This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer File: cEq5aIQnBz_34XneWvAC4J8jYBM.cer (raw, json) Hash identifier: KrMelPHlCAB0LYNthWlSlBOVMZwz8M6GCphMwQ5TUV8= Subject key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D14FFCD709BEA002F9B7B1E5CFB4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52102 IP: 5.102.136.0/21 IP: 91.221.230.0/23 IP: 194.34.108.0/22 IP: 2a04:8880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d1:4f:fc:d7:09:be:a0:02:f9:b7:b1:e5:cf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=704ab9688427073ff7e179de5af002e09f236013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:9b:b3:b1:44:34:d0:12:00:89:a0:23:88: 77:ce:01:16:ba:0d:59:be:74:fa:84:cb:4c:7d:9a: d1:05:d4:19:dc:71:e8:a3:c7:3c:a2:e2:ce:d7:27: 4f:0a:1f:f9:4b:be:d3:2a:fd:e1:c0:61:f9:0b:36: 26:ca:c9:cb:2a:dc:97:65:b2:63:46:24:c2:b5:98: c2:cc:ee:08:50:4a:dc:c4:3a:e9:04:10:3f:99:cc: 53:8a:de:5d:7d:53:03:23:ec:1b:85:de:f9:d1:37: 3e:ea:41:2a:14:b4:c6:1c:c6:e6:ef:e9:90:68:5a: fa:e8:f4:06:5b:e5:61:0a:b8:6b:5c:bc:1e:00:a4: 6f:7c:b9:26:9b:9d:27:41:a6:53:11:d5:9f:6c:5b: c9:81:a9:65:1d:f0:9d:cb:a4:2f:97:ad:06:5d:af: 41:dc:35:90:74:f4:60:07:8f:fc:66:1e:60:7a:a5: e9:97:00:98:90:43:4e:1b:85:bb:46:aa:88:51:d9: a6:fd:12:29:13:7f:4e:8e:6a:8b:74:df:f0:19:59: bc:08:3b:d5:39:4e:a9:0b:29:1c:fa:64:07:d3:ba: e7:b2:4e:9d:c3:35:77:c0:0a:32:e2:b1:14:ef:66: 8f:67:62:8d:02:19:7d:64:41:f2:3d:8a:c0:77:6a: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.136.0/21 91.221.230.0/23 194.34.108.0/22 IPv6: 2a04:8880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52102 Signature Algorithm: sha256WithRSAEncryption a0:47:61:e7:35:ee:95:4c:82:78:b2:ba:aa:b4:24:f1:f2:af: 66:bf:4e:5d:a1:c3:4a:3b:cf:2e:6b:82:1d:0f:e5:d7:d4:4b: d7:89:f0:1f:48:cb:5c:a5:03:b8:53:2b:cc:0d:10:1f:00:f3: ca:5c:bc:f6:9f:b2:fa:e4:18:1b:0c:9a:30:29:55:4b:88:4e: 52:59:7e:a2:7a:02:02:74:d9:7c:14:94:35:e3:fe:b8:01:fb: 81:41:39:1f:40:2a:f5:5a:3e:90:2c:2c:d3:20:1b:55:8b:96: 96:cc:f1:00:15:2a:1d:2c:31:10:d4:da:e0:3d:6f:83:46:62: 04:d3:1d:8f:6d:58:d7:31:58:f7:4a:8a:09:91:31:f0:10:9b: 78:f0:92:02:ab:30:ec:9f:8f:52:7f:84:9a:47:88:f7:33:fb: 70:cd:90:fd:fc:bc:27:31:f6:7b:53:9b:95:df:58:0c:05:6b: 49:ed:b3:17:b1:3b:85:3e:42:b8:e1:2f:3b:99:ad:b2:27:0e: e3:81:b6:b4:17:69:3b:4f:15:d4:c9:7b:87:f9:58:ce:46:b4: 97:b9:81:ce:5e:14:92:3d:06:f5:b3:e9:2b:fb:de:a1:1b:32: 14:10:16:a1:dd:a6:1f:cd:44:ee:f9:78:2d:22:f9:8e:da:01: ba:0e:3f:b3 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3xtFP/NcJvqAC+bex5c+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDRhYjk2ODg0MjcwNzNmZjdlMTc5ZGU1YWYwMDJlMDlmMjM2MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLqbs7FENNASAImgI4h3zgEWug1Z vnT6hMtMfZrRBdQZ3HHoo8c8ouLO1ydPCh/5S77TKv3hwGH5CzYmysnLKtyXZbJj RiTCtZjCzO4IUErcxDrpBBA/mcxTit5dfVMDI+wbhd750Tc+6kEqFLTGHMbm7+mQ aFr66PQGW+VhCrhrXLweAKRvfLkmm50nQaZTEdWfbFvJgallHfCdy6Qvl60GXa9B 3DWQdPRgB4/8Zh5geqXplwCYkENOG4W7RqqIUdmm/RIpE39OjmqLdN/wGVm8CDvV OU6pCykc+mQH07rnsk6dwzV3wAoy4rEU72aPZ2KNAhl9ZEHyPYrAd2rp7QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHBKuWiEJwc/9+F53lrwAuCfI2ATMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2MyNDRi My04ZmMxLTQ2ODUtOGZiMi00NmE4YjE5MWEzNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvYzI0NGIz LThmYzEtNDY4NS04ZmIyLTQ2YThiMTkxYTM3NC8xL2NFcTVhSVFuQnpfMzRYbmVX dkFDNEo4allCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBWaIAwQBW93mAwQCwiJsMA0EAgACMAcDBQMq BIiAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDLhjANBgkqhkiG9w0BAQsFAAOC AQEAoEdh5zXulUyCeLK6qrQk8fKvZr9OXaHDSjvPLmuCHQ/l19RL14nwH0jLXKUD uFMrzA0QHwDzyly89p+y+uQYGwyaMClVS4hOUll+onoCAnTZfBSUNeP+uAH7gUE5 H0Aq9Vo+kCws0yAbVYuWlszxABUqHSwxENTa4D1vg0ZiBNMdj21Y1zFY90qKCZEx 8BCbePCSAqsw7J+PUn+EmkeI9zP7cM2Q/fy8JzH2e1Obld9YDAVrSe2zF7E7hT5C uOEvO5mtsicO44G2tBdpO08V1Ml7h/lYzka0l7mBzl4Ukj0G9bPpK/veoRsyFBAW od2mH81E7vl4LSL5jtoBug4/sw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:12 2026 by rpki-client