This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer File: 5b15I6_brofQeyMI3TidnPCC7W0.cer (raw, json) Hash identifier: N/GRo/2eCIg9UCv1yg4IVwzj+WcYKBQehbHRWWWguCc= Subject key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AF0F103743023F74CB441190186BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25052 AS: 44709 IP: 5.100.248.0/21 IP: 5.180.180.0/22 IP: 31.133.100.0/22 IP: 45.83.40.0/22 IP: 45.91.168.0/22 IP: 45.93.92.0/22 IP: 45.248.36.0/23 IP: 63.250.56.0/21 IP: 79.108.160.0/21 IP: 81.28.4.0/22 IP: 83.229.68.0 -- 83.229.75.255 IP: 83.229.80.0/21 IP: 91.202.168.0/22 IP: 91.223.106.0/24 IP: 91.223.169.0/24 IP: 91.223.236.0/24 IP: 91.226.72.0/24 IP: 91.226.76.0/24 IP: 91.228.126.0/23 IP: 93.93.205.0/24 IP: 103.13.208.0/22 IP: 103.45.244.0/22 IP: 103.240.144.0/22 IP: 103.241.64.0/22 IP: 109.207.76.0/22 IP: 185.28.152.0/22 IP: 185.47.172.0/22 IP: 185.53.208.0/22 IP: 185.56.72.0/22 IP: 185.127.16.0/22 IP: 185.139.228.0/24 IP: 185.139.230.0/23 IP: 185.144.156.0/22 IP: 185.159.72.0/22 IP: 185.162.124.0/22 IP: 185.181.8.0/22 IP: 185.220.204.0/22 IP: 185.227.108.0/22 IP: 185.237.12.0/22 IP: 185.237.96.0/22 IP: 185.241.4.0/22 IP: 185.247.116.0/22 IP: 185.253.72.0/23 IP: 185.253.75.0/24 IP: 188.191.147.0/24 IP: 193.168.172.0/22 IP: 193.218.207.128/25 IP: 194.36.88.0/22 IP: 194.37.80.0/22 IP: 194.146.24.0/23 IP: 194.146.38.0/23 IP: 195.28.180.0/23 IP: 195.238.120.0/22 IP: 212.80.204.0/22 IP: 212.86.104.0/23 IP: 2a00:9f60::/32 IP: 2a01:92e0::/32 IP: 2a02:40a0::/32 IP: 2a02:41e0::/32 IP: 2a04:d980::/29 IP: 2a06:c5c0::/29 IP: 2a07:3b80::/29 IP: 2a0a:b880::/29 IP: 2a0c:a600::/29 IP: 2a0c:c040::/29 IP: 2a0d:1240::/29 IP: 2a0d:be80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f0:f1:03:74:30:23:f7:4c:b4:41:19:01:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c4:46:11:ae:b5:ba:22:01:3b:c6:93:9e:49: dd:53:d6:c1:eb:20:3f:3e:a8:3e:bd:4f:cb:a6:6e: 6b:0c:a4:30:58:31:71:03:99:ff:e1:60:53:7c:b1: 29:bc:82:dc:ba:ef:93:00:2f:c7:d9:4e:ed:7c:9d: 3b:71:7f:00:d3:d4:ba:fc:fc:3c:d8:85:38:5e:e7: e7:e7:9a:90:26:6e:8c:46:66:f4:4d:f0:e9:ce:64: 75:a2:50:bb:86:6a:7d:b1:1b:9e:48:ef:73:8a:21: 78:45:b0:ce:7e:c8:fe:a9:26:a7:23:3c:aa:42:76: 63:ff:ce:75:eb:35:53:b3:73:4f:eb:13:e9:db:e8: 28:35:50:9d:b2:c6:95:22:c1:a1:69:1c:55:cb:0e: ba:1d:30:92:09:45:f8:9a:3c:ab:94:3c:ef:9f:ef: f8:fb:5e:c5:2d:eb:3c:f1:5f:a9:ab:54:ea:7a:84: dc:7b:0c:18:ab:3a:dd:53:3d:bb:ea:f9:aa:96:fb: a1:5e:f7:05:25:85:f0:44:55:1d:32:b2:cd:d9:a8: 9f:76:22:30:9b:cc:f4:fa:6d:ea:02:1a:3e:c1:db: 40:24:0c:5c:07:b0:fc:cc:ba:87:37:18:2b:57:74: 17:ca:8c:e7:a0:c3:13:bd:c6:c1:0d:08:21:34:0d: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.248.0/21 5.180.180.0/22 31.133.100.0/22 45.83.40.0/22 45.91.168.0/22 45.93.92.0/22 45.248.36.0/23 63.250.56.0/21 79.108.160.0/21 81.28.4.0/22 83.229.68.0-83.229.75.255 83.229.80.0/21 91.202.168.0/22 91.223.106.0/24 91.223.169.0/24 91.223.236.0/24 91.226.72.0/24 91.226.76.0/24 91.228.126.0/23 93.93.205.0/24 103.13.208.0/22 103.45.244.0/22 103.240.144.0/22 103.241.64.0/22 109.207.76.0/22 185.28.152.0/22 185.47.172.0/22 185.53.208.0/22 185.56.72.0/22 185.127.16.0/22 185.139.228.0/24 185.139.230.0/23 185.144.156.0/22 185.159.72.0/22 185.162.124.0/22 185.181.8.0/22 185.220.204.0/22 185.227.108.0/22 185.237.12.0/22 185.237.96.0/22 185.241.4.0/22 185.247.116.0/22 185.253.72.0/23 185.253.75.0/24 188.191.147.0/24 193.168.172.0/22 193.218.207.128/25 194.36.88.0/22 194.37.80.0/22 194.146.24.0/23 194.146.38.0/23 195.28.180.0/23 195.238.120.0/22 212.80.204.0/22 212.86.104.0/23 IPv6: 2a00:9f60::/32 2a01:92e0::/32 2a02:40a0::/32 2a02:41e0::/32 2a04:d980::/29 2a06:c5c0::/29 2a07:3b80::/29 2a0a:b880::/29 2a0c:a600::/29 2a0c:c040::/29 2a0d:1240::/29 2a0d:be80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25052 44709 Signature Algorithm: sha256WithRSAEncryption a5:02:50:13:5c:21:34:a5:65:d4:cb:a3:53:19:c4:45:d7:d6: d6:bb:53:a3:49:b5:92:f8:dd:0c:5f:31:c2:00:8d:dc:81:13: 77:15:19:7b:d7:d4:8e:63:31:a7:f8:16:9b:31:f3:fa:12:f6: 79:10:87:c1:92:e8:90:8f:85:d7:d7:86:8f:76:53:c7:57:6e: 32:1c:3a:d1:c1:d1:10:31:87:5c:8f:29:dc:ca:ff:b8:3b:ec: 8e:af:96:e2:97:fb:08:13:78:19:de:f6:31:96:1a:a3:f6:55: 7c:a5:ef:27:0b:bd:0c:c4:38:d5:52:ce:d1:1d:11:2a:f9:66: 95:6f:ca:44:98:49:0d:bd:62:9f:2f:6f:5d:00:ff:51:64:69: 0e:4e:be:58:2d:63:3e:aa:83:a6:8b:da:48:23:ce:a8:aa:05: 74:ac:9c:26:34:cb:7f:81:81:8b:be:5a:91:6e:4d:49:5a:5f: 84:ed:4b:ad:be:54:56:f1:9e:25:75:33:10:ec:dc:bb:ee:69: a2:7e:03:a0:cc:78:bb:09:19:1e:c9:54:9a:6c:ec:49:a0:87: d4:05:06:8e:29:f5:27:f3:14:f8:ab:18:6b:ad:7f:da:07:c5: 35:a0:88:48:c3:8c:7c:f1:01:4f:ea:4a:f8:5c:a2:8a:7c:e7: f0:c4:6b:88 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgISAZt9WvDxA3QwI/dMtEEZAYa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWJkNzkyM2FmZGJhZTg3ZDA3YjIzMDhkZDM4OWQ5Y2YwODJlZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sRGEa61uiIBO8aTnkndU9bB6yA/ Pqg+vU/Lpm5rDKQwWDFxA5n/4WBTfLEpvILcuu+TAC/H2U7tfJ07cX8A09S6/Pw8 2IU4Xufn55qQJm6MRmb0TfDpzmR1olC7hmp9sRueSO9ziiF4RbDOfsj+qSanIzyq QnZj/8516zVTs3NP6xPp2+goNVCdssaVIsGhaRxVyw66HTCSCUX4mjyrlDzvn+/4 +17FLes88V+pq1TqeoTcewwYqzrdUz276vmqlvuhXvcFJYXwRFUdMrLN2aifdiIw m8z0+m3qAho+wdtAJAxcB7D8zLqHNxgrV3QXyoznoMMTvcbBDQghNA28HwIDAQAB o4IEVzCCBFMwHQYDVR0OBBYEFOW9eSOv266H0HsjCN04nZzwgu1tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzI2OTIy OS0yMGViLTRmMWMtYTEzZS0yNmQxZTU0NTc4ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjY5MjI5 LTIwZWItNGYxYy1hMTNlLTI2ZDFlNTQ1NzhmMS8xLzViMTVJNl9icm9mUWV5TUkz VGlkblBDQzdXMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB0AYIKwYB BQUHAQcBAf8EggG/MIIBuzCCAVsEAgABMIIBUwMEAwVk+AMEAgW0tAMEAh+FZAME Ai1TKAMEAi1bqAMEAi1dXAMEAS34JAMEAz/6OAMEA09soAMEAlEcBDAMAwQCU+VE AwQCU+VIAwQDU+VQAwQCW8qoAwQAW99qAwQAW9+pAwQAW9/sAwQAW+JIAwQAW+JM AwQBW+R+AwQAXV3NAwQCZw3QAwQCZy30AwQCZ/CQAwQCZ/FAAwQCbc9MAwQCuRyY AwQCuS+sAwQCuTXQAwQCuThIAwQCuX8QAwQAuYvkAwQBuYvmAwQCuZCcAwQCuZ9I AwQCuaJ8AwQCubUIAwQCudzMAwQCueNsAwQCue0MAwQCue1gAwQCufEEAwQCufd0 AwQBuf1IAwQAuf1LAwQAvL+TAwQCwaisAwUHwdrPgAMEAsIkWAMEAsIlUAMEAcKS GAMEAcKSJgMEAcMctAMEAsPueAMEAtRQzAMEAdRWaDBaBAIAAjBUAwUAKgCfYAMF ACoBkuADBQAqAkCgAwUAKgJB4AMFAyoE2YADBQMqBsXAAwUDKgc7gAMFAyoKuIAD BQMqDKYAAwUDKgzAQAMFAyoNEkADBQMqDb6AMB4GCCsGAQUFBwEIAQH/BA8wDaAL MAkCAmHcAgMArqUwDQYJKoZIhvcNAQELBQADggEBAKUCUBNcITSlZdTLo1MZxEXX 1ta7U6NJtZL43QxfMcIAjdyBE3cVGXvX1I5jMaf4Fpsx8/oS9nkQh8GS6JCPhdfX ho92U8dXbjIcOtHB0RAxh1yPKdzK/7g77I6vluKX+wgTeBne9jGWGqP2VXyl7ycL vQzEONVSztEdESr5ZpVvykSYSQ29Yp8vb10A/1FkaQ5OvlgtYz6qg6aL2kgjzqiq BXSsnCY0y3+BgYu+WpFuTUlaX4TtS62+VFbxniV1MxDs3LvuaaJ+A6DMeLsJGR7J VJps7Emgh9QFBo4p9SfzFPirGGutf9oHxTWgiEjDjHzxAU/qSvhcoop85/DEa4g= -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:52 2026 by rpki-client