This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer File: s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer (raw, json) Hash identifier: 7/Vtk4kOojRQbtPRrHaQIHGnzcvlz9bENRGoFdiDX4A= Subject key identifier: B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11BC7DEA53261CF9E35C32170399FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204595 IP: 80.66.240.0/20 IP: 89.42.118.0/23 IP: 176.118.4.0/22 IP: 178.248.136.0/21 IP: 185.114.176.0/22 IP: 204.17.195.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:bc:7d:ea:53:26:1c:f9:e3:5c:32:17:03:99:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:26:9a:24:be:29:27:26:f9:dd:2e:cc:3c: 6d:ad:fb:f3:1d:06:39:98:11:22:74:da:af:f4:b7: c0:60:49:14:b8:a5:84:38:57:e8:6e:0d:72:d7:2d: 41:ef:fb:14:0a:33:41:92:30:65:c6:12:a7:60:62: f9:bf:aa:4a:79:48:b1:6e:6d:65:2a:d7:25:ba:f9: 4e:cb:ea:10:f0:66:7e:3b:d3:e3:1c:ae:77:af:ab: b1:60:e6:e2:17:21:69:0d:15:4f:b3:6d:85:cb:df: e6:01:b3:02:86:05:14:23:a7:03:8b:6f:33:c4:c6: 40:4c:83:db:53:b1:c3:f3:92:26:8a:28:71:bf:8b: 59:4b:32:0e:82:91:f9:7e:4d:df:32:1a:5b:a1:dd: 3f:f8:f8:d2:28:c0:e2:d9:1b:f7:53:82:a4:12:16: 49:8c:bf:ed:70:17:f2:ba:e5:c9:6c:7f:0c:6b:ef: 88:87:c0:73:5b:ed:f4:fe:f7:5c:5b:5a:1a:b3:fd: c4:0f:9f:00:c6:48:11:40:d2:6e:5a:d5:84:a6:6b: 0c:83:b8:3f:18:9e:0c:60:74:f9:77:4d:48:f6:af: e3:43:69:15:6c:d3:06:c2:8d:8c:0d:1e:81:fe:d1: 25:9f:03:df:b3:98:83:f5:28:81:81:17:18:9c:1c: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.240.0/20 89.42.118.0/23 176.118.4.0/22 178.248.136.0/21 185.114.176.0/22 204.17.195.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204595 Signature Algorithm: sha256WithRSAEncryption 14:6b:bc:a6:a8:9f:06:7a:91:8e:9c:38:ca:16:97:18:a4:14: 85:fa:47:f8:56:01:23:88:8e:4b:1f:99:ee:11:17:56:0f:bf: a5:83:28:29:b7:a4:86:10:e2:b7:34:de:32:57:61:46:6f:c7: 1a:12:6e:09:e0:97:5b:03:f3:62:d8:fd:09:ec:b0:e4:e1:26: c8:e3:07:fc:79:a7:da:cb:21:20:cc:42:7d:66:fc:85:84:7c: ce:cc:c8:1e:f7:0c:d8:87:16:e7:83:6c:76:f7:c7:68:d3:70: 01:6a:95:d3:52:8b:4d:b3:bd:4c:8e:ee:28:cc:cd:d8:98:fa: 35:2a:e9:e1:7e:f9:95:fb:2c:fd:52:e5:34:75:28:a4:bc:a4: f8:66:10:77:5d:28:ae:9c:f4:8a:aa:ca:f6:1c:c8:90:58:eb: 4a:d4:01:1c:38:e2:db:9e:a2:5e:52:80:7a:98:f6:7a:02:07: 5c:93:e3:98:87:61:5b:1c:e2:5e:04:62:69:74:05:ee:39:c5: 8d:dc:e4:d2:07:c9:56:2f:d0:e2:78:44:47:9e:d9:05:97:48: 73:21:da:bb:fa:f8:87:3a:cf:7a:28:24:6a:e4:9e:7f:b1:ea: 5e:c7:79:df:ac:63:54:4f:fa:d9:85:85:94:3e:26:2a:d2:a5: ab:93:29:cb -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt8Ebx96lMmHPnjXDIXA5n/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzkwZWEyN2E2NTRiMjhhMzg5MWE5ZGJmYWZjYjlkZTJkYzNiNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt8mmiS+KScm+d0uzDxtrfvzHQY5 mBEidNqv9LfAYEkUuKWEOFfobg1y1y1B7/sUCjNBkjBlxhKnYGL5v6pKeUixbm1l KtcluvlOy+oQ8GZ+O9PjHK53r6uxYObiFyFpDRVPs22Fy9/mAbMChgUUI6cDi28z xMZATIPbU7HD85Imiihxv4tZSzIOgpH5fk3fMhpbod0/+PjSKMDi2Rv3U4KkEhZJ jL/tcBfyuuXJbH8Ma++Ih8BzW+30/vdcW1oas/3ED58AxkgRQNJuWtWEpmsMg7g/ GJ4MYHT5d01I9q/jQ2kVbNMGwo2MDR6B/tElnwPfs5iD9SiBgRcYnBwYOwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFLOQ6iemVLKKOJGp2/r8ud4tw7XkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzIyNmI2 OS00YTAxLTRlMzMtODRhOC0wMmIyYWNlZTNiZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvMjI2YjY5 LTRhMDEtNGUzMy04NGE4LTAyYjJhY2VlM2JkYy8xL3M1RHFKNlpVc29vNGthbmIt dnk1M2kzRHRlUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQEUELwAwQBWSp2AwQCsHYEAwQDsviIAwQCuXKw AwQAzBHDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMfMzANBgkqhkiG9w0BAQsF AAOCAQEAFGu8pqifBnqRjpw4yhaXGKQUhfpH+FYBI4iOSx+Z7hEXVg+/pYMoKbek hhDitzTeMldhRm/HGhJuCeCXWwPzYtj9Ceyw5OEmyOMH/Hmn2sshIMxCfWb8hYR8 zszIHvcM2IcW54NsdvfHaNNwAWqV01KLTbO9TI7uKMzN2Jj6NSrp4X75lfss/VLl NHUopLyk+GYQd10orpz0iqrK9hzIkFjrStQBHDji256iXlKAepj2egIHXJPjmIdh WxziXgRiaXQF7jnFjdzk0gfJVi/Q4nhER57ZBZdIcyHau/r4hzrPeigkauSef7Hq Xsd536xjVE/62YWFlD4mKtKlq5Mpyw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:47 2026 by rpki-client