This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer File: t5im6ZG5VaKTURGf9312hksNOEo.cer (raw, json) Hash identifier: VldyBH/dPVWb1jOf6T0OypwbG8mnyKxRu+FWlIfG6Xw= Subject key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED76B4EB9AF22026343186E844DA96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209603 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:76:b4:eb:9a:f2:20:26:34:31:86:e8:44:da:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b798a6e991b955a29351119ff77d76864b0d384a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:93:dc:22:c8:bc:f4:7a:9d:a4:89:a1:14: 77:b3:3c:de:57:fe:ae:af:0f:9b:04:0a:62:f0:0f: 63:ed:f6:eb:7a:74:b4:34:e4:79:d6:af:33:4e:d1: ee:26:33:74:bd:ca:fc:43:1c:55:69:c4:f9:ba:28: c5:a3:4d:5a:ec:ff:8e:52:19:33:1d:c8:0d:85:38: 95:4c:4b:0b:da:a7:69:8a:9e:34:80:3c:98:03:c7: 2a:92:92:fc:a8:4e:3c:03:81:e9:17:59:37:c4:4b: f3:be:0f:2c:95:f4:c5:66:a5:d5:3e:d0:d7:ae:02: 4e:e7:60:99:62:fd:5f:81:ef:6f:98:5a:a3:a1:c5: ad:e9:57:96:f1:06:db:54:96:a7:28:66:65:d1:e3: ac:ef:7a:f8:21:18:4e:a2:4a:f2:a1:e8:76:09:3e: e4:91:c2:33:dc:fc:3f:de:f1:11:43:d5:a8:67:35: a9:b5:2c:94:0b:52:e5:43:12:f4:c6:e2:2c:22:32: 52:70:3b:26:6a:68:85:84:db:08:c5:c0:f2:e1:40: 99:71:90:03:5b:16:4c:71:20:5a:4c:5b:3d:fe:6f: d9:dd:c6:8f:22:e2:53:45:a6:25:10:eb:19:a5:0f: 8c:14:8d:48:4e:1b:4e:5a:fa:e6:3b:1c:8a:f8:ed: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209603 Signature Algorithm: sha256WithRSAEncryption 1c:73:62:20:54:7a:7b:21:aa:a8:d9:c3:26:76:f3:ad:ee:8c: c2:65:6c:33:37:4e:35:3b:27:23:7b:ca:87:44:35:9a:b4:b7: 9d:65:44:de:70:73:45:28:9a:89:99:23:ca:c9:4b:f8:5e:73: 1e:0b:89:a2:a8:d2:a8:cc:2f:f1:1c:b4:d6:4e:1d:bf:e2:ef: 09:b8:94:77:48:0d:5b:f1:d5:f6:8c:51:45:ee:9d:e2:49:3f: f4:22:34:bd:11:6b:78:93:dd:1b:df:b8:a8:5f:96:7e:8f:7d: a0:1e:b6:86:54:13:3e:5b:79:69:99:2d:64:f9:cc:dc:59:b8: 09:41:cd:41:b1:78:0c:22:53:59:cd:e5:a7:9f:9c:5a:91:21: b4:97:1d:4a:3e:e8:47:f3:97:8f:65:4d:f9:ab:df:50:96:1b: 3b:86:16:3b:8e:0d:7a:d8:ae:c5:c1:06:a2:b3:f9:2c:1c:dd: 4e:10:1c:8f:7a:b7:c0:85:d7:56:1b:34:80:23:6e:da:e3:6e: 65:b5:ac:0f:c1:5d:90:64:3a:f6:63:cd:af:da:10:d1:66:a3: c8:41:0d:9d:98:0c:d9:2b:d5:0c:c5:ff:ce:1e:5d:73:83:3d: 7d:85:bc:16:46:1b:e3:ab:14:eb:8e:0a:4d:84:c7:ab:5a:c1: 96:38:f1:72 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87Xa065ryICY0MYboRNqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzk4YTZlOTkxYjk1NWEyOTM1MTExOWZmNzdkNzY4NjRiMGQzODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZqT3CLIvPR6naSJoRR3szzeV/6u rw+bBApi8A9j7fbrenS0NOR51q8zTtHuJjN0vcr8QxxVacT5uijFo01a7P+OUhkz HcgNhTiVTEsL2qdpip40gDyYA8cqkpL8qE48A4HpF1k3xEvzvg8slfTFZqXVPtDX rgJO52CZYv1fge9vmFqjocWt6VeW8QbbVJanKGZl0eOs73r4IRhOokryoeh2CT7k kcIz3Pw/3vERQ9WoZzWptSyUC1LlQxL0xuIsIjJScDsmamiFhNsIxcDy4UCZcZAD WxZMcSBaTFs9/m/Z3caPIuJTRaYlEOsZpQ+MFI1IThtOWvrmOxyK+O2tkQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLeYpumRuVWik1ERn/d9doZLDThKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzUzOTJi OS03ZjIzLTQ3NDAtOTEyMy02OWM3MmYxNjg2ODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvNTM5MmI5 LTdmMjMtNDc0MC05MTIzLTY5YzcyZjE2ODY4OS8xL3Q1aW02Wkc1VmFLVFVSR2Y5 MzEyaGtzTk9Fby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMywzANBgkqhkiG9w0BAQsFAAOCAQEAHHNiIFR6eyGq qNnDJnbzre6MwmVsMzdONTsnI3vKh0Q1mrS3nWVE3nBzRSiaiZkjyslL+F5zHguJ oqjSqMwv8Ry01k4dv+LvCbiUd0gNW/HV9oxRRe6d4kk/9CI0vRFreJPdG9+4qF+W fo99oB62hlQTPlt5aZktZPnM3Fm4CUHNQbF4DCJTWc3lp5+cWpEhtJcdSj7oR/OX j2VN+avfUJYbO4YWO44NetiuxcEGorP5LBzdThAcj3q3wIXXVhs0gCNu2uNuZbWs D8FdkGQ69mPNr9oQ0WajyEENnZgM2SvVDMX/zh5dc4M9fYW8FkYb46sU644KTYTH q1rBljjxcg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:02 2026 by rpki-client