This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.cer (raw, json) Hash identifier: jL+5ZYOCrqVzTRUQolhaPttWZsztLwWpSOBSD5z4vVU= Subject key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD64A32F7C3397528723D94BCDCD44958 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:45:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210853 IP: 185.122.12.0/22 IP: 2a06:a040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:4a:32:f7:c3:39:75:28:72:3d:94:bc:dc:d4:49:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 12:45:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:ee:10:8d:7b:bb:3e:db:ce:66:2e:59:97: 7c:1b:7d:f9:78:63:66:53:20:f4:11:ba:a4:ce:86: ee:08:08:ad:9c:9e:c5:fa:b8:4e:7b:05:b5:33:c8: a6:91:3f:2e:0a:9f:30:bc:a5:b0:39:1f:b4:25:66: 4f:ba:7d:94:70:4d:6e:c0:0f:33:9b:63:f4:aa:60: f4:73:41:63:f1:fd:04:8f:67:3f:4d:64:59:0d:04: 6f:49:cf:9a:70:fd:10:96:14:e6:4a:34:68:e3:d4: c6:7e:bc:c1:b3:e2:69:6d:e9:e1:d1:2a:1f:d0:53: 8a:af:e1:70:9a:fc:91:7b:65:9c:77:20:e5:e8:3e: f5:08:86:bc:89:56:41:dc:b7:49:70:34:93:9c:da: 2f:20:22:cb:f0:99:38:89:c3:0d:7d:cf:ec:62:a1: 5d:93:64:7c:c7:08:cd:f0:5a:2e:3e:6d:a4:ea:1c: aa:df:a4:b0:8c:67:8d:35:2f:a1:9a:7f:45:8c:3c: 33:5c:46:94:a8:a9:da:a8:b7:e9:f8:ef:e5:e3:80: 3b:f3:92:37:9f:ae:6d:9b:de:51:2d:e2:1f:9b:10: 44:a8:81:76:7c:e2:72:77:a2:72:1b:bb:4e:9d:59: 5b:8b:9e:5f:f1:85:7f:ab:eb:25:0b:a7:76:54:1d: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.12.0/22 IPv6: 2a06:a040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210853 Signature Algorithm: sha256WithRSAEncryption 7b:d7:27:44:cd:79:ad:c0:ae:0f:a9:74:61:ff:84:93:3d:16: b7:4a:a5:08:b7:c9:7a:e6:0b:e0:90:c0:5f:86:d3:31:f3:4a: 2c:04:27:84:bb:b8:39:a9:90:8b:45:82:a5:a8:e5:a4:6c:dd: 48:6d:70:40:32:3c:0b:9b:b6:9e:f9:0c:a3:dd:b6:50:ad:86: c1:95:4e:40:bb:4e:db:17:fa:a9:32:5b:34:6b:9a:b3:15:d7: 74:eb:f1:5d:d3:4e:57:7a:b1:c9:bd:14:f0:64:7d:a9:26:a4: 09:7e:26:65:92:c2:be:09:c2:4d:fc:2f:24:14:7b:17:cf:1f: 6a:53:85:7a:11:ca:ae:cf:20:45:3c:57:f3:b8:90:fb:94:cf: 4c:68:c5:9f:6c:7d:ed:d8:1f:46:f5:92:e0:27:8a:3c:ba:c6: 70:60:b1:14:44:e9:78:2b:6c:38:8b:94:18:1d:9c:0b:7b:d5: 52:6f:d8:d9:d5:65:6e:ea:a1:15:ac:74:80:42:d1:1a:85:eb: 82:cd:1d:30:00:19:0f:08:af:b3:47:87:6e:8c:40:b6:dd:3c: 2d:58:4d:8c:d1:40:c5:e5:9f:3b:fa:c1:05:36:06:6e:fa:f4: 31:7c:40:61:b1:cc:1c:b0:b2:62:88:f8:4c:d8:68:43:ea:1e: a3:06:57:a1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvWSjL3wzl1KHI9lLzc1ElYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTI0NTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGNjZDczNTA4YTliNTk5ODVkNTU5Nzg2OGUzYTVkNWVjNzQ1ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl7uEI17uz7bzmYuWZd8G335eGNm UyD0EbqkzobuCAitnJ7F+rhOewW1M8imkT8uCp8wvKWwOR+0JWZPun2UcE1uwA8z m2P0qmD0c0Fj8f0Ej2c/TWRZDQRvSc+acP0QlhTmSjRo49TGfrzBs+Jpbenh0Sof 0FOKr+FwmvyRe2WcdyDl6D71CIa8iVZB3LdJcDSTnNovICLL8Jk4icMNfc/sYqFd k2R8xwjN8FouPm2k6hyq36SwjGeNNS+hmn9FjDwzXEaUqKnaqLfp+O/l44A785I3 n65tm95RLeIfmxBEqIF2fOJyd6JyG7tOnVlbi55f8YV/q+slC6d2VB3jFwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOTM1zUIqbWZhdVZeGjjpdXsdF9eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzQ1M2Fl ZC03NjQ1LTQ1OWQtODVkOC04NWQ4MGE1NDRiZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvNDUzYWVk LTc2NDUtNDU5ZC04NWQ4LTg1ZDgwYTU0NGJlYi8xLzVNelhOUWlwdFptRjFWbDRh T09sMWV4MFgxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXoMMA0EAgACMAcDBQMqBqBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3pTANBgkqhkiG9w0BAQsFAAOCAQEAe9cnRM15rcCu D6l0Yf+Ekz0Wt0qlCLfJeuYL4JDAX4bTMfNKLAQnhLu4OamQi0WCpajlpGzdSG1w QDI8C5u2nvkMo922UK2GwZVOQLtO2xf6qTJbNGuasxXXdOvxXdNOV3qxyb0U8GR9 qSakCX4mZZLCvgnCTfwvJBR7F88falOFehHKrs8gRTxX87iQ+5TPTGjFn2x97dgf RvWS4CeKPLrGcGCxFETpeCtsOIuUGB2cC3vVUm/Y2dVlbuqhFax0gELRGoXrgs0d MAAZDwivs0eHboxAtt08LVhNjNFAxeWfO/rBBTYGbvr0MXxAYbHMHLCyYoj4TNho Q+oeowZXoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:14 2026 by rpki-client