This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.cer (raw, json) Hash identifier: w+dy23UA3/X+u9oBa9JMKbLtI5p628YPuP+UqPH7T/Y= Subject key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA751732952326AD45F2855B3D56ECB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41625 IP: 89.31.240.0/21 IP: 185.219.90.0/23 IP: 2a00:8900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:51:73:29:52:32:6a:d4:5f:28:55:b3:d5:6e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e482fd07e20d406ea4152e492b000e554ebfcc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:ac:44:72:33:d6:64:13:cd:a7:8f:6c:9d: 86:16:23:74:59:44:f3:e2:54:22:0d:8d:74:a3:06: 65:3b:bf:e1:9e:07:82:e6:f8:56:d9:25:63:3d:83: 4d:9a:99:00:74:1f:cc:30:d0:48:87:f9:f4:ba:96: 53:d3:ee:00:5e:61:be:37:64:27:52:d6:38:02:ef: a0:a0:fe:42:bc:5c:8a:2b:01:1a:07:e8:cd:1d:1b: 51:ea:1d:37:e3:fd:34:ce:7c:88:51:c9:e0:0d:f8: 3b:42:d3:27:dc:02:31:9d:7f:82:56:f0:f4:7e:e0: 4b:f1:63:23:86:c7:e1:1a:ff:d6:41:82:05:cd:49: f6:fc:6c:75:93:a7:01:f3:ca:b5:6f:d2:b2:56:2f: b6:b4:fd:88:86:fc:af:9b:95:b4:ab:b8:84:9d:a7: 58:19:1d:6e:ea:a1:af:91:25:87:a6:94:68:0e:3e: 92:32:c2:32:bb:56:b5:53:64:62:01:9e:ae:8a:ed: d9:89:5c:e7:23:fc:c7:25:90:8c:29:53:de:ef:cb: ea:3c:24:63:a1:49:1b:2b:46:9a:8b:58:52:47:8b: b3:02:ca:e4:f7:7b:1f:9b:da:1b:8b:45:cd:ca:e5: 59:3b:b0:e1:7e:db:92:88:58:19:f6:7b:a1:ac:a8: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.240.0/21 185.219.90.0/23 IPv6: 2a00:8900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41625 Signature Algorithm: sha256WithRSAEncryption 21:51:9e:30:4c:6a:ea:e7:4f:b0:3d:64:4c:64:28:0c:76:66: 56:9f:da:2d:59:ae:89:7e:0b:7d:34:05:38:19:5d:0a:1e:16: 49:ca:d5:5f:e6:c4:b4:07:73:b0:8b:fb:10:4d:5c:54:ce:11: b2:3a:72:48:6f:5b:f9:85:93:13:46:e0:bd:88:c0:2b:98:64: 69:5a:30:94:c7:b3:c1:d6:47:90:ea:87:9f:6e:a5:10:a9:f4: ee:0a:82:43:5c:78:ef:3f:09:fb:bc:ac:d9:b7:19:5a:02:80: ab:c5:79:d6:b6:0b:7b:c0:f9:04:c8:f3:70:7a:a8:a5:7a:4f: 66:b4:72:07:b9:f1:68:df:30:a5:52:88:74:f2:6a:a9:f3:e2: 9c:09:7a:57:1b:0a:af:9d:a4:da:8d:57:8e:02:b8:6e:99:70: 2f:1c:13:ec:46:c8:e8:f8:47:a0:6f:20:58:26:17:db:d0:70: aa:97:72:98:c9:19:83:1a:f6:32:52:a1:0b:e7:7d:5b:82:39: 3c:d8:94:93:dc:fb:b9:a0:85:c9:a9:c8:97:3b:ad:c0:a8:69: 09:b7:99:6e:a7:79:5d:1c:64:01:b1:37:02:13:38:1f:c0:72: 5b:f9:c6:eb:ab:ac:57:3d:e9:a2:27:66:a1:31:3a:0a:54:56: f5:d6:0e:66 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+p1FzKVIyatRfKFWz1W7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDgyZmQwN2UyMGQ0MDZlYTQxNTJlNDkyYjAwMGU1NTRlYmZjYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+esRHIz1mQTzaePbJ2GFiN0WUTz 4lQiDY10owZlO7/hngeC5vhW2SVjPYNNmpkAdB/MMNBIh/n0upZT0+4AXmG+N2Qn UtY4Au+goP5CvFyKKwEaB+jNHRtR6h034/00znyIUcngDfg7QtMn3AIxnX+CVvD0 fuBL8WMjhsfhGv/WQYIFzUn2/Gx1k6cB88q1b9KyVi+2tP2Ihvyvm5W0q7iEnadY GR1u6qGvkSWHppRoDj6SMsIyu1a1U2RiAZ6uiu3ZiVznI/zHJZCMKVPe78vqPCRj oUkbK0aai1hSR4uzAsrk93sfm9obi0XNyuVZO7DhftuSiFgZ9nuhrKgROwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOSC/QfiDUBupBUuSSsADlVOv8yAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2Y3YTg3 YS1jMTg0LTQ5MDQtOTRlMy0yNjg1OTg2ZjZkMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZjdhODdh LWMxODQtNDkwNC05NGUzLTI2ODU5ODZmNmQwMS8xLzVJTDlCLUlOUUc2a0ZTNUpL d0FPVlU2X3pJQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWR/wAwQBudtaMA0EAgACMAcDBQAqAIkAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCimTANBgkqhkiG9w0BAQsFAAOCAQEAIVGe MExq6udPsD1kTGQoDHZmVp/aLVmuiX4LfTQFOBldCh4WScrVX+bEtAdzsIv7EE1c VM4RsjpySG9b+YWTE0bgvYjAK5hkaVowlMezwdZHkOqHn26lEKn07gqCQ1x47z8J +7ys2bcZWgKAq8V51rYLe8D5BMjzcHqopXpPZrRyB7nxaN8wpVKIdPJqqfPinAl6 VxsKr52k2o1XjgK4bplwLxwT7EbI6PhHoG8gWCYX29BwqpdymMkZgxr2MlKhC+d9 W4I5PNiUk9z7uaCFyanIlzutwKhpCbeZbqd5XRxkAbE3AhM4H8ByW/nG66usVz3p oidmoTE6ClRW9dYOZg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:53 2026 by rpki-client