This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer File: cN5wfWwBAGsqymh-qrKctHNrdmg.cer (raw, json) Hash identifier: k4yAmrX0bAmylQbUEJBxzot9bp6sNvThm/CahetJivY= Subject key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2007C40442494011FFD8D4B61F1E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199906 IP: 185.54.136.0/22 IP: 2a01:6160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:20:07:c4:04:42:49:40:11:ff:d8:d4:b6:1f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70de707d6c01006b2aca687eaab29cb4736b7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:57:c0:2b:31:b5:7d:48:6a:be:7d:a0:c6: 93:81:93:77:9d:af:25:15:4d:e6:13:0b:22:7a:2a: 67:3f:b7:e9:37:ef:c6:e5:a2:d9:a8:44:37:76:e3: 07:b6:15:ff:e5:ca:02:e2:da:dc:a5:6f:03:6d:3b: 46:e7:11:34:ad:a0:4c:53:a8:67:79:0e:ad:e0:f5: 66:57:4e:25:68:08:bc:8d:f0:73:3f:88:a3:1b:82: 4c:72:b3:fb:52:fd:3a:3f:1b:34:7c:b7:d7:68:65: c5:ac:f8:20:b8:73:dd:7f:53:a8:9e:42:bd:a0:95: 44:52:d3:8b:7b:64:2d:5d:16:56:d7:20:85:34:8b: 53:62:d2:cb:7b:eb:57:be:1e:18:4d:73:4c:dd:0b: 30:fc:61:21:67:d4:5b:a1:16:5f:78:6d:1d:ea:ec: 5c:9a:d7:2e:0e:e5:c6:4b:8c:1b:e8:48:9d:a0:3f: 09:1e:3e:2b:7d:d5:34:dc:ab:e9:85:8e:37:71:fb: fc:4c:8e:f9:ae:28:bd:a5:48:01:5f:cd:c5:75:ea: 78:8c:87:19:9c:13:83:17:72:2b:78:c6:6d:64:69: f7:ab:0b:6f:3e:ad:db:19:7c:00:cb:31:d6:eb:9e: 4c:47:91:d8:a1:f0:1f:af:bc:5c:a3:a7:21:27:af: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.136.0/22 IPv6: 2a01:6160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199906 Signature Algorithm: sha256WithRSAEncryption 7a:63:83:ef:23:06:a2:5d:d9:0a:3e:87:0a:15:ba:ad:47:14: dd:f4:7b:52:54:84:1f:fc:b6:2d:ae:0b:a4:ad:60:32:1b:0d: c0:76:1b:3b:17:83:54:32:1a:e4:07:0d:4a:fe:57:2f:7d:6d: 9d:bb:1c:dd:a0:3c:6a:be:8d:1f:c2:1b:47:d4:a0:71:bc:16: 9c:cb:68:89:e4:50:6f:de:ea:b7:d5:10:ed:4c:ed:5d:28:fb: 16:42:61:6f:9b:20:7e:3f:8b:f0:ad:8d:95:b4:4c:2b:fa:bd: d2:9c:db:ef:8b:8d:fd:6f:b6:4f:58:f8:09:d1:4d:df:27:1d: 75:80:fd:ee:29:92:7c:9a:46:24:af:4f:ee:0e:2c:0e:81:48: a4:e1:91:c6:4a:eb:3d:cb:69:5b:56:b3:29:95:98:42:91:c9: dc:26:a6:a4:2b:1d:ee:e1:a1:8b:f5:9f:de:c4:3d:a1:01:52: 3c:a0:f3:b5:0b:d5:a4:85:cf:ac:65:68:3f:4f:e1:fb:2f:1c: ed:a9:a7:50:d3:1c:98:87:a6:7d:af:6c:2e:58:cc:d3:da:d9: c6:52:53:75:ce:10:89:54:81:b8:eb:52:7f:87:d6:c8:2c:9c: ac:96:ed:99:65:52:22:cd:56:a7:24:52:e0:61:81:13:82:bd: 64:2a:58:2d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26yAHxARCSUAR/9jUth8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRlNzA3ZDZjMDEwMDZiMmFjYTY4N2VhYWIyOWNiNDczNmI3NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUxXwCsxtX1Iar59oMaTgZN3na8l FU3mEwsieipnP7fpN+/G5aLZqEQ3duMHthX/5coC4trcpW8DbTtG5xE0raBMU6hn eQ6t4PVmV04laAi8jfBzP4ijG4JMcrP7Uv06Pxs0fLfXaGXFrPgguHPdf1OonkK9 oJVEUtOLe2QtXRZW1yCFNItTYtLLe+tXvh4YTXNM3Qsw/GEhZ9RboRZfeG0d6uxc mtcuDuXGS4wb6EidoD8JHj4rfdU03KvphY43cfv8TI75rii9pUgBX83Fdep4jIcZ nBODF3IreMZtZGn3qwtvPq3bGXwAyzHW655MR5HYofAfr7xco6chJ6+m7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHDecH1sAQBrKspofqqynLRza3ZoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzZjZTBj MC05MzdjLTRhNDMtOWU4NC0xOGU1YzUzN2Q1MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNmNlMGMw LTkzN2MtNGE0My05ZTg0LTE4ZTVjNTM3ZDUxZC8xL2NONXdmV3dCQUdzcXltaC1x cktjdEhOcmRtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTaIMA0EAgACMAcDBQAqAWFgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMM4jANBgkqhkiG9w0BAQsFAAOCAQEAemOD7yMGol3Z Cj6HChW6rUcU3fR7UlSEH/y2La4LpK1gMhsNwHYbOxeDVDIa5AcNSv5XL31tnbsc 3aA8ar6NH8IbR9SgcbwWnMtoieRQb97qt9UQ7UztXSj7FkJhb5sgfj+L8K2NlbRM K/q90pzb74uN/W+2T1j4CdFN3ycddYD97imSfJpGJK9P7g4sDoFIpOGRxkrrPctp W1azKZWYQpHJ3CampCsd7uGhi/Wf3sQ9oQFSPKDztQvVpIXPrGVoP0/h+y8c7amn UNMcmIemfa9sLljM09rZxlJTdc4QiVSBuOtSf4fWyCycrJbtmWVSIs1WpyRS4GGB E4K9ZCpYLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:58 2026 by rpki-client