This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer File: 5wQefn0YTV261xQp42W58Kx2ylI.cer (raw, json) Hash identifier: DRefFneaUymivCBEx4/Dnzj5yfNOSlM23CdW1CRYEuk= Subject key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBCADA0E0627109E842913771D91C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204269 IP: 167.150.223.0/24 IP: 2001:678:1118::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ca:da:0e:06:27:10:9e:84:29:13:77:1d:91:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:21:34:f0:df:78:e5:58:eb:3e:7f:a6:3d: 27:a7:ad:74:d6:54:b9:14:b2:6e:ec:67:95:0d:a0: 1c:0c:93:94:b9:dc:b7:da:cd:f5:9e:e7:89:65:aa: 3f:1e:37:26:6b:ff:b4:19:9b:ac:aa:52:25:26:d0: 75:28:36:1b:02:2c:60:f4:17:41:ba:48:24:7c:b9: c3:02:9d:ae:07:67:79:69:0e:28:22:21:ad:0f:35: b0:34:0c:f9:4f:a1:d8:13:92:c6:1a:ac:4e:67:45: 60:b0:2b:91:77:2b:a1:c5:3d:e9:63:51:e3:de:ba: 6a:9e:b2:7f:1d:9d:10:0f:c3:d8:4a:cf:4e:50:47: 4c:4a:73:75:47:08:00:46:a2:2c:0e:ad:81:e2:52: b1:db:ad:f1:39:56:42:f1:e5:59:b5:9b:6d:f2:42: 99:14:43:f1:ae:6e:dc:c2:de:3c:47:b3:c2:00:ec: 1d:84:6d:d5:a7:92:27:40:fb:8c:5b:e4:93:7a:2e: 9c:8a:df:fe:a0:9d:3c:0d:68:a8:b0:52:38:94:ed: 4f:54:2c:fc:12:2b:ce:00:19:1f:62:1b:67:21:2a: a8:9a:d0:3e:a2:08:e3:4c:3d:ea:36:6d:0a:ba:87: cb:33:bb:19:35:29:84:7a:b6:aa:ba:6a:da:af:f3: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.223.0/24 IPv6: 2001:678:1118::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204269 Signature Algorithm: sha256WithRSAEncryption 0c:ad:35:98:94:8d:1e:c6:7d:57:54:eb:00:3f:4a:e8:09:e0: a2:89:eb:cd:6a:aa:1a:0d:25:6a:b9:39:36:ba:a2:1d:b3:bb: bd:07:b1:a3:9e:6a:f3:d8:4a:45:fd:87:a5:2b:04:15:b6:7d: 34:56:1b:31:63:2c:ad:91:37:5d:4c:d3:0d:ef:b5:45:85:07: b9:23:07:28:5a:4b:0e:da:58:75:00:f6:99:c1:a2:2e:3e:33: 05:34:e5:e0:fc:e8:12:d6:8e:46:33:33:e8:41:6d:f8:4c:a7: 06:f4:06:c7:de:44:a6:00:c2:6b:b3:a2:bf:c7:69:d2:ef:c3: 42:ab:66:39:c4:15:78:f1:b6:a2:16:db:e4:e3:3c:fd:cf:58: 9b:d9:90:d3:2c:6d:e6:3b:d2:42:bb:9f:4a:e1:6f:c8:b5:bb: 01:ff:5c:52:28:e0:cb:c6:b5:49:8e:a8:9d:5d:0b:9e:fe:1a: c8:55:bc:1b:81:63:bf:ab:dd:ae:c1:e4:34:b6:d9:91:37:77: f6:e9:4c:8a:ae:83:71:c7:ce:07:bc:e0:38:e2:a1:0b:5d:77: 0b:15:09:61:e7:7c:a4:7a:ab:48:1b:3a:b7:36:d9:f0:12:0f: 8f:c6:7d:9c:67:1c:17:e8:36:39:66:09:04:3f:74:95:b0:77: 51:3b:81:c9 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt568raDgYnEJ6EKRN3HZHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzA0MWU3ZTdkMTg0ZDVkYmFkNzE0MjllMzY1YjlmMGFjNzZjYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0hNPDfeOVY6z5/pj0np6101lS5 FLJu7GeVDaAcDJOUudy32s31nueJZao/Hjcma/+0GZusqlIlJtB1KDYbAixg9BdB ukgkfLnDAp2uB2d5aQ4oIiGtDzWwNAz5T6HYE5LGGqxOZ0VgsCuRdyuhxT3pY1Hj 3rpqnrJ/HZ0QD8PYSs9OUEdMSnN1RwgARqIsDq2B4lKx263xOVZC8eVZtZtt8kKZ FEPxrm7cwt48R7PCAOwdhG3Vp5InQPuMW+STei6cit/+oJ08DWiosFI4lO1PVCz8 EivOABkfYhtnISqomtA+ogjjTD3qNm0KuofLM7sZNSmEeraqumrar/NM0QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFOcEHn59GE1dutcUKeNlufCsdspSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzUzMmY0 MS0yZTNiLTQ3ZWItYmVkNS0wZTFjNGFkMDM5NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNTMyZjQx LTJlM2ItNDdlYi1iZWQ1LTBlMWM0YWQwMzk1Ni8xLzV3UWVmbjBZVFYyNjF4UXA0 Mlc1OEt4MnlsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAp5bfMA8EAgACMAkDBwAgAQZ4ERgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAx3tMA0GCSqGSIb3DQEBCwUAA4IBAQAMrTWYlI0e xn1XVOsAP0roCeCiievNaqoaDSVquTk2uqIds7u9B7Gjnmrz2EpF/YelKwQVtn00 VhsxYyytkTddTNMN77VFhQe5IwcoWksO2lh1APaZwaIuPjMFNOXg/OgS1o5GMzPo QW34TKcG9AbH3kSmAMJrs6K/x2nS78NCq2Y5xBV48baiFtvk4zz9z1ib2ZDTLG3m O9JCu59K4W/ItbsB/1xSKODLxrVJjqidXQue/hrIVbwbgWO/q92uweQ0ttmRN3f2 6UyKroNxx84HvOA44qELXXcLFQlh53ykeqtIGzq3NtnwEg+Pxn2cZxwX6DY5ZgkE P3SVsHdRO4HJ -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:23 2026 by rpki-client