This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer File: t5IgqAXkN4VH5Duscxzob-ARRcc.cer (raw, json) Hash identifier: mKl4sZGABKK6ShV6gs2VRtVWhi+5C2ECgiJCA2V3e1Q= Subject key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B368A5D7DAF3B0EA310E4875A0B46B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12978 IP: 31.200.0.0/17 IP: 62.29.0.0/17 IP: 83.66.0.0/16 IP: 94.120.0.0/14 IP: 185.92.212.0/22 IP: 193.164.9.0/24 IP: 213.243.0.0/18 IP: 2a00:6280::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8a:5d:7d:af:3b:0e:a3:10:e4:87:5a:0b:46:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b79220a805e4378547e43bac731ce86fe01145c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:56:0c:ac:e8:f7:a9:3c:89:82:7d:a0:ec: b0:4e:ef:aa:d9:4d:9d:95:35:bb:07:bb:39:c2:a5: e7:e1:58:ee:0c:cf:52:b5:22:71:97:8f:3a:9b:0d: cc:96:e6:3b:3a:90:6e:d6:12:6c:f8:04:fd:7d:8f: d8:17:76:c6:8a:dc:61:8c:39:91:f1:01:11:bd:bd: 90:42:cd:8d:77:8c:b3:91:0c:06:45:85:5d:3a:d0: af:45:e7:22:40:41:bf:c9:32:4b:7c:17:25:8e:14: a9:a2:a9:b2:dd:ac:eb:72:c8:26:6b:42:41:b1:0a: df:70:f8:5c:7d:ab:34:4c:3d:80:8b:4e:6c:06:de: d9:78:d9:aa:22:60:2c:c2:8f:8e:93:23:c2:54:50: 88:67:f6:3b:28:1f:91:57:b4:37:35:33:21:81:09: ed:90:54:1e:45:b2:03:e7:f0:14:49:0f:bb:ba:33: bc:4c:e1:24:60:95:67:1b:8f:00:33:e9:f5:ce:2a: 81:0d:23:9a:0d:c8:55:e2:30:aa:b3:56:fd:16:a5: bb:48:ee:d6:f2:ae:d0:a8:6f:c9:a6:1f:38:65:0e: 70:c9:9c:ad:5c:1f:7b:f4:f4:ab:44:04:58:5b:c3: 75:7a:ef:30:cc:f1:b5:ba:9e:e5:ee:0d:1f:76:2d: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.200.0.0/17 62.29.0.0/17 83.66.0.0/16 94.120.0.0/14 185.92.212.0/22 193.164.9.0/24 213.243.0.0/18 IPv6: 2a00:6280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12978 Signature Algorithm: sha256WithRSAEncryption 65:01:2a:aa:24:bd:e4:da:4a:ec:d0:b8:65:ca:71:d7:0e:1d: e5:0e:42:e8:06:c6:19:e4:dc:37:57:e4:98:bd:af:ef:55:85: ac:e7:d4:de:76:95:9d:d9:aa:0b:d1:6f:6d:84:3b:1a:a7:e0: cb:7f:65:57:31:76:ce:14:78:b8:b3:5c:69:e4:20:3e:fd:ac: 8c:15:b0:75:ab:f5:7d:80:23:4b:0a:92:8d:2a:2a:79:29:3e: 70:dc:bb:a0:08:c4:e5:a5:1e:22:77:28:62:03:1a:f9:b6:c0: bc:e6:23:57:77:43:26:27:cc:9a:75:86:a6:b9:bc:ee:34:83: fa:0b:af:c6:ac:71:f3:63:08:4f:3c:73:b0:d4:f9:de:ef:e0: 4d:46:a7:d4:e4:99:e7:2d:b5:ad:b5:8e:4a:8d:5e:ad:ad:1c: b2:28:53:33:06:a4:a5:f8:c2:a5:10:7e:51:f8:39:97:d9:c4: 10:fb:4e:f0:42:10:7e:44:82:b0:5d:6f:e3:ab:04:23:4c:55: 83:b9:7d:b3:b9:ea:9c:17:84:7f:8a:61:9f:7c:08:69:88:b8: ca:14:fe:af:05:52:10:6c:8c:30:ed:b8:a3:8e:f2:6d:ed:93: b5:db:11:a2:20:dd:1a:80:ee:6a:4b:ff:a7:fa:1e:6e:ea:65: 9c:ad:45:54 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt7Nopdfa87DqMQ5IdaC0ayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzkyMjBhODA1ZTQzNzg1NDdlNDNiYWM3MzFjZTg2ZmUwMTE0NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8dWDKzo96k8iYJ9oOywTu+q2U2d lTW7B7s5wqXn4VjuDM9StSJxl486mw3MluY7OpBu1hJs+AT9fY/YF3bGitxhjDmR 8QERvb2QQs2Nd4yzkQwGRYVdOtCvReciQEG/yTJLfBcljhSpoqmy3azrcsgma0JB sQrfcPhcfas0TD2Ai05sBt7ZeNmqImAswo+OkyPCVFCIZ/Y7KB+RV7Q3NTMhgQnt kFQeRbID5/AUSQ+7ujO8TOEkYJVnG48AM+n1ziqBDSOaDchV4jCqs1b9FqW7SO7W 8q7QqG/Jph84ZQ5wyZytXB979PSrRARYW8N1eu8wzPG1up7l7g0fdi0nYQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2U3Zjg4 NC1jZjdiLTQ5MWMtOWVkOS00MjNhZmMyYjY4YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZTdmODg0 LWNmN2ItNDkxYy05ZWQ5LTQyM2FmYzJiNjhiOC8xL3Q1SWdxQVhrTjRWSDVEdXNj eHpvYi1BUlJjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF BwEHAQH/BEEwPzAuBAIAATAoAwQHH8gAAwQHPh0AAwMAU0IDAwJeeAMEArlc1AME AMGkCQMEBtXzADANBAIAAjAHAwUAKgBigDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIysjANBgkqhkiG9w0BAQsFAAOCAQEAZQEqqiS95NpK7NC4Zcpx1w4d5Q5C6AbG GeTcN1fkmL2v71WFrOfU3naVndmqC9FvbYQ7Gqfgy39lVzF2zhR4uLNcaeQgPv2s jBWwdav1fYAjSwqSjSoqeSk+cNy7oAjE5aUeIncoYgMa+bbAvOYjV3dDJifMmnWG prm87jSD+guvxqxx82MITzxzsNT53u/gTUan1OSZ5y21rbWOSo1era0csihTMwak pfjCpRB+Ufg5l9nEEPtO8EIQfkSCsF1v46sEI0xVg7l9s7nqnBeEf4phn3wIaYi4 yhT+rwVSEGyMMO24o47ybe2TtdsRoiDdGoDuakv/p/oebuplnK1FVA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:56 2026 by rpki-client