This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.cer (raw, json) Hash identifier: jm23DZYpl4V06zHZPjIH0XiNE68mPG5J0v/WyRRMAn8= Subject key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758CA0FAB90EDE11FDB5F3C5E314E06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198216 IP: 91.198.217.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ca:0f:ab:90:ed:e1:1f:db:5f:3c:5e:31:4e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:ea:d9:4c:31:59:b1:1e:f4:8d:a4:e7:e3: 92:23:ea:41:18:b8:dc:ab:1b:95:58:be:1d:f6:d2: 09:cf:4c:1f:eb:6e:85:2f:31:7d:96:02:10:a0:79: 85:15:48:15:12:79:fa:4d:9d:11:1b:93:3c:b8:8b: da:82:5d:69:80:fc:54:05:53:f6:e7:90:8a:c0:e0: 96:27:35:3f:43:78:d4:c6:d2:b7:ef:36:7f:c3:67: f7:95:5e:2c:8b:3d:df:5d:94:e7:e1:00:b2:06:88: eb:9c:96:b7:c2:f1:05:aa:72:b7:06:63:16:2d:f7: 2b:81:84:e0:42:07:1b:ff:44:9f:bd:06:e9:21:9b: a2:df:8b:a8:40:ca:b7:6c:07:0b:8b:0d:d8:f9:cd: 8f:62:78:ce:f7:cc:99:95:d1:6a:50:f1:e5:2e:95: 91:00:f9:b6:71:86:fc:96:95:90:da:15:1c:de:41: 83:56:18:fa:73:37:34:23:ea:30:68:f4:37:fd:fc: 93:98:3f:5a:45:29:99:68:c6:9d:e0:9d:b0:63:89: 5e:d7:11:b6:f9:3b:98:09:dd:4b:8a:12:5f:e8:2a: e6:0c:f2:9d:e5:10:d7:a0:3d:ec:54:d7:91:52:c8: a2:74:32:39:1e:71:be:71:80:47:56:c0:90:c0:b0: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.217.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198216 Signature Algorithm: sha256WithRSAEncryption 65:14:de:3f:5b:6c:1b:d9:45:87:ef:ee:17:e1:0b:84:ab:18: fd:88:c8:c1:6a:6e:69:2e:32:90:3b:be:26:65:4f:8d:07:fc: 5c:c0:9c:a9:85:a2:d8:d8:7c:b1:74:95:85:35:92:2e:9a:23: 96:e5:ad:53:34:16:7d:60:d0:4a:50:10:43:a3:73:86:f6:ac: 38:75:a1:fb:40:32:02:cb:11:98:ae:a6:03:46:ee:9c:e0:51: 65:c5:0a:dc:01:b3:fe:41:0c:6f:d1:35:b1:07:49:b3:dd:5e: cf:51:18:5f:51:94:5d:2a:18:69:c6:09:d5:18:dc:9c:4d:b8: ab:87:86:cb:42:09:3c:8f:f5:5a:c0:81:a0:c6:83:48:0c:78: 7e:62:a5:a0:c8:8d:a3:cc:62:de:81:3e:7d:a2:e4:07:43:14: bc:09:0d:0f:8c:00:3a:22:4a:d3:5d:e7:39:bb:c5:49:9e:01: c1:b8:e3:da:fd:d2:0a:fa:bf:5b:4e:82:8a:9b:84:fc:3a:3a: a6:23:3f:d0:ae:05:d9:a5:f4:84:eb:36:0a:84:da:41:a0:ec: 0c:07:4b:37:e3:16:43:a0:52:c0:51:66:ac:94:57:c3:e5:83: 08:4a:ad:18:3c:08:50:20:b4:b6:c2:02:b2:bd:c1:c0:19:25: 3f:63:25:0a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WMoPq5Dt4R/bXzxeMU4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjJhYmE2NDEwODI5NzU4MmNjYWU4ZTdiYTg2ZjJjZmM5ZTFkNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMrq2UwxWbEe9I2k5+OSI+pBGLjc qxuVWL4d9tIJz0wf626FLzF9lgIQoHmFFUgVEnn6TZ0RG5M8uIvagl1pgPxUBVP2 55CKwOCWJzU/Q3jUxtK37zZ/w2f3lV4siz3fXZTn4QCyBojrnJa3wvEFqnK3BmMW LfcrgYTgQgcb/0SfvQbpIZui34uoQMq3bAcLiw3Y+c2PYnjO98yZldFqUPHlLpWR APm2cYb8lpWQ2hUc3kGDVhj6czc0I+owaPQ3/fyTmD9aRSmZaMad4J2wY4le1xG2 +TuYCd1LihJf6CrmDPKd5RDXoD3sVNeRUsiidDI5HnG+cYBHVsCQwLB+bQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOYqumQQgpdYLMro57qG8s/J4dWqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzY0NzBh Yy0xODA5LTRkNTktODcxNC03M2JkY2I5ZGU3NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNjQ3MGFj LTE4MDktNGQ1OS04NzE0LTczYmRjYjlkZTc1NS8xLzVpcTZaQkNDbDFnc3l1am51 b2J5ejhuaDFhby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8bZMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMGSDANBgkqhkiG9w0BAQsFAAOCAQEAZRTeP1tsG9lFh+/uF+ELhKsY/YjIwWpu aS4ykDu+JmVPjQf8XMCcqYWi2Nh8sXSVhTWSLpojluWtUzQWfWDQSlAQQ6Nzhvas OHWh+0AyAssRmK6mA0bunOBRZcUK3AGz/kEMb9E1sQdJs91ez1EYX1GUXSoYacYJ 1RjcnE24q4eGy0IJPI/1WsCBoMaDSAx4fmKloMiNo8xi3oE+faLkB0MUvAkND4wA OiJK013nObvFSZ4Bwbjj2v3SCvq/W06CipuE/Do6piM/0K4F2aX0hOs2CoTaQaDs DAdLN+MWQ6BSwFFmrJRXw+WDCEqtGDwIUCC0tsICsr3BwBklP2MlCg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:41 2026 by rpki-client