This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer File: s5LSHrz27URUxP9GgyS97dSbqhM.cer (raw, json) Hash identifier: I4ryDVWTgIwumdcjbwB4wQs+fMWjtd0AeaiBb4mdjW4= Subject key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE6617D71CE2AFD11D1706E459014CCEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 15:45:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202119 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:61:7d:71:ce:2a:fd:11:d1:70:6e:45:90:14:cc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 15:45:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:55:0e:11:53:c8:ef:e9:86:91:88:e2:d6: 9d:10:8f:2a:6f:dd:6f:d6:e1:7b:e7:cb:12:cd:97: 41:e7:84:16:9e:d5:32:13:c8:dc:36:7e:7b:0a:24: 5e:ed:7c:2b:1a:94:81:f2:00:41:2f:07:f8:c6:23: a3:9a:34:2d:0b:a5:4a:bc:ed:0b:2b:6f:b7:5e:85: c6:75:f3:84:90:9e:44:31:d3:65:5c:7b:c6:bc:6d: 51:4b:47:28:98:c4:f6:ce:51:7b:8e:2a:4a:71:7f: ff:28:05:88:f2:61:1d:16:13:ce:45:71:9b:8e:d5: a2:4e:a3:18:6e:ec:c0:c9:ea:78:0b:ae:b7:36:5a: 42:9d:3d:90:34:e5:56:01:bd:c4:52:e0:6c:c4:52: 1f:a4:bc:96:ff:a7:f9:c6:4e:54:20:a3:af:38:8d: 83:d2:9d:04:e5:8e:de:87:0d:f3:54:3e:2d:eb:65: f5:6c:6b:53:da:4b:a4:ae:ab:48:91:9b:cf:5f:79: 12:a2:6a:f0:23:8b:63:4b:e9:87:42:a6:1a:8d:9e: 29:36:2a:93:3b:01:1e:bc:b5:56:a2:62:8e:f1:f1: 7d:ff:4d:1e:63:87:1c:bd:d9:13:bb:b5:05:63:1d: 3d:55:75:fb:c4:f7:31:f0:a9:57:9f:29:cb:94:c3: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202119 Signature Algorithm: sha256WithRSAEncryption 65:f5:cb:9d:a4:fb:32:e5:29:8c:4f:60:ea:0d:5c:b9:7d:59: 0f:be:13:97:8e:ff:25:31:6d:35:78:e2:00:dc:73:c4:3a:5c: 85:14:1f:5d:ba:51:0d:7a:d7:14:c7:91:2c:d7:b2:c6:79:93: 2d:c2:1a:7f:82:fb:9a:d9:8e:7e:88:55:bf:db:ec:78:6a:26: 36:58:99:88:88:f0:6f:cf:49:9f:1a:2c:c1:f0:7b:02:0d:25: ce:5a:a3:62:66:ac:95:8a:dc:a6:38:a7:04:c2:00:b8:77:c7: 08:e6:9f:c1:14:04:0c:39:39:5a:cb:af:14:b5:43:d6:02:d5: 1d:9c:16:55:e8:26:b7:14:61:cc:28:97:98:34:3b:ad:2c:4f: 66:f2:53:e1:6c:7a:1f:49:1d:a0:49:ac:88:e5:cf:31:86:63: 0f:ad:29:c7:6e:8c:8e:f1:dd:8c:7a:fd:46:8f:ba:fd:8f:34: a0:dd:97:dc:53:90:85:7d:e3:aa:b8:a1:f9:3c:f8:aa:d9:71: d8:36:81:97:24:58:0a:28:eb:c2:91:da:08:b8:a1:5d:7c:9e: 84:5a:e1:96:4a:6e:d4:db:23:03:b3:65:3e:7e:75:25:31:a7: 1a:27:47:c2:b3:d1:5b:48:f2:e5:ff:d6:a4:00:c9:6c:c5:46: f0:ff:4c:db -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvmYX1xzir9EdFwbkWQFMzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTU0NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzkyZDIxZWJjZjZlZDQ0NTRjNGZmNDY4MzI0YmRlZGQ0OWJhYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl9VDhFTyO/phpGI4tadEI8qb91v 1uF758sSzZdB54QWntUyE8jcNn57CiRe7XwrGpSB8gBBLwf4xiOjmjQtC6VKvO0L K2+3XoXGdfOEkJ5EMdNlXHvGvG1RS0comMT2zlF7jipKcX//KAWI8mEdFhPORXGb jtWiTqMYbuzAyep4C663NlpCnT2QNOVWAb3EUuBsxFIfpLyW/6f5xk5UIKOvOI2D 0p0E5Y7ehw3zVD4t62X1bGtT2kukrqtIkZvPX3kSomrwI4tjS+mHQqYajZ4pNiqT OwEevLVWomKO8fF9/00eY4ccvdkTu7UFYx09VXX7xPcx8KlXnynLlMOpaQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLOS0h689u1EVMT/RoMkve3Um6oTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzcyZTYz Mi0zNjJhLTQ0MmEtOTlmYy1kYmRkYTQ3NTcxNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvNzJlNjMy LTM2MmEtNDQyYS05OWZjLWRiZGRhNDc1NzE1NS8xL3M1TFNIcnoyN1VSVXhQOUdn eVM5N2RTYnFoTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMVhzANBgkqhkiG9w0BAQsFAAOCAQEAZfXLnaT7MuUp jE9g6g1cuX1ZD74Tl47/JTFtNXjiANxzxDpchRQfXbpRDXrXFMeRLNeyxnmTLcIa f4L7mtmOfohVv9vseGomNliZiIjwb89JnxoswfB7Ag0lzlqjYmaslYrcpjinBMIA uHfHCOafwRQEDDk5WsuvFLVD1gLVHZwWVegmtxRhzCiXmDQ7rSxPZvJT4Wx6H0kd oEmsiOXPMYZjD60px26MjvHdjHr9Ro+6/Y80oN2X3FOQhX3jqrih+Tz4qtlx2DaB lyRYCijrwpHaCLihXXyehFrhlkpu1NsjA7NlPn51JTGnGidHwrPRW0jy5f/WpADJ bMVG8P9M2w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:31 2026 by rpki-client