This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer File: i5zFfKhHI67ChBFF9vfTAb3zW6w.cer (raw, json) Hash identifier: P1uyeLqL4uS7OC2KmuVpe2UrEhznoMuPD0oZhpfpLJs= Subject key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7AFE388EC99F455AE9301B253CEB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215329 IP: 185.37.100.0/24 IP: 2a13:c2c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:af:e3:88:ec:99:f4:55:ae:93:01:b2:53:ce:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:4b:57:1d:e5:b2:b1:6a:5c:ee:79:12:fb: eb:e0:4a:b6:ea:e9:93:07:dc:4b:4a:76:5c:fd:4e: b0:2e:19:24:10:36:cf:00:cb:fe:15:e5:7c:17:d6: b2:2c:4d:41:8f:2d:cd:7b:36:79:85:48:14:c8:c7: c7:9e:66:12:5b:37:78:5a:4c:d6:04:4b:72:33:48: 75:f8:0d:93:4f:8f:a6:9f:15:a0:4a:88:84:16:22: 2d:bf:b6:d7:15:f3:fa:b2:de:35:82:51:95:14:c6: 9c:d4:78:1f:27:8b:07:15:39:03:a1:dc:6d:b7:b1: 16:9b:4a:25:0e:07:00:79:df:b3:fa:7b:6d:33:27: 0d:31:e0:7e:4a:2f:84:5f:53:27:e0:fa:cf:9a:1a: d8:8a:34:7a:f3:e2:82:5e:df:af:61:1d:ce:ed:54: 8f:9e:be:d7:ef:d4:ed:1e:84:ba:23:03:bd:32:a1: 45:c8:47:cf:fd:17:00:2d:72:02:92:ca:be:8f:c4: 80:28:d8:c7:c4:19:1a:68:8d:50:39:9a:6d:f2:5b: 77:25:ce:c4:82:14:41:81:01:23:7d:6e:07:e4:77: c7:2e:bb:a0:30:cf:69:59:66:23:95:00:c4:d7:cf: f0:40:96:6d:86:ed:31:3f:22:46:51:76:af:a3:cc: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.100.0/24 IPv6: 2a13:c2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215329 Signature Algorithm: sha256WithRSAEncryption 5a:93:8f:69:c8:a8:21:7f:88:93:ad:e4:09:75:f1:00:ad:cc: 9c:52:29:47:0a:8e:e0:4c:fc:e2:e0:37:94:46:68:55:3f:63: a8:2e:17:fc:a9:8f:9a:44:ed:5c:dd:7d:cb:a1:d5:fc:07:1e: df:7a:e6:6f:2b:9f:3e:2c:69:1d:32:68:0a:9f:26:ff:f0:2b: bd:f1:9f:e6:c4:5a:13:0a:e4:6a:2b:8e:04:67:0a:79:65:db: 5c:65:9f:ed:89:1b:94:55:6b:e3:2b:9f:1b:e3:c3:84:1c:b9: 2f:b0:08:84:81:d9:9a:3b:92:c1:f6:d4:7d:ae:bf:1e:7e:f9: 58:b1:10:c3:ef:c3:d0:f8:f7:4d:e7:5e:c1:c3:90:66:c7:0c: fb:7e:54:21:59:b9:83:d9:14:76:94:65:b1:2f:c7:40:9d:66: 9d:26:fe:29:e1:4e:e5:bf:84:42:29:b5:95:f5:90:19:87:46: 45:89:94:61:7a:ce:9d:92:a5:0b:fe:4a:66:80:d1:86:4f:7d: 5c:c4:a7:67:38:89:7c:42:65:96:4c:b2:31:3b:ab:8f:d3:bd: 73:8c:1a:42:ee:58:84:87:f0:87:dd:4b:51:fb:43:92:a0:7d: 29:85:27:c6:f4:cc:e0:2d:52:b9:06:ee:50:13:14:26:59:6e: 3d:a2:11:a7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x6/jiOyZ9FWukwGyU86wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjljYzU3Y2E4NDcyM2FlYzI4NDExNDVmNmY3ZDMwMWJkZjM1YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuydLVx3lsrFqXO55Evvr4Eq26umT B9xLSnZc/U6wLhkkEDbPAMv+FeV8F9ayLE1Bjy3NezZ5hUgUyMfHnmYSWzd4WkzW BEtyM0h1+A2TT4+mnxWgSoiEFiItv7bXFfP6st41glGVFMac1HgfJ4sHFTkDodxt t7EWm0olDgcAed+z+nttMycNMeB+Si+EX1Mn4PrPmhrYijR68+KCXt+vYR3O7VSP nr7X79TtHoS6IwO9MqFFyEfP/RcALXICksq+j8SAKNjHxBkaaI1QOZpt8lt3Jc7E ghRBgQEjfW4H5HfHLrugMM9pWWYjlQDE18/wQJZthu0xPyJGUXavo8zMewIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIucxXyoRyOuwoQRRfb30wG981usMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzM4ZTZm Ny00ZTM1LTRjMmQtOTk3Ny0wOTdjYjhkZjJhMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMzhlNmY3 LTRlMzUtNGMyZC05OTc3LTA5N2NiOGRmMmEyNC8xL2k1ekZmS2hISTY3Q2hCRkY5 dmZUQWIzelc2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuSVkMA0EAgACMAcDBQAqE8LAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJITANBgkqhkiG9w0BAQsFAAOCAQEAWpOPacioIX+I k63kCXXxAK3MnFIpRwqO4Ez84uA3lEZoVT9jqC4X/KmPmkTtXN19y6HV/Ace33rm byufPixpHTJoCp8m//ArvfGf5sRaEwrkaiuOBGcKeWXbXGWf7YkblFVr4yufG+PD hBy5L7AIhIHZmjuSwfbUfa6/Hn75WLEQw+/D0Pj3TedewcOQZscM+35UIVm5g9kU dpRlsS/HQJ1mnSb+KeFO5b+EQim1lfWQGYdGRYmUYXrOnZKlC/5KZoDRhk99XMSn ZziJfEJllkyyMTurj9O9c4waQu5YhIfwh91LUftDkqB9KYUnxvTM4C1SuQbuUBMU JlluPaIRpw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:23 2026 by rpki-client