This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer File: f5tM_cmw2ePDHg67gebxscu9yeQ.cer (raw, json) Hash identifier: hX8aTpaBg6NNyGVyuitgd8ySFyqGTkXs/K0xJobKsmU= Subject key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3652853B858105FEB975588AC4059A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.175.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:52:85:3b:85:81:05:fe:b9:75:58:8a:c4:05:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:58:21:01:11:22:9f:d6:22:1b:11:68:f2: 1e:f3:3a:c1:24:a2:d6:25:4e:99:a2:d5:aa:37:d5: 73:e9:83:66:ea:52:fc:21:6f:0f:93:0c:ff:fa:f6: f7:1f:b0:46:12:48:cc:a2:fb:a7:da:e6:d5:28:b5: 04:21:d9:4c:42:84:c6:c3:08:5b:8a:24:14:78:d8: b2:fb:d0:65:c0:0c:07:cc:3d:e6:14:ea:66:1d:2d: 35:73:e8:5f:d3:ef:d6:f8:69:fd:11:63:53:a8:ac: 10:56:4d:94:8b:7b:fa:9c:dd:95:4b:57:d9:57:0c: 7a:32:21:6c:65:93:4c:f9:5d:c1:24:38:ad:09:c1: 42:99:8b:23:d7:9f:e6:e0:18:ea:ab:68:8c:e6:cf: e6:3e:51:b2:8f:c8:f7:62:51:b3:03:15:4a:8f:35: 76:28:d5:ed:bd:20:46:7c:32:ee:6f:41:40:fe:c8: c0:ca:a1:33:66:b3:0d:3b:ff:66:0d:a7:09:23:3f: 99:78:f5:fa:9f:ee:81:1a:a3:e1:e3:f8:79:67:81: 6f:90:73:99:b4:d0:35:eb:c9:56:b8:34:a6:1f:dd: 9d:f5:0d:1c:26:ef:17:17:c4:a5:0f:13:52:bf:cb: 2c:3a:5e:c6:47:19:fb:da:a4:e7:f0:e3:55:7a:e8: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.192.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:25:3e:f1:9a:6b:01:b4:84:c0:23:ca:56:0c:e1:e5:63:8c: 8c:a2:03:17:f1:9a:00:b1:fa:13:a5:48:e1:bb:d1:3c:27:dc: c8:bd:a9:83:78:46:02:99:a7:18:f8:5a:79:48:66:03:e5:4b: b1:2b:8d:f0:cf:77:17:d6:5c:88:1c:26:69:72:84:01:24:c1: b0:cd:7a:3f:5c:10:97:79:81:f7:ee:e9:01:36:94:88:f1:39: 55:ed:24:b6:51:53:a5:b3:80:0c:71:77:fa:e7:7c:96:8f:0c: ac:f7:70:54:4c:44:d6:d6:c7:8e:43:e6:81:d8:78:c5:03:4f: 3b:95:b6:b2:3a:37:ae:e6:cc:5c:71:17:0f:4f:c2:d3:11:e2: c6:f8:7d:58:a7:44:89:dd:84:e7:b7:2d:d6:29:60:5e:8f:7b: 2a:38:7e:52:12:97:f2:fa:6b:f2:54:b8:50:8c:bd:f3:cd:0d: 00:cd:4a:76:33:31:14:36:74:0a:cd:22:b9:fa:90:89:73:90: 24:3a:c5:3e:23:05:21:cf:57:15:c4:c0:e7:92:f9:e7:f4:e5: 4e:d5:5c:ce:54:68:59:20:65:ca:2c:17:6a:6d:83:37:cc:57: 7a:e0:ec:ff:e2:34:9a:2b:84:44:cc:dd:7f:5b:7e:44:7c:58: 00:6c:14:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NlKFO4WBBf65dViKxAWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjliNGNmZGM5YjBkOWUzYzMxZTBlYmI4MWU2ZjFiMWNiYmRjOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy5YIQERIp/WIhsRaPIe8zrBJKLW JU6ZotWqN9Vz6YNm6lL8IW8Pkwz/+vb3H7BGEkjMovun2ubVKLUEIdlMQoTGwwhb iiQUeNiy+9BlwAwHzD3mFOpmHS01c+hf0+/W+Gn9EWNTqKwQVk2Ui3v6nN2VS1fZ Vwx6MiFsZZNM+V3BJDitCcFCmYsj15/m4Bjqq2iM5s/mPlGyj8j3YlGzAxVKjzV2 KNXtvSBGfDLub0FA/sjAyqEzZrMNO/9mDacJIz+ZePX6n+6BGqPh4/h5Z4FvkHOZ tNA168lWuDSmH92d9Q0cJu8XF8SlDxNSv8ssOl7GRxn72qTn8ONVeuiXhQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH+bTP3JsNnjwx4Ou4Hm8bHLvcnkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzgyNDZl Yi04NDY5LTQyZGYtYTA4Zi05MGM0MjFmNTVhZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvODI0NmVi LTg0NjktNDJkZi1hMDhmLTkwYzQyMWY1NWFkYi8xL2Y1dE1fY213MmVQREhnNjdn ZWJ4c2N1OXllUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCua/AMA0GCSqGSIb3DQEBCwUAA4IBAQBaJT7x mmsBtITAI8pWDOHlY4yMogMX8ZoAsfoTpUjhu9E8J9zIvamDeEYCmacY+Fp5SGYD 5UuxK43wz3cX1lyIHCZpcoQBJMGwzXo/XBCXeYH37ukBNpSI8TlV7SS2UVOls4AM cXf653yWjwys93BUTETW1seOQ+aB2HjFA087lbayOjeu5sxccRcPT8LTEeLG+H1Y p0SJ3YTnty3WKWBej3sqOH5SEpfy+mvyVLhQjL3zzQ0AzUp2MzEUNnQKzSK5+pCJ c5AkOsU+IwUhz1cVxMDnkvnn9OVO1VzOVGhZIGXKLBdqbYM3zFd64Oz/4jSaK4RE zN1/W35EfFgAbBQR -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:20 2026 by rpki-client