This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer File: m5TSR2sxUeHn8DYNzk84USXu1fs.cer (raw, json) Hash identifier: Nf0YmsCeKtL1viShPfDZhBV6adxMTIW/l0w4ZWOKbVU= Subject key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC327268F72F689A12DB8EBE9292C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41297 IP: 91.224.28.0/23 IP: 185.241.196.0/22 IP: 193.200.50.0/23 IP: 195.74.91.0/24 IP: 2a0c:aa80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c3:27:26:8f:72:f6:89:a1:2d:b8:eb:e9:29:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:a3:40:92:99:43:0d:40:5b:c6:c1:74:cd: c0:a4:f9:a7:39:e9:fc:da:fb:91:3a:c1:f9:21:d2: d1:6c:34:32:9a:22:ff:db:35:c2:40:15:d7:81:1d: 6f:36:5c:25:0e:eb:c5:d5:93:b5:3c:83:bb:37:18: 7a:6b:c3:ef:6b:b5:4d:fc:3e:9a:0f:50:0d:44:4b: da:34:1c:de:38:ee:8c:2f:c8:7d:60:2b:d0:0f:e0: 5c:76:b6:66:8c:0b:ee:b0:71:7a:91:eb:96:65:78: 40:04:17:ff:1b:99:8e:47:eb:73:ff:18:50:b2:55: 52:64:a4:6e:77:3d:17:49:2e:f1:ca:b9:66:4a:e6: 30:86:35:9b:68:4f:c1:b6:49:50:2c:44:bd:40:5a: 35:8a:46:bd:c7:97:e6:00:e7:d5:86:28:d8:7a:93: 24:15:e6:23:f4:7a:21:57:19:15:de:4e:57:70:b8: 08:6e:74:66:9a:3d:4b:3c:42:d8:11:ff:f4:75:7d: 5d:e1:33:3c:f5:1c:af:c9:f4:57:30:ad:bf:e5:54: 9d:01:c8:55:a5:c6:30:aa:a5:d3:85:10:9d:9b:11: ec:2a:a8:e6:93:db:52:66:03:9a:91:b5:b3:2f:2d: 69:e5:fa:22:bd:06:a0:d4:a2:16:74:88:df:c9:86: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.28.0/23 185.241.196.0/22 193.200.50.0/23 195.74.91.0/24 IPv6: 2a0c:aa80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41297 Signature Algorithm: sha256WithRSAEncryption 07:ce:cd:32:91:66:b1:59:fc:e9:88:30:27:d9:22:f1:4c:fe: 90:34:27:b3:54:fd:65:85:e4:6d:e1:f5:e8:c6:97:5a:6d:ea: 22:a7:37:c2:3b:4b:0a:09:d8:b0:20:fd:77:da:76:a1:cf:ef: 0d:a2:9b:fa:a0:82:51:64:9e:ec:13:10:1c:15:8f:f5:b7:fe: f8:44:91:11:1b:0b:d1:f6:1c:1c:fe:2d:31:7f:33:ab:ee:71: 51:3e:a0:2e:eb:05:6e:24:9e:40:e0:6f:57:8e:d8:45:ed:20: c2:44:29:e8:c3:97:0b:4d:40:ee:6e:5a:50:de:fa:ea:df:3a: db:d3:18:bc:45:f7:cf:7f:d8:27:73:99:ed:21:0d:5e:58:dc: 06:bd:5f:c4:3e:9b:ff:7c:ca:8c:67:93:5b:9b:6a:f4:27:c8: f4:95:9c:e2:26:6b:ba:62:5e:94:87:06:0b:9a:b6:24:3e:7a: 3e:27:b8:f2:79:e0:70:70:28:c1:f0:32:35:67:45:31:23:87: e9:fd:ed:9d:b0:c2:9e:2b:d6:e6:9d:9e:cc:8a:68:d7:d9:06: 6e:5d:f2:a7:4d:fb:a3:3d:ed:a9:ab:35:1a:25:50:d3:6e:f8: 9d:9a:7e:5b:50:a8:36:56:06:b7:a9:1b:19:98:8a:51:c0:33: 52:c3:a1:b2 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt6WsMnJo9y9omhLbjr6SksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk0ZDI0NzZiMzE1MWUxZTdmMDM2MGRjZTRmMzg1MTI1ZWVkNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx++jQJKZQw1AW8bBdM3ApPmnOen8 2vuROsH5IdLRbDQymiL/2zXCQBXXgR1vNlwlDuvF1ZO1PIO7Nxh6a8Pva7VN/D6a D1ANREvaNBzeOO6ML8h9YCvQD+BcdrZmjAvusHF6keuWZXhABBf/G5mOR+tz/xhQ slVSZKRudz0XSS7xyrlmSuYwhjWbaE/BtklQLES9QFo1ika9x5fmAOfVhijYepMk FeYj9HohVxkV3k5XcLgIbnRmmj1LPELYEf/0dX1d4TM89RyvyfRXMK2/5VSdAchV pcYwqqXThRCdmxHsKqjmk9tSZgOakbWzLy1p5foivQag1KIWdIjfyYaNKQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJuU0kdrMVHh5/A2Dc5POFEl7tX7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzNiNzRm MC1lNzUzLTQ2NjktODVmZC04MjJlYWYwZDIyYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvM2I3NGYw LWU3NTMtNDY2OS04NWZkLTgyMmVhZjBkMjJiMC8xL201VFNSMnN4VWVIbjhEWU56 azg0VVNYdTFmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBW+AcAwQCufHEAwQBwcgyAwQAw0pbMA0EAgAC MAcDBQMqDKqAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwChUTANBgkqhkiG9w0B AQsFAAOCAQEAB87NMpFmsVn86YgwJ9ki8Uz+kDQns1T9ZYXkbeH16MaXWm3qIqc3 wjtLCgnYsCD9d9p2oc/vDaKb+qCCUWSe7BMQHBWP9bf++ESRERsL0fYcHP4tMX8z q+5xUT6gLusFbiSeQOBvV47YRe0gwkQp6MOXC01A7m5aUN766t8629MYvEX3z3/Y J3OZ7SENXljcBr1fxD6b/3zKjGeTW5tq9CfI9JWc4iZrumJelIcGC5q2JD56Pie4 8nngcHAowfAyNWdFMSOH6f3tnbDCnivW5p2ezIpo19kGbl3yp037oz3tqas1GiVQ 0274nZp+W1CoNlYGt6kbGZiKUcAzUsOhsg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:46 2026 by rpki-client