This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer File: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer (raw, json) Hash identifier: rXLVG1iS5Ym/1FywKU+n25myswh1PTRI8ki44soaRFA= Subject key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE59BCE0B4DB7EC1E68E950F61213A8E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 12:09:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212030 IP: 91.220.112.0/24 IP: 194.33.20.0/22 IP: 2a10:c980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:9b:ce:0b:4d:b7:ec:1e:68:e9:50:f6:12:13:a8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 12:09:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=750e52de53330d5005498b0fc409e64dd98bb099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:c6:02:40:75:8f:b1:c1:05:5e:58:30:a2: 3b:43:2a:23:3d:7d:cc:e9:9e:7e:4e:d1:f5:0e:70: 28:a0:30:06:05:77:a3:99:7d:70:ce:ea:bb:02:3e: e9:2c:b0:22:e8:b4:42:4f:78:69:c1:1b:0e:20:b7: 8d:5b:1b:ac:5e:f1:f0:a7:87:ef:25:77:64:72:f7: 8c:1f:82:0a:ca:47:c9:a1:ca:b6:d3:85:12:fe:ee: 79:a6:15:49:d9:eb:ac:42:bc:20:24:ae:bc:11:62: b0:a1:dd:50:3d:69:7f:d3:ff:32:36:a7:21:f1:96: cb:71:e6:9a:fd:f1:e9:45:55:e3:03:cd:eb:e7:a2: 82:07:d4:9a:63:8f:26:84:fe:97:93:c4:8f:c9:51: f0:77:ae:b6:14:14:48:6c:49:08:26:5a:d7:77:5b: 71:af:2a:b2:ab:42:1d:3a:c3:eb:5a:29:6e:ff:5e: ce:d5:24:31:e0:d9:36:27:f6:40:80:3b:b9:97:af: 5d:30:e7:f6:f7:4a:19:9d:03:d9:c7:5d:b6:83:7f: e0:91:c5:bf:ce:72:31:f5:14:ae:a8:be:ea:79:a9: a0:5f:1a:37:f0:56:17:f1:94:62:a6:ad:7b:60:49: c7:c4:af:28:10:22:b9:bb:b0:d0:86:93:32:14:a4: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.112.0/24 194.33.20.0/22 IPv6: 2a10:c980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212030 Signature Algorithm: sha256WithRSAEncryption 77:23:a7:1c:85:ac:60:c1:1d:85:56:d1:19:d4:3f:42:ec:c9: e0:10:03:09:7c:8b:fb:9a:40:e6:2b:db:e0:79:de:08:b3:57: 17:a8:f6:c4:4f:3a:51:c9:f9:ff:6f:32:15:ec:83:ee:f6:44: 4e:0f:93:70:28:0d:02:6e:89:bb:85:e3:05:8b:21:46:0e:cb: 87:3d:fb:42:29:ec:77:52:bb:c0:7b:01:d7:ea:ee:30:70:0a: d7:ff:11:dc:63:bd:4a:44:75:ea:7a:7f:36:7b:ee:5b:74:d8: eb:62:ca:2b:dc:15:9f:d5:96:7e:6a:6a:ea:65:d7:23:90:69: aa:2c:db:42:2b:c6:a7:cf:d9:51:04:fb:50:b0:67:fc:3f:87: 52:8f:6a:4e:31:b6:24:60:bf:b4:5f:76:40:c9:5a:da:80:13: c0:4e:0b:3b:c9:07:08:ba:84:95:85:a0:bf:16:0b:91:39:be: 07:d0:16:cd:ab:03:55:0c:bc:54:7b:4c:7a:7a:87:ef:aa:c6: 7a:d2:d3:68:58:97:a4:f4:76:1c:ba:92:3f:f6:dd:56:b2:4b: 35:8b:46:fd:f5:a9:ca:3f:19:6f:a9:d6:3e:ff:b1:fd:5f:cd: de:ab:5e:d0:a5:65:cc:9c:3e:d2:f9:5c:3d:c3:50:49:9f:f4: 57:b0:04:af -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvlm84LTbfsHmjpUPYSE6jlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTIwOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTBlNTJkZTUzMzMwZDUwMDU0OThiMGZjNDA5ZTY0ZGQ5OGJiMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwLGAkB1j7HBBV5YMKI7QyojPX3M 6Z5+TtH1DnAooDAGBXejmX1wzuq7Aj7pLLAi6LRCT3hpwRsOILeNWxusXvHwp4fv JXdkcveMH4IKykfJocq204US/u55phVJ2eusQrwgJK68EWKwod1QPWl/0/8yNqch 8ZbLceaa/fHpRVXjA83r56KCB9SaY48mhP6Xk8SPyVHwd662FBRIbEkIJlrXd1tx ryqyq0IdOsPrWilu/17O1SQx4Nk2J/ZAgDu5l69dMOf290oZnQPZx122g3/gkcW/ znIx9RSuqL7qeamgXxo38FYX8ZRipq17YEnHxK8oECK5u7DQhpMyFKRfGwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHUOUt5TMw1QBUmLD8QJ5k3Zi7CZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5Lzc2NTE5 ZS1jNjgwLTQyOTctOGI3OS0yNGY2YmRiZDk1MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNzY1MTll LWM2ODAtNDI5Ny04Yjc5LTI0ZjZiZGJkOTUwZC8xL2RRNVMzbE16RFZBRlNZc1B4 QW5tVGRtTHNKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9xwAwQCwiEUMA0EAgACMAcDBQMqEMmAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8PjANBgkqhkiG9w0BAQsFAAOCAQEAdyOn HIWsYMEdhVbRGdQ/QuzJ4BADCXyL+5pA5ivb4HneCLNXF6j2xE86Ucn5/28yFeyD 7vZETg+TcCgNAm6Ju4XjBYshRg7Lhz37Qinsd1K7wHsB1+ruMHAK1/8R3GO9SkR1 6np/NnvuW3TY62LKK9wVn9WWfmpq6mXXI5BpqizbQivGp8/ZUQT7ULBn/D+HUo9q TjG2JGC/tF92QMla2oATwE4LO8kHCLqElYWgvxYLkTm+B9AWzasDVQy8VHtMenqH 76rGetLTaFiXpPR2HLqSP/bdVrJLNYtG/fWpyj8Zb6nWPv+x/V/N3qte0KVlzJw+ 0vlcPcNQSZ/0V7AErw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:59 2026 by rpki-client