This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer File: 5_7U53ggnDyuk9S3bTUHBEYsOqs.cer (raw, json) Hash identifier: brrN/1OUEAfn3e0zqSNtSHCrSZm84f61ZgEkrErgSTQ= Subject key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15B8DFF375B159601BFC5FB2C12A9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39501 AS: 59703 IP: 45.140.28.0/22 IP: 85.204.30.0/23 IP: 85.204.76.0/23 IP: 85.204.104.0/23 IP: 86.104.232.0/21 IP: 89.32.196.0/23 IP: 89.33.18.0/23 IP: 89.33.129.0/24 IP: 89.33.204.0/23 IP: 89.33.234.0/23 IP: 89.33.240.0/23 IP: 89.34.20.0/23 IP: 89.34.88.0/23 IP: 89.34.94.0/23 IP: 89.34.168.0/23 IP: 89.34.176.0/23 IP: 89.34.200.0/23 IP: 89.35.58.0/23 IP: 89.35.132.0/23 IP: 89.35.156.0/23 IP: 89.35.176.0/23 IP: 89.35.194.0/23 IP: 89.36.16.0/23 IP: 89.36.194.0/23 IP: 89.36.226.0/23 IP: 89.36.252.0/23 IP: 89.37.30.0/23 IP: 89.37.42.0/23 IP: 89.37.102.0/23 IP: 89.37.198.0/23 IP: 89.37.218.0/23 IP: 89.38.24.0/23 IP: 89.38.102.0/23 IP: 89.38.242.0/23 IP: 89.39.186.0/23 IP: 89.40.38.0/23 IP: 89.40.78.0/23 IP: 89.40.90.0/23 IP: 89.40.106.0/23 IP: 89.40.110.0/23 IP: 89.40.128.0/23 IP: 89.41.8.0 -- 89.41.23.255 IP: 89.41.32.0/23 IP: 89.41.58.0/23 IP: 89.41.240.0/21 IP: 89.42.32.0/23 IP: 89.42.56.0/23 IP: 89.42.68.0/23 IP: 89.42.150.0/23 IP: 89.42.228.0/23 IP: 89.43.36.0/23 IP: 89.43.70.0/23 IP: 89.43.88.0 -- 89.43.103.255 IP: 89.43.182.0/23 IP: 89.43.188.0/23 IP: 89.43.204.0/23 IP: 89.44.112.0/23 IP: 89.44.118.0/23 IP: 89.44.146.0/23 IP: 89.44.190.0/23 IP: 89.44.202.0/23 IP: 89.45.68.0/23 IP: 89.45.80.0/23 IP: 89.45.126.0/23 IP: 89.45.230.0/23 IP: 89.46.44.0/23 IP: 89.46.60.0/23 IP: 89.46.94.0/23 IP: 89.165.0.0/17 IP: 94.176.32.0/21 IP: 94.177.72.0/21 IP: 185.46.0.0/22 IP: 188.158.0.0 -- 188.159.223.255 IP: 188.214.120.0/23 IP: 2a00:1fe0::/32 IP: 2a0e:d540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b8:df:f3:75:b1:59:60:1b:fc:5f:b2:c1:2a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7fed4e778209c3cae93d4b76d350704462c3aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:21:91:4b:f9:62:a0:57:b3:77:e0:d8:b6: 35:8b:12:d5:25:0b:f7:85:27:e0:b8:d4:b1:31:1b: 7f:b6:95:5f:57:b8:06:fb:f3:13:23:1e:c5:7d:3f: 85:db:b5:4b:a7:37:5b:98:0f:69:2f:1f:6f:db:af: 38:ae:10:d8:ba:1a:60:5b:db:44:32:27:d5:51:cb: 71:96:e5:94:e7:5d:5e:8c:18:a7:54:73:66:a8:b1: e0:e9:fb:61:01:22:fc:bb:0b:a6:64:1c:37:ef:f1: 89:00:c3:c9:01:93:b8:4a:f8:d9:db:df:3b:fa:58: e0:2d:41:d4:be:d9:20:c5:2e:cb:f3:08:3b:2c:ca: d1:ba:57:ef:a3:a1:00:75:cf:2b:9e:3c:33:56:f4: b7:5e:1b:77:6b:1d:2c:af:02:d8:ac:7a:e6:ae:52: a9:e1:64:7f:ed:c0:08:33:9f:25:d5:3e:af:d7:1c: 86:46:fb:60:82:e4:ff:7a:4a:77:ba:35:a7:f0:b9: 93:2f:f7:14:2e:1d:8b:2f:ea:e3:cb:20:ff:a7:86: c7:1d:fd:b0:21:cc:e4:ea:ba:86:06:f1:6d:4f:a0: f2:06:cf:4f:25:51:ad:b8:88:f1:a0:e0:f9:d6:ab: c4:a7:ee:20:f1:a0:c8:0a:b4:50:8c:3e:86:4d:5e: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.28.0/22 85.204.30.0/23 85.204.76.0/23 85.204.104.0/23 86.104.232.0/21 89.32.196.0/23 89.33.18.0/23 89.33.129.0/24 89.33.204.0/23 89.33.234.0/23 89.33.240.0/23 89.34.20.0/23 89.34.88.0/23 89.34.94.0/23 89.34.168.0/23 89.34.176.0/23 89.34.200.0/23 89.35.58.0/23 89.35.132.0/23 89.35.156.0/23 89.35.176.0/23 89.35.194.0/23 89.36.16.0/23 89.36.194.0/23 89.36.226.0/23 89.36.252.0/23 89.37.30.0/23 89.37.42.0/23 89.37.102.0/23 89.37.198.0/23 89.37.218.0/23 89.38.24.0/23 89.38.102.0/23 89.38.242.0/23 89.39.186.0/23 89.40.38.0/23 89.40.78.0/23 89.40.90.0/23 89.40.106.0/23 89.40.110.0/23 89.40.128.0/23 89.41.8.0-89.41.23.255 89.41.32.0/23 89.41.58.0/23 89.41.240.0/21 89.42.32.0/23 89.42.56.0/23 89.42.68.0/23 89.42.150.0/23 89.42.228.0/23 89.43.36.0/23 89.43.70.0/23 89.43.88.0-89.43.103.255 89.43.182.0/23 89.43.188.0/23 89.43.204.0/23 89.44.112.0/23 89.44.118.0/23 89.44.146.0/23 89.44.190.0/23 89.44.202.0/23 89.45.68.0/23 89.45.80.0/23 89.45.126.0/23 89.45.230.0/23 89.46.44.0/23 89.46.60.0/23 89.46.94.0/23 89.165.0.0/17 94.176.32.0/21 94.177.72.0/21 185.46.0.0/22 188.158.0.0-188.159.223.255 188.214.120.0/23 IPv6: 2a00:1fe0::/32 2a0e:d540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39501 59703 Signature Algorithm: sha256WithRSAEncryption 8e:c0:05:01:c2:de:8c:21:5f:db:d6:19:f7:7f:b3:fa:29:f6: a6:7e:3f:be:93:51:0a:81:6c:6a:70:14:dc:21:f4:40:7a:41: ae:f2:81:67:d8:59:5b:60:7f:a7:4e:37:a3:90:ca:74:8c:b7: a2:43:2d:a3:c4:fa:09:25:79:41:06:9c:38:c6:36:4e:9a:83: cc:c1:c2:a0:2c:27:85:cc:43:bb:68:ac:03:68:ba:b3:74:b3: 2f:ae:1e:0e:e4:f3:c1:84:ef:cc:48:81:15:46:38:73:91:eb: 10:d6:e0:59:6b:ee:94:dd:de:dc:4f:c9:e1:3a:a3:2d:fa:ab: 3f:6d:9a:e4:49:93:92:73:8b:bd:f0:0a:41:97:94:b2:3a:ee: 97:07:77:27:79:43:f1:ca:d3:69:21:99:a9:71:2c:f2:26:a5: bf:c6:69:e6:73:a3:ce:9d:5d:0c:dc:43:b5:a3:80:cf:fb:f6: e0:46:fc:0e:f9:83:75:2a:5a:05:5a:5f:32:69:18:1f:b1:4d: 44:18:6c:d8:39:62:aa:c6:b1:92:a0:56:d7:9d:29:53:97:4f: d6:df:aa:80:67:2a:13:c7:4e:e6:1b:6d:7a:8b:a2:ab:a8:8b: 9b:7e:36:8c:e7:56:eb:5e:c9:7f:41:f2:87:a6:63:43:e8:eb: a6:b9:ff:6a -----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgISAZt/Fbjf83WxWWAb/F+ywSqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2ZlZDRlNzc4MjA5YzNjYWU5M2Q0Yjc2ZDM1MDcwNDQ2MmMzYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/chkUv5YqBXs3fg2LY1ixLVJQv3 hSfguNSxMRt/tpVfV7gG+/MTIx7FfT+F27VLpzdbmA9pLx9v2684rhDYuhpgW9tE MifVUctxluWU511ejBinVHNmqLHg6fthASL8uwumZBw37/GJAMPJAZO4SvjZ2987 +ljgLUHUvtkgxS7L8wg7LMrRulfvo6EAdc8rnjwzVvS3Xht3ax0srwLYrHrmrlKp 4WR/7cAIM58l1T6v1xyGRvtgguT/ekp3ujWn8LmTL/cULh2LL+rjyyD/p4bHHf2w Iczk6rqGBvFtT6DyBs9PJVGtuIjxoOD51qvEp+4g8aDICrRQjD6GTV6KJQIDAQAB o4IEkjCCBI4wHQYDVR0OBBYEFOf+1Od4IJw8rpPUt201BwRGLDqrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzIyYTNj Ny02ZmU1LTQ5ZTEtOTM1ZC04YmI4MDE1MmFiMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMjJhM2M3 LTZmZTUtNDllMS05MzVkLThiYjgwMTUyYWIzNC8xLzVfN1U1M2dnbkR5dWs5UzNi VFVIQkVZc09xcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICCgYIKwYB BQUHAQcBAf8EggH5MIIB9TCCAdsEAgABMIIB0wMEAi2MHAMEAVXMHgMEAVXMTAME AVXMaAMEA1Zo6AMEAVkgxAMEAVkhEgMEAFkhgQMEAVkhzAMEAVkh6gMEAVkh8AME AVkiFAMEAVkiWAMEAVkiXgMEAVkiqAMEAVkisAMEAVkiyAMEAVkjOgMEAVkjhAME AVkjnAMEAVkjsAMEAVkjwgMEAVkkEAMEAVkkwgMEAVkk4gMEAVkk/AMEAVklHgME AVklKgMEAVklZgMEAVklxgMEAVkl2gMEAVkmGAMEAVkmZgMEAVkm8gMEAVknugME AVkoJgMEAVkoTgMEAVkoWgMEAVkoagMEAVkobgMEAVkogDAMAwQDWSkIAwQDWSkQ AwQBWSkgAwQBWSk6AwQDWSnwAwQBWSogAwQBWSo4AwQBWSpEAwQBWSqWAwQBWSrk AwQBWSskAwQBWStGMAwDBANZK1gDBANZK2ADBAFZK7YDBAFZK7wDBAFZK8wDBAFZ LHADBAFZLHYDBAFZLJIDBAFZLL4DBAFZLMoDBAFZLUQDBAFZLVADBAFZLX4DBAFZ LeYDBAFZLiwDBAFZLjwDBAFZLl4DBAdZpQADBANesCADBANesUgDBAK5LgAwCwMD AbyeAwQFvJ/AAwQBvNZ4MBQEAgACMA4DBQAqAB/gAwUDKg7VQDAfBggrBgEFBQcB CAEB/wQQMA6gDDAKAgMAmk0CAwDpNzANBgkqhkiG9w0BAQsFAAOCAQEAjsAFAcLe jCFf29YZ93+z+in2pn4/vpNRCoFsanAU3CH0QHpBrvKBZ9hZW2B/p043o5DKdIy3 okMto8T6CSV5QQacOMY2TpqDzMHCoCwnhcxDu2isA2i6s3SzL64eDuTzwYTvzEiB FUY4c5HrENbgWWvulN3e3E/J4TqjLfqrP22a5EmTknOLvfAKQZeUsjrulwd3J3lD 8crTaSGZqXEs8ialv8Zp5nOjzp1dDNxDtaOAz/v24Eb8DvmDdSpaBVpfMmkYH7FN RBhs2DliqsaxkqBW150pU5dP1t+qgGcqE8dO5htteouiq6iLm342jOdW617Jf0Hy h6ZjQ+jrprn/ag== -----END CERTIFICATE-----Generated at Mon Jan 26 07:28:37 2026 by rpki-client