This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer (raw, json) Hash identifier: mQ5BW0OpE/mn/ryrBqydsQZf7fSzWjmagrfwAAIqcro= Subject key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A599ADB948416297DACB93744972D32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47887 IP: 81.28.112.0/20 IP: 82.212.64.0/18 IP: 185.175.248.0/22 IP: 188.123.160.0/19 IP: 2a00:18d0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:9a:db:94:84:16:29:7d:ac:b9:37:44:97:2d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f92c52f86009879c177092f7cd83418b4df8cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:9e:a8:f7:a6:2d:9a:30:08:c9:28:39:6e: 42:0b:17:14:94:30:a5:42:0d:0b:79:ab:70:2c:05: 5e:d5:fe:ae:78:5a:09:94:63:de:09:2e:1b:d2:88: e9:4b:54:5b:9c:4d:c5:f4:e2:38:dc:26:17:b5:08: 9f:4e:80:66:38:5c:f1:b5:eb:03:13:c1:c5:b2:08: ce:a6:f1:9f:9d:53:b3:87:a2:95:56:fc:8e:22:b0: 5e:33:56:49:26:9f:da:bf:fb:51:a0:6e:6f:41:1a: 3b:44:47:41:5e:ae:e4:d8:18:7c:02:d2:5e:c5:6c: a4:99:b5:cc:c1:b8:a7:fd:9b:31:48:36:27:21:04: e8:dc:9a:44:f8:5a:8d:a9:39:0f:3c:ee:91:60:0c: 8a:2b:28:d3:77:17:ea:5e:03:a6:07:33:f7:62:b8: 71:c1:08:72:f1:e3:ba:56:0d:5f:90:fb:b0:41:28: 9d:b8:e1:77:ac:39:ae:21:34:2b:3f:ec:b8:86:c8: dc:f9:15:2b:cc:d4:27:cc:70:21:c2:15:97:04:ef: 82:35:f6:59:1a:0b:6f:92:f6:26:95:a4:4e:6d:26: 62:da:e9:92:17:94:83:4d:b6:8e:3a:24:bb:c0:2a: a3:d9:18:58:6f:c3:7d:83:a4:ea:b5:a7:c3:55:74: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.112.0/20 82.212.64.0/18 185.175.248.0/22 188.123.160.0/19 IPv6: 2a00:18d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47887 Signature Algorithm: sha256WithRSAEncryption 23:89:59:95:48:39:76:28:1f:ab:20:6a:dc:a7:de:7d:45:23: 44:6e:b3:dc:83:b8:7e:65:03:82:77:75:b5:83:ce:f5:a3:2a: e7:63:64:5b:31:3c:ac:a8:64:aa:a9:82:ee:ff:a2:1f:b4:dc: f4:f7:92:eb:89:1c:63:f8:a5:c1:b1:81:e4:06:02:c5:ff:b9: d4:3c:6c:88:0d:02:58:48:70:28:95:94:73:93:bf:c5:54:54: 77:30:af:86:bc:ec:e6:c0:99:2c:fe:c6:9d:30:c9:7b:55:e1: a4:05:2d:dc:bc:e9:ab:b4:2f:b7:32:5c:bd:d3:5a:bc:38:e8: 40:17:f3:42:08:3b:22:ef:77:3f:de:14:2e:d6:df:22:e1:67: 0d:3d:7a:68:a2:e6:15:9f:81:77:d5:95:0e:46:7b:4a:ee:36: 5b:5f:2e:20:0b:92:0a:5e:80:07:0c:42:a4:98:33:c7:85:95: d2:e9:71:b9:27:9b:7c:2c:7a:1c:77:24:98:f2:5c:b9:e8:b5: d3:6d:b4:4e:55:b8:3d:c4:fe:27:d4:ae:3c:44:97:3e:42:c5: 53:dc:c3:94:24:84:95:77:44:c2:d3:9f:04:09:17:f0:cb:1a: 13:82:8f:8e:11:f4:b0:9c:72:33:4d:e1:51:2a:5b:30:e9:11: 4f:4c:a0:98 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt6WZrblIQWKX2suTdEly0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjkyYzUyZjg2MDA5ODc5YzE3NzA5MmY3Y2Q4MzQxOGI0ZGY4Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusWeqPemLZowCMkoOW5CCxcUlDCl Qg0LeatwLAVe1f6ueFoJlGPeCS4b0ojpS1RbnE3F9OI43CYXtQifToBmOFzxtesD E8HFsgjOpvGfnVOzh6KVVvyOIrBeM1ZJJp/av/tRoG5vQRo7REdBXq7k2Bh8AtJe xWykmbXMwbin/ZsxSDYnIQTo3JpE+FqNqTkPPO6RYAyKKyjTdxfqXgOmBzP3Yrhx wQhy8eO6Vg1fkPuwQSiduOF3rDmuITQrP+y4hsjc+RUrzNQnzHAhwhWXBO+CNfZZ GgtvkvYmlaRObSZi2umSF5SDTbaOOiS7wCqj2RhYb8N9g6TqtafDVXSeqQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFA+SxS+GAJh5wXcJL3zYNBi034yrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2U4YzI4 Ny1mMDQ5LTQ1OTUtODZlYi0wYmUyMDlmZmJhZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZThjMjg3 LWYwNDktNDU5NS04NmViLTBiZTIwOWZmYmFlYy8xL0Q1TEZMNFlBbUhuQmR3a3Zm TmcwR0xUZmpLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEURxwAwQGUtRAAwQCua/4AwQFvHugMA0EAgAC MAcDBQAqABjQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC7DzANBgkqhkiG9w0B AQsFAAOCAQEAI4lZlUg5digfqyBq3KfefUUjRG6z3IO4fmUDgnd1tYPO9aMq52Nk WzE8rKhkqqmC7v+iH7Tc9PeS64kcY/ilwbGB5AYCxf+51DxsiA0CWEhwKJWUc5O/ xVRUdzCvhrzs5sCZLP7GnTDJe1XhpAUt3Lzpq7QvtzJcvdNavDjoQBfzQgg7Iu93 P94ULtbfIuFnDT16aKLmFZ+Bd9WVDkZ7Su42W18uIAuSCl6ABwxCpJgzx4WV0ulx uSebfCx6HHckmPJcuei10220TlW4PcT+J9SuPESXPkLFU9zDlCSElXdEwtOfBAkX 8MsaE4KPjhH0sJxyM03hUSpbMOkRT0ygmA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:27:43 2026 by rpki-client