This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer File: gP5WmKEnlkzA5M6OP9yYXiolpmM.cer (raw, json) Hash identifier: H+PlvUq3c/EM9ZZvml/tKyl0JaTb1aChAL5+CJO280A= Subject key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BF9944C90D98C7D3E2E379A4376E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 88.151.113.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f9:94:4c:90:d9:8c:7d:3e:2e:37:9a:43:76:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:ce:25:6b:6a:20:97:16:53:b1:90:ab:8d: 5e:0d:1b:2a:f7:fc:ce:c6:64:6d:ce:00:18:69:6a: 43:f7:08:7d:d8:0a:fc:61:11:35:0d:61:24:8b:af: 07:2e:ba:56:a7:ab:58:a4:54:42:aa:7b:e3:94:f6: 34:40:5a:f6:6b:c3:bc:7e:93:df:30:63:5f:38:86: fe:31:51:c3:ef:f2:09:d0:23:b3:d4:4e:66:fc:87: d8:15:03:dd:d4:1e:71:9e:44:9a:cf:08:fd:a3:7d: 40:62:c8:6d:e5:d8:f2:f3:1a:e2:a0:6a:bc:6b:b2: e9:45:e4:52:d2:73:db:9a:06:11:d3:58:f3:82:f9: 3e:82:36:5f:20:f8:88:3f:6f:6d:14:81:23:0d:67: 3b:59:41:24:74:92:51:25:4e:8b:58:07:d8:b8:d8: 8e:3a:95:d3:47:3d:28:87:b1:84:fe:d7:c6:64:a7: 48:0e:97:9a:41:55:74:1a:8e:8d:54:a9:4f:89:17: 08:ca:8c:d6:5d:19:c9:2c:71:8e:88:a6:79:71:80: 56:75:08:b4:cf:f3:0c:97:1e:c1:8b:b0:3f:cb:3c: 0d:ae:75:49:34:3c:1e:53:a3:89:76:4f:40:ce:26: 80:63:3c:87:99:2c:3d:42:6a:67:f1:ae:40:26:0f: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.113.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ff:c0:f8:66:0d:1e:58:f0:85:5a:1d:02:57:36:3b:94:43: ac:6a:13:1f:0c:9b:9c:22:6b:36:64:d9:2b:6f:1d:eb:10:26: 33:e2:0d:ec:43:13:cb:f5:c1:b4:11:11:0e:45:b2:e2:43:76: b9:5f:50:ac:ce:47:7d:12:fd:51:8e:1a:ec:ac:7d:13:fc:8f: dd:14:35:5b:84:73:53:9b:f7:15:02:61:26:43:d7:25:52:bb: eb:7b:54:c2:91:f8:98:d3:c8:d8:89:50:e3:42:4b:d4:fd:84: 03:86:98:02:e1:4a:42:cd:db:0c:d9:6c:9b:bb:2c:8a:2f:4c: 87:6c:29:36:15:f2:90:1d:58:74:d9:a8:29:ea:a6:cf:fd:a6: ed:dd:4e:a2:3f:95:56:65:00:ca:ae:00:55:39:69:49:92:11: ae:62:e2:1f:28:6d:75:7d:4a:42:7f:1f:b9:78:5e:ca:1c:d0: a2:14:ae:a7:d8:8a:d7:53:f4:a4:0a:b8:14:15:b6:99:c3:0d: 6a:f6:15:60:e4:35:0e:36:f8:c4:cd:80:70:68:ef:d6:85:e1: b0:3d:bd:5d:21:f6:af:c0:26:cd:d3:6e:f4:76:00:24:ea:cb: cd:1d:ff:89:6f:1a:61:31:f7:a0:57:85:66:96:69:5f:3a:f4: 27:7d:07:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9W/mUTJDZjH0+LjeaQ3bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZlNTY5OGExMjc5NjRjYzBlNGNlOGUzZmRjOTg1ZTJhMjVhNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLvOJWtqIJcWU7GQq41eDRsq9/zO xmRtzgAYaWpD9wh92Ar8YRE1DWEki68HLrpWp6tYpFRCqnvjlPY0QFr2a8O8fpPf MGNfOIb+MVHD7/IJ0COz1E5m/IfYFQPd1B5xnkSazwj9o31AYsht5djy8xrioGq8 a7LpReRS0nPbmgYR01jzgvk+gjZfIPiIP29tFIEjDWc7WUEkdJJRJU6LWAfYuNiO OpXTRz0oh7GE/tfGZKdIDpeaQVV0Go6NVKlPiRcIyozWXRnJLHGOiKZ5cYBWdQi0 z/MMlx7Bi7A/yzwNrnVJNDweU6OJdk9AziaAYzyHmSw9Qmpn8a5AJg+gNQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFID+VpihJ5ZMwOTOjj/cmF4qJaZjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzNmOWFk MS02YmU1LTRmYTQtOWU1Ni1kNzAxZGM2OTg2M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvM2Y5YWQx LTZiZTUtNGZhNC05ZTU2LWQ3MDFkYzY5ODYzZi8xL2dQNVdtS0VubGt6QTVNNk9Q OXlZWGlvbHBtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAWJdxMA0GCSqGSIb3DQEBCwUAA4IBAQBS/8D4 Zg0eWPCFWh0CVzY7lEOsahMfDJucIms2ZNkrbx3rECYz4g3sQxPL9cG0EREORbLi Q3a5X1Cszkd9Ev1RjhrsrH0T/I/dFDVbhHNTm/cVAmEmQ9clUrvre1TCkfiY08jY iVDjQkvU/YQDhpgC4UpCzdsM2WybuyyKL0yHbCk2FfKQHVh02agp6qbP/abt3U6i P5VWZQDKrgBVOWlJkhGuYuIfKG11fUpCfx+5eF7KHNCiFK6n2IrXU/SkCrgUFbaZ ww1q9hVg5DUONvjEzYBwaO/WheGwPb1dIfavwCbN0270dgAk6svNHf+JbxphMfeg V4VmlmlfOvQnfQef -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:22 2026 by rpki-client