:69:79:b7:5c:44:cb: 1d:b8:e2:cf:e3:01:ae:b3:b2:4c:aa:af:d7:1e:c6:5f:8c:d0: da:b0:93:cf:4a:62:c6:f8:bc:b7:4c:6a:07:d7:ed:2c:99:e9: 33:b4:ee:a2:67:66:38:e2:0a:88:02:79:94:bd:74:76:b6:0a: 20:f3:7f:97:bf:d9:fb:5d:a7:e7:4c:04:a4:b8:4f:14:5e:51: 59:65:29:98:14:9b:58:a8:d5:79:2d:a2:95:1c:dd:db:7a:f4: 7b:ab:19:c5 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/8h08zwNr1usSx2c5vzhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjk2MjQwOTk4ZmNlNDEyNGMzY2I0ZGZiYWNiYjBlZDE2MTg0MDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgdS8yZTqsOtWarCrEQ9XFOmPbGK WUt4bzB74b6Bva65A5PWweA/DhrFY6QOMLitBpe2kzPvh0gC6YyRQkT9yKJ2M+TY 9Ph6tlGYoGb+hrxpH6R02rokgCBY1VCoTcn69tn/YT5uYMmw/AV/1o8Beco9Zxbd F+JJsjTVH/PZYcfv2u36OYVsTRCA6jJG82TzOgZ3Uw3G6a3ypORnrMghu1KWv9OT PsFixowoev8QYyj8zLatUmaguZEaJVH8E3/TjpdXsTU8F4hF9K18aS2NjYKIA5h4 Q0vY/C4r8oSVPIRdMstvohGjIlb90vz1YfwOqWKPuRkzipf58eb91tNt6wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFD+WJAmY/OQSTDy037rLsO0WGEBaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzYwZmVj Ny0wYjUxLTQ0NDYtOWI1ZC1jNzQxYzI3YjRlMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNjBmZWM3 LTBiNTEtNDQ0Ni05YjVkLWM3NDFjMjdiNGUyMi8xL1A1WWtDWmo4NUJKTVBMVGZ1 c3V3N1JZWVFGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuTTYAwQCuUrMMBQEAgACMA4DBQMqA0dgAwUD KgS/gDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDBdUCAwMS8TANBgkqhkiG9w0B AQsFAAOCAQEAI5bRpO7LbEkf1Um/1g6bs1gt6btVGPDnpwUH0BMxO1wDY6xMuaLw k2ILY2vvQ4fAAQydO/qY9D23G2k4nM0Th/Vw0QaXufQOa78VX5XdOaMyadXtTkcP UoIlH24EUbhs61y6Krg69IlGzhAwusLvKd89cVQgFnUwjslqB5NHAPEZ946HW/ot pVwMND7XspuzFKz7gE2PlxuQiAiIaXm3XETLHbjiz+MBrrOyTKqv1x7GX4zQ2rCT z0pixvi8t0xqB9ftLJnpM7TuomdmOOIKiAJ5lL10drYKIPN/l7/Z+12n50wEpLhP FF5RWWUpmBSbWKjVeS2ilRzd23r0e6sZxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:19 2026 by rpki-client