This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer File: x5d6en0rE11ac3kcp889mtpYj2s.cer (raw, json) Hash identifier: ziB/XF6cOeOvtGRhqHeNldBRvtnYRhzRxIENHmMK22k= Subject key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14E815AE475EED3A22ABE39E59170D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30960 IP: 80.76.128.0/20 IP: 193.27.236.0 -- 193.27.241.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e8:15:ae:47:5e:ed:3a:22:ab:e3:9e:59:17:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:b2:53:55:4d:f2:55:17:f1:f6:4a:91:67: df:b1:3f:c7:60:6c:60:71:ec:d2:6b:45:48:e5:0d: d4:99:db:06:1f:2f:01:18:80:18:06:49:cc:6d:05: b0:87:23:6b:3e:c3:6b:26:55:9e:49:ee:f8:e7:77: 4a:26:40:18:2e:47:75:84:45:34:0a:d5:3f:17:30: a0:12:aa:1e:48:a1:cd:23:39:71:ca:28:d4:72:52: cc:a1:85:64:32:0d:f2:34:4f:c9:68:e5:8a:ca:d8: 1c:cf:af:61:ac:90:9e:a1:b9:4a:78:d9:e0:01:4b: 18:b8:d1:b7:98:7a:f4:8a:0b:11:ca:02:f3:63:49: 2c:a2:d9:eb:35:1d:cd:05:c0:ed:f3:5a:d8:b2:16: 7f:c4:9e:14:4b:a3:86:3e:ac:06:f3:70:d9:24:6a: 67:0d:58:c6:8c:0e:9b:a0:0f:5e:19:c0:d0:ce:c2: db:46:af:6d:b3:33:a8:a9:d6:7d:9c:e3:08:bc:e8: 8a:3e:68:c3:f6:20:d6:b9:39:7f:12:27:15:98:8d: ab:6c:97:a6:4d:8c:2f:81:2c:77:b0:0f:9f:9c:54: 66:1d:b1:76:08:a6:58:42:57:3c:55:b6:05:46:d8: fd:aa:b8:83:99:76:94:28:71:b5:c0:f6:a9:a6:59: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.128.0/20 193.27.236.0-193.27.241.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30960 Signature Algorithm: sha256WithRSAEncryption 78:a4:8c:3e:35:8e:bd:6f:c8:76:88:6e:22:8f:b2:8b:21:0a: 95:44:bb:56:96:07:b2:01:7d:9c:5d:07:8d:b4:dd:94:44:f4: 83:2a:21:cb:d9:da:35:4a:cd:49:9c:69:ca:f9:00:04:21:e1: 1e:0f:ce:38:a7:b1:2f:ac:0c:d3:21:42:c9:a5:dc:9f:85:7e: 01:ee:0c:e3:69:b6:de:35:9a:0d:e5:ed:fc:7e:dd:62:e2:bb: d0:2c:76:79:2e:13:d6:98:b3:eb:a9:89:22:1a:44:e0:34:7e: 9e:15:5e:5e:50:79:a7:18:be:d0:99:08:d9:fe:17:8a:05:1f: 08:e8:c6:77:92:20:c7:77:87:78:7a:6a:43:34:b6:f7:77:5f: 7a:ca:47:83:6f:6d:66:1e:b0:08:f6:5b:10:44:2f:26:6d:d9: 7f:22:3f:3c:94:2e:39:ec:f9:1e:c6:a9:45:1f:48:1d:fc:87: c7:92:bd:94:9b:97:5e:67:06:c7:1a:f0:79:21:49:f3:1d:a3: fc:0b:92:ce:f9:a6:ee:14:4a:cf:2d:73:f7:72:46:90:58:9f: a4:d2:e5:ac:9c:5a:5f:79:5e:72:82:e8:47:c6:d3:4f:27:bc: 66:a8:2b:de:14:5c:16:82:f3:41:0e:f7:fa:6f:37:01:26:a7: bf:c8:21:de -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZt/FOgVrkde7Toiq+OeWRcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk3N2E3YTdkMmIxMzVkNWE3Mzc5MWNhN2NmM2Q5YWRhNTg4ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AOyU1VN8lUX8fZKkWffsT/HYGxg cezSa0VI5Q3UmdsGHy8BGIAYBknMbQWwhyNrPsNrJlWeSe7453dKJkAYLkd1hEU0 CtU/FzCgEqoeSKHNIzlxyijUclLMoYVkMg3yNE/JaOWKytgcz69hrJCeoblKeNng AUsYuNG3mHr0igsRygLzY0ksotnrNR3NBcDt81rYshZ/xJ4US6OGPqwG83DZJGpn DVjGjA6boA9eGcDQzsLbRq9tszOoqdZ9nOMIvOiKPmjD9iDWuTl/EicVmI2rbJem TYwvgSx3sA+fnFRmHbF2CKZYQlc8VbYFRtj9qriDmXaUKHG1wPappllpxwIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFMeXenp9KxNdWnN5HKfPPZraWI9rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1Lzk2Njhi Ni0zMDczLTRjN2ItYTE1ZC00YTljY2U2MGJkYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvOTY2OGI2 LTMwNzMtNGM3Yi1hMTVkLTRhOWNjZTYwYmRiOC8xL3g1ZDZlbjByRTExYWMza2Nw ODg5bXRwWWoycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQEUEyAMAwDBALBG+wDBAHBG/AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICePAwDQYJKoZIhvcNAQELBQADggEBAHikjD41jr1vyHaI biKPsoshCpVEu1aWB7IBfZxdB4203ZRE9IMqIcvZ2jVKzUmcacr5AAQh4R4Pzjin sS+sDNMhQsml3J+FfgHuDONptt41mg3l7fx+3WLiu9AsdnkuE9aYs+upiSIaROA0 fp4VXl5QeacYvtCZCNn+F4oFHwjoxneSIMd3h3h6akM0tvd3X3rKR4NvbWYesAj2 WxBELyZt2X8iPzyULjns+R7GqUUfSB38h8eSvZSbl15nBsca8HkhSfMdo/wLks75 pu4USs8tc/dyRpBYn6TS5aycWl95XnKC6EfG008nvGaoK94UXBaC80EO9/pvNwEm p7/IId4= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:05 2026 by rpki-client