This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer File: 1-Pc8XA86EGqLp9_z41yBbRB43HE.cer (raw, json) Hash identifier: aLw83ldY+tAuGDZ0/GpwumFzIUvxb8I3YYRGQVE4tDU= Subject key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0EF3F4E204938E856C429D78E97A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198605 IP: 5.45.56.0/21 IP: 31.14.72.0/22 IP: 37.156.184.0/22 IP: 69.94.64.0/20 IP: 77.234.40.0/21 IP: 91.213.143.0/24 IP: 185.51.228.0/22 IP: 185.167.64.0/21 IP: 185.189.92.0/22 IP: 195.74.76.0/24 IP: 2001:67c:284::/48 IP: 2a00:d040::/32 IP: 2a0b:e180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0e:f3:f4:e2:04:93:8e:85:6c:42:9d:78:e9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:62:70:ae:57:e5:05:86:fd:50:ef:3b:dd: a0:1f:30:98:9d:73:c6:8f:78:aa:20:f3:74:9e:25: ca:ba:46:d2:7d:e9:49:60:5f:36:2f:4a:99:17:3b: 2a:49:d4:4c:2e:62:f9:ef:10:cd:83:47:25:00:5b: 3b:dd:4d:73:2c:24:1d:19:51:0a:4f:7c:5e:4f:ef: 96:a7:24:62:57:03:81:d0:ce:67:b1:f3:e8:8c:54: aa:86:89:c0:99:99:02:09:1c:85:68:c8:b7:59:5c: d6:66:d7:8d:81:03:f8:f8:e2:0c:0b:47:a1:ec:a6: 0b:fe:f4:94:b9:8d:14:01:dd:3c:99:6b:a6:38:d2: ad:b7:53:50:40:31:b2:d3:98:98:24:21:f1:1e:d3: 0d:ac:85:b4:a7:57:56:30:33:22:d1:01:32:d2:01: 2e:e2:56:9b:72:1c:43:95:e5:bd:60:b5:17:c2:0c: 1c:cf:a9:e6:d0:77:1c:b6:31:e6:c0:f5:13:28:dd: 11:af:fc:fa:d1:60:47:df:fa:98:f4:ca:6d:61:47: 8a:5f:d2:8e:65:8e:2b:37:96:45:94:eb:3b:7e:bc: 37:49:1d:01:0b:6b:d5:39:c1:f1:54:07:dc:20:14: 63:0f:dc:7f:1e:a7:2f:45:49:a2:ac:99:0f:40:a4: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.56.0/21 31.14.72.0/22 37.156.184.0/22 69.94.64.0/20 77.234.40.0/21 91.213.143.0/24 185.51.228.0/22 185.167.64.0/21 185.189.92.0/22 195.74.76.0/24 IPv6: 2001:67c:284::/48 2a00:d040::/32 2a0b:e180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198605 Signature Algorithm: sha256WithRSAEncryption 0d:6b:60:08:e4:92:08:a2:92:7b:e1:2b:1f:61:c1:5f:14:0c: 06:c7:39:4b:ee:48:19:98:55:b7:66:ff:c4:bf:47:6b:3d:7d: 58:0d:ee:02:b6:cb:ea:fc:88:d8:27:30:a3:a8:65:11:cd:fe: a4:42:cf:22:93:34:70:a0:32:68:2c:c0:0b:c2:1b:11:b8:a1: 0c:df:d9:df:e3:70:08:ff:1a:c0:31:20:32:f1:a1:64:f4:1c: 20:fe:d8:2d:17:8c:44:f1:06:cc:0e:c8:0e:d6:0c:cf:27:d1: b1:82:b2:b6:57:78:14:59:65:ec:86:4a:28:30:35:1e:29:7a: a4:51:e9:15:9f:0e:82:ea:e5:15:80:92:6b:7c:62:70:6a:cf: b1:78:54:c0:11:81:1e:c5:47:f3:40:b9:85:e2:f0:be:89:4a: d3:de:09:66:bf:b1:c2:f8:ce:d2:8d:12:18:fc:fa:e9:cd:3d: c3:f4:3d:6b:ca:af:35:2d:65:1f:92:24:a1:5d:ec:a5:42:b5: 96:d5:8c:cd:1d:1c:2e:7b:7f:c6:c7:ab:b5:cd:5c:dd:72:af: 1c:64:5c:59:20:75:00:99:ac:d0:5f:29:d8:90:a9:c6:90:c3: 34:a2:a7:bc:b8:63:2d:47:c5:17:85:65:b4:21:55:29:d4:3d: c3:10:b3:84 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt87g7z9OIEk46FbEKdeOl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGY3M2M1YzBmM2ExMDZhOGJhN2RmZjNlMzVjODE2ZDEwNzhkYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimBicK5X5QWG/VDvO92gHzCYnXPG j3iqIPN0niXKukbSfelJYF82L0qZFzsqSdRMLmL57xDNg0clAFs73U1zLCQdGVEK T3xeT++WpyRiVwOB0M5nsfPojFSqhonAmZkCCRyFaMi3WVzWZteNgQP4+OIMC0eh 7KYL/vSUuY0UAd08mWumONKtt1NQQDGy05iYJCHxHtMNrIW0p1dWMDMi0QEy0gEu 4labchxDleW9YLUXwgwcz6nm0HcctjHmwPUTKN0Rr/z60WBH3/qY9MptYUeKX9KO ZY4rN5ZFlOs7frw3SR0BC2vVOcHxVAfcIBRjD9x/HqcvRUmirJkPQKTTuwIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFPj3PFwPOhBqi6ff8+NcgW0QeNxxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzAzY2Nl My1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5YWEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2Uz LWU2MjAtNDQ4My1iMDhiLTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96 NDF5QmJSQjQzSEUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB0BggrBgEF BQcBBwEB/wRlMGMwQgQCAAEwPAMEAwUtOAMEAh8OSAMEAiWcuAMEBEVeQAMEA03q KAMEAFvVjwMEArkz5AMEA7mnQAMEArm9XAMEAMNKTDAdBAIAAjAXAwcAIAEGfAKE AwUAKgDQQAMFAyoL4YAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwfNMA0GCSqG SIb3DQEBCwUAA4IBAQANa2AI5JIIopJ74SsfYcFfFAwGxzlL7kgZmFW3Zv/Ev0dr PX1YDe4Ctsvq/IjYJzCjqGURzf6kQs8ikzRwoDJoLMALwhsRuKEM39nf43AI/xrA MSAy8aFk9Bwg/tgtF4xE8QbMDsgO1gzPJ9GxgrK2V3gUWWXshkooMDUeKXqkUekV nw6C6uUVgJJrfGJwas+xeFTAEYEexUfzQLmF4vC+iUrT3glmv7HC+M7SjRIY/Prp zT3D9D1ryq81LWUfkiShXeylQrWW1YzNHRwue3/Gx6u1zVzdcq8cZFxZIHUAmazQ XynYkKnGkMM0oqe8uGMtR8UXhWW0IVUp1D3DELOE -----END CERTIFICATE-----Generated at Wed Feb 4 02:17:40 2026 by rpki-client