This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer (raw, json) Hash identifier: CzFXT+tFhEdFim3JExQO/f0XMshFfqmMZMXQ9CDhgIE= Subject key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911482C60CBEBF10473D044628B3835 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39761 IP: 45.11.132.0/22 IP: 45.14.156.0/22 IP: 45.83.212.0/22 IP: 45.87.12.0/22 IP: 81.90.240.0/20 IP: 84.246.160.0/21 IP: 185.153.72.0/22 IP: 2a00:1268::/29 IP: 2a0e:6d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:48:2c:60:cb:eb:f1:04:73:d0:44:62:8b:38:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:71:36:8b:5d:89:5d:d8:a3:d2:bc:b6:e6: df:5b:3e:9b:b4:cf:2d:72:cd:f7:c9:85:41:91:5f: 25:53:14:33:6c:65:a2:52:21:36:52:a8:6b:a4:e6: 21:f8:e6:c4:58:be:5c:07:0d:8d:30:45:96:59:20: 46:42:33:09:a3:27:2b:b3:2d:4b:b0:81:12:8f:11: cc:70:3f:7d:aa:9f:34:97:31:10:9c:5c:62:68:e8: 41:fe:75:1c:58:8d:6e:1a:58:bc:3c:14:65:7f:e8: 7d:44:30:c1:23:da:e9:82:2c:b4:c5:b9:d5:a6:33: 5c:d3:b2:82:a3:44:40:d2:b0:48:36:84:3b:d8:43: c7:03:db:98:37:8d:ad:29:b2:00:4d:a6:fc:1e:40: 50:3e:9a:17:ec:f5:09:e2:09:1a:16:47:1f:b5:37: 5f:e2:48:57:47:c2:09:36:6f:86:b8:c5:09:e3:a5: f4:b7:1b:f7:ee:71:22:60:23:f4:de:cd:4a:10:e7: dd:fd:ba:f1:4b:db:7e:c0:15:dc:25:fd:a8:8e:19: ba:06:cb:ed:a6:9b:2f:5a:8b:7b:b1:36:70:1b:ce: 8a:a5:76:82:7b:b9:63:94:d1:ff:9e:8b:7c:70:91: 9a:50:37:1b:7a:d2:7b:dd:f8:cd:80:3d:52:18:70: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.132.0/22 45.14.156.0/22 45.83.212.0/22 45.87.12.0/22 81.90.240.0/20 84.246.160.0/21 185.153.72.0/22 IPv6: 2a00:1268::/29 2a0e:6d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39761 Signature Algorithm: sha256WithRSAEncryption 38:51:00:9e:15:0d:72:b5:6e:c2:66:b7:80:b0:62:e6:45:60: 3d:1a:c2:68:29:a1:2d:ac:2b:bb:91:48:c1:47:d1:62:10:b8: 93:34:cc:d4:3b:ae:41:97:8e:37:2d:63:7b:0e:4e:dd:eb:c2: ee:59:2e:a8:7e:e5:f2:9b:23:02:3d:5a:dc:50:d3:38:c3:ae: 12:6e:ad:50:80:3f:fd:d0:2f:95:00:fd:3c:cb:e3:6d:33:13: 50:ec:4f:36:3a:11:a9:b5:df:03:59:d3:f3:58:a1:66:ab:42: 38:7d:ad:14:cc:f3:ef:c5:84:64:60:c5:81:6c:49:89:46:c2: 16:60:8f:be:3d:a8:df:b9:ed:e8:d6:ed:d6:08:7f:b1:4c:98: ef:cf:d4:46:38:e2:ab:56:3d:17:59:95:6e:84:dc:03:6b:cb: 39:ea:bb:4a:05:5e:72:55:1f:92:cb:3e:73:3b:27:4b:64:cd: f0:24:38:54:86:e4:05:fd:bc:c0:42:f2:3b:95:f7:93:07:22: 5e:8c:8a:b4:c9:e7:8a:dc:58:af:56:8f:a9:89:4b:90:9b:0a: ad:ab:d1:31:f7:f5:a6:7c:ec:b3:a5:36:49:8d:7d:a3:fa:4f: 01:9b:0e:59:67:6b:82:fa:76:e1:2a:a1:b2:5a:01:48:1c:6a: 90:03:9d:a7 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt5EUgsYMvr8QRz0ERiizg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk4NmZjNjQ2ZmRhMGNmMTQ1ZTEwZDkzZmUxYjEwZWIwZGVlNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbBxNotdiV3Yo9K8tubfWz6btM8t cs33yYVBkV8lUxQzbGWiUiE2UqhrpOYh+ObEWL5cBw2NMEWWWSBGQjMJoycrsy1L sIESjxHMcD99qp80lzEQnFxiaOhB/nUcWI1uGli8PBRlf+h9RDDBI9rpgiy0xbnV pjNc07KCo0RA0rBINoQ72EPHA9uYN42tKbIATab8HkBQPpoX7PUJ4gkaFkcftTdf 4khXR8IJNm+GuMUJ46X0txv37nEiYCP03s1KEOfd/brxS9t+wBXcJf2ojhm6Bsvt ppsvWot7sTZwG86KpXaCe7ljlNH/not8cJGaUDcbetJ73fjNgD1SGHBN3QIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzM0YmI3 Ny1jODQ3LTQxMTEtOTZmMy1iZGQ1Y2M0NDAzOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzRiYjc3 LWM4NDctNDExMS05NmYzLWJkZDVjYzQ0MDM5Ni8xL201aHZ4a2I5b004VVhoRFpQ LUd4RHJEZTVpVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQCLQuEAwQCLQ6cAwQCLVPUAwQCLVcMAwQEUVrw AwQDVPagAwQCuZlIMBQEAgACMA4DBQMqABJoAwUDKg5tADAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMAm1EwDQYJKoZIhvcNAQELBQADggEBADhRAJ4VDXK1bsJmt4Cw YuZFYD0awmgpoS2sK7uRSMFH0WIQuJM0zNQ7rkGXjjctY3sOTt3rwu5ZLqh+5fKb IwI9WtxQ0zjDrhJurVCAP/3QL5UA/TzL420zE1DsTzY6Eam13wNZ0/NYoWarQjh9 rRTM8+/FhGRgxYFsSYlGwhZgj749qN+57ejW7dYIf7FMmO/P1EY44qtWPRdZlW6E 3ANryznqu0oFXnJVH5LLPnM7J0tkzfAkOFSG5AX9vMBC8juV95MHIl6MirTJ54rc WK9Wj6mJS5CbCq2r0TH39aZ87LOlNkmNfaP6TwGbDllna4L6duEqobJaAUgcapAD nac= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:04 2026 by rpki-client