This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer File: P__L7IiMEEfyIdfPk5a_FBKrr5s.cer (raw, json) Hash identifier: u3J1D52YOTWdd1+XP/fl9fzNyT/V6/oesd7+J5xG5+s= Subject key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE538580455D647A8ACA0906DBF9B79F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 10:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212602 IP: 5.133.114.0/24 IP: 5.180.112.0/23 IP: 84.238.160.0/22 IP: 85.137.220.0/22 IP: 185.194.208.0/22 IP: 2a10:7040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:38:58:04:55:d6:47:a8:ac:a0:90:6d:bf:9b:79:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:48:54:10:84:f6:66:79:ac:f3:74:90:3f: b0:e8:d8:e3:28:10:f7:19:07:4d:fb:a7:2c:6a:d9: cb:fd:97:26:45:c9:83:e8:93:8d:7e:ef:28:62:f0: bd:c2:85:29:62:39:65:1b:2f:60:8d:dd:8d:64:58: 6b:7d:e3:03:d6:86:64:36:38:8c:7f:fe:28:4d:c9: a6:28:d6:07:58:91:68:34:b1:e8:5c:32:85:03:99: 8a:68:ae:c6:87:cf:3e:7a:52:65:4b:26:7e:3f:7c: 20:1b:0d:d4:8a:65:55:c7:63:38:48:b2:e6:9b:1b: 6a:a6:ee:ee:5e:78:b7:71:04:07:6b:ac:00:67:fa: f2:2b:88:9d:c9:be:39:65:70:ad:07:95:43:77:9f: 63:4f:7e:b7:7b:14:e3:0a:2e:80:0b:6a:29:47:09: 00:77:fc:4f:7c:b4:cd:9b:91:d8:db:8a:3d:16:7d: 57:8c:52:bb:e3:4f:d1:0d:20:aa:95:5b:36:88:17: 50:a1:d3:e0:da:5e:e3:69:01:eb:fd:3e:a6:93:bb: df:68:f4:ca:4f:79:a6:83:26:31:e2:40:ab:33:53: ef:d2:3b:f8:eb:7f:d0:40:8e:b5:e3:59:a7:77:7a: 29:b0:2e:b7:a4:b6:fb:6e:90:a3:60:96:be:02:dd: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.114.0/24 5.180.112.0/23 84.238.160.0/22 85.137.220.0/22 185.194.208.0/22 IPv6: 2a10:7040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212602 Signature Algorithm: sha256WithRSAEncryption 24:e8:56:e5:c3:de:57:80:b9:e1:23:dc:2d:96:a8:28:a3:e6: 70:eb:d6:ff:6c:d2:23:7b:f5:34:66:26:40:c5:0d:a9:10:82: 53:9e:34:71:b2:76:7d:7e:80:56:6c:5d:f5:68:ce:53:09:db: a3:34:27:21:c0:37:f9:44:f3:33:af:49:64:2b:dc:f9:c5:76: f8:7a:d0:65:b6:8e:93:93:ac:55:2a:02:d3:71:c5:82:76:a8: 61:f9:e5:4a:36:26:80:34:df:e9:27:25:59:07:67:41:44:08: 30:bc:65:c4:10:a0:e1:a3:0d:44:78:29:c6:57:a7:82:2c:70: 62:9d:75:75:8b:a7:51:bc:df:01:63:15:de:e0:a5:cc:18:dc: 97:cc:64:6c:94:45:06:69:25:36:53:18:4e:a4:7c:58:39:c3: de:0d:75:be:5e:2a:dd:52:10:c5:82:f9:d6:02:0e:4b:b6:c2: 22:25:b9:79:06:5d:e1:fa:8b:01:11:6e:1b:0b:dc:ad:40:77: 8c:4e:82:50:81:82:9d:e7:e1:5f:93:2c:3f:12:a7:73:8a:04: 9b:40:74:4d:e3:f3:f4:5f:49:38:9a:2e:81:33:c3:51:4f:fd: 44:b5:54:5f:cc:8e:d0:ab:d9:6b:37:07:98:29:55:a3:ea:ab: 3d:ed:32:31 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZvlOFgEVdZHqKygkG2/m3n5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZmY2JlYzg4OGMxMDQ3ZjIyMWQ3Y2Y5Mzk2YmYxNDEyYWJhZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq5IVBCE9mZ5rPN0kD+w6NjjKBD3 GQdN+6csatnL/ZcmRcmD6JONfu8oYvC9woUpYjllGy9gjd2NZFhrfeMD1oZkNjiM f/4oTcmmKNYHWJFoNLHoXDKFA5mKaK7Gh88+elJlSyZ+P3wgGw3UimVVx2M4SLLm mxtqpu7uXni3cQQHa6wAZ/ryK4idyb45ZXCtB5VDd59jT363exTjCi6AC2opRwkA d/xPfLTNm5HY24o9Fn1XjFK740/RDSCqlVs2iBdQodPg2l7jaQHr/T6mk7vfaPTK T3mmgyYx4kCrM1Pv0jv463/QQI6141mnd3opsC63pLb7bpCjYJa+At1A8QIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFD//y+yIjBBH8iHXz5OWvxQSq6+bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2JiYjdi Ni0zZWU1LTQ2ZDktYjM3Yi02MTY2N2M3NjkxYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvYmJiN2I2 LTNlZTUtNDZkOS1iMzdiLTYxNjY3Yzc2OTFiMi8xL1BfX0w3SWlNRUVmeUlkZlBr NWFfRkJLcnI1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQABYVyAwQBBbRwAwQCVO6gAwQCVYncAwQCucLQ MA0EAgACMAcDBQMqEHBAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+ejANBgkq hkiG9w0BAQsFAAOCAQEAJOhW5cPeV4C54SPcLZaoKKPmcOvW/2zSI3v1NGYmQMUN qRCCU540cbJ2fX6AVmxd9WjOUwnbozQnIcA3+UTzM69JZCvc+cV2+HrQZbaOk5Os VSoC03HFgnaoYfnlSjYmgDTf6SclWQdnQUQIMLxlxBCg4aMNRHgpxlengixwYp11 dYunUbzfAWMV3uClzBjcl8xkbJRFBmklNlMYTqR8WDnD3g11vl4q3VIQxYL51gIO S7bCIiW5eQZd4fqLARFuGwvcrUB3jE6CUIGCnefhX5MsPxKnc4oEm0B0TePz9F9J OJougTPDUU/9RLVUX8yO0KvZazcHmClVo+qrPe0yMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:15 2026 by rpki-client