This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.cer (raw, json) Hash identifier: VONC+wwxMzU99kYz39skO2h0wphykkvLbW7ABMfpB4Q= Subject key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C135E93DCB3CF8A2F54AE7AE4E88719 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210423 IP: 79.108.228.0/22 IP: 81.172.72.0/21 IP: 93.157.107.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:93:dc:b3:cf:8a:2f:54:ae:7a:e4:e8:87:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:44:a1:74:ad:f1:d8:c7:47:a6:ac:83:21: c9:af:35:4d:81:99:07:c4:6e:1e:4b:3e:6a:fc:d4: 73:db:38:32:75:3b:2e:8a:fb:02:da:60:5b:ce:01: 9f:79:fe:3e:d9:f1:ae:65:8b:d2:6d:e9:67:9e:d3: bd:a3:88:1d:38:4a:c6:f3:73:38:7c:38:c4:e2:40: a8:e6:59:e8:86:28:4b:20:3f:9e:d6:9b:b4:5b:8b: c8:6d:cd:f5:c7:44:8b:bb:cc:74:38:34:bc:c6:79: 0e:64:5a:70:8c:53:37:3d:0b:15:28:3e:18:e7:67: fd:9e:7f:61:80:72:e9:c9:ac:8a:77:89:b2:79:e2: 8f:a6:12:ec:57:8a:de:8e:c5:69:87:79:3d:00:39: 6d:0d:60:8d:be:b3:c7:f0:42:0b:39:9c:13:ee:20: ca:7f:3e:27:2d:a4:29:ef:8c:c8:e4:09:40:d2:b5: 14:3c:49:50:68:68:9c:ab:15:e0:84:cf:5b:31:3b: 01:f1:fe:6b:b4:68:19:bd:b0:8c:fd:a6:99:eb:ed: 1d:f0:35:5e:45:45:cd:d3:4d:30:7c:cf:4f:a1:40: 10:33:a7:83:7e:b6:e2:82:c2:8a:9e:63:62:59:b7: 27:69:87:18:e8:b0:20:1c:fd:7e:4c:a4:3d:31:c5: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.108.228.0/22 81.172.72.0/21 93.157.107.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210423 Signature Algorithm: sha256WithRSAEncryption af:ba:46:f6:e6:d4:9f:2c:1c:78:1b:f9:6c:1c:ad:1d:48:e3: ad:92:9a:d6:e3:5a:0c:c5:b7:5c:37:1c:52:83:10:e1:0e:71: 29:69:35:d1:fd:f9:ef:be:b3:39:ed:b4:79:03:7e:d7:05:06: 20:79:1e:22:06:42:ee:92:16:fb:7c:68:aa:58:ca:0d:2b:03: bb:1a:9c:9b:e3:c1:ef:08:39:ea:fe:de:13:c7:14:fc:d2:ff: 3f:24:54:46:2f:6a:9c:d3:8a:38:2a:a1:0d:49:03:37:27:a6: 3e:dd:12:e0:f3:91:73:f9:fd:f6:73:ce:2e:ca:41:da:14:3e: f7:1c:1b:f1:af:9e:e9:d7:3d:37:77:19:21:ab:5f:82:53:fe: ef:1c:36:24:9f:a1:fc:a6:7a:7e:57:12:a8:64:97:88:a6:ff: a8:8d:1f:9b:bf:9c:16:0a:cc:e8:ca:cf:ef:ad:d5:b1:ba:27: 39:05:f8:65:d8:50:81:f6:86:d6:5d:5f:79:85:8b:20:ea:34: 1d:65:12:e4:09:29:2c:70:3f:82:10:eb:f1:aa:45:c5:bb:9d: 92:a6:7c:97:a9:1c:58:97:91:20:ce:73:b8:05:a9:c0:8d:ee: 02:05:f0:14:54:88:d0:9c:3c:ec:0e:35:c3:fb:41:00:21:6c: c6:f9:e4:b8 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt8E16T3LPPii9Urnrk6IcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2YyNjEzNDgzMGVlMjBkYzIyOTg2ZGM4YTczNjZkMDk3MmIyOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+9EoXSt8djHR6asgyHJrzVNgZkH xG4eSz5q/NRz2zgydTsuivsC2mBbzgGfef4+2fGuZYvSbelnntO9o4gdOErG83M4 fDjE4kCo5lnohihLID+e1pu0W4vIbc31x0SLu8x0ODS8xnkOZFpwjFM3PQsVKD4Y 52f9nn9hgHLpyayKd4myeeKPphLsV4rejsVph3k9ADltDWCNvrPH8EILOZwT7iDK fz4nLaQp74zI5AlA0rUUPElQaGicqxXghM9bMTsB8f5rtGgZvbCM/aaZ6+0d8DVe RUXN000wfM9PoUAQM6eDfrbigsKKnmNiWbcnaYcY6LAgHP1+TKQ9McX+UQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFOfyYTSDDuINwimG3IpzZtCXKykwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2ZlNmJh Yy0xMGIzLTQyNTYtODRiMC1hNzYyOTJlMjA0NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZmU2YmFj LTEwYjMtNDI1Ni04NGIwLWE3NjI5MmUyMDQ1OC8xLzVfSmhOSU1PNGczQ0tZYmNp bk5tMEpjcktUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCT2zkAwQDUaxIAwQAXZ1rMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwM19zANBgkqhkiG9w0BAQsFAAOCAQEAr7pG9ubUnywceBv5 bBytHUjjrZKa1uNaDMW3XDccUoMQ4Q5xKWk10f35776zOe20eQN+1wUGIHkeIgZC 7pIW+3xoqljKDSsDuxqcm+PB7wg56v7eE8cU/NL/PyRURi9qnNOKOCqhDUkDNyem Pt0S4PORc/n99nPOLspB2hQ+9xwb8a+e6dc9N3cZIatfglP+7xw2JJ+h/KZ6flcS qGSXiKb/qI0fm7+cFgrM6MrP763VsbonOQX4ZdhQgfaG1l1feYWLIOo0HWUS5Akp LHA/ghDr8apFxbudkqZ8l6kcWJeRIM5zuAWpwI3uAgXwFFSI0Jw87A41w/tBACFs xvnkuA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:25 2026 by rpki-client