This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer File: P591E-0Eyp_o96RU6CeY0E8agKg.cer (raw, json) Hash identifier: LPsBa0Jag0dB3ELWVZP09y4qji92XYPwPec6ZLVFNjs= Subject key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED138A7A61ADDD930C182BB362AE69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3280 AS: 49348 AS: 56555 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:13:8a:7a:61:ad:dd:93:0c:18:2b:b3:62:ae:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:0f:98:d5:6e:26:48:78:a8:ef:5d:8c:b6: 40:5c:31:b0:30:85:ac:b2:7b:72:32:bc:1b:a1:78: 2a:fb:1f:c2:7c:2d:e9:e1:f3:cd:fe:21:fe:20:33: f9:56:26:bf:23:74:4f:64:90:76:db:d8:5d:d4:1e: dd:f1:8a:a4:51:70:94:6b:c4:38:30:0c:ab:e6:b4: 0a:96:9e:ae:e3:4f:07:29:61:12:77:cc:9c:aa:32: 72:98:c1:a9:3e:19:0f:af:f5:34:7d:2d:37:4b:c8: 30:5f:a5:77:00:be:ad:d4:87:c4:0d:7d:e8:be:0f: bb:1e:f4:d7:0c:3e:f9:8b:f7:15:05:a2:8b:d1:a9: 83:c1:20:49:c8:e9:70:97:d3:0b:63:27:3b:73:82: 7d:f8:e2:58:71:9a:13:d7:9f:f0:0e:b2:77:81:c8: 34:bb:4b:9a:f9:dd:b1:e0:8d:ee:02:72:84:8b:fc: 45:c8:51:4a:96:8d:ef:61:34:ab:e6:1b:7f:5e:0f: c0:74:2f:a9:d6:3b:a0:ab:14:3a:ef:f4:3c:eb:ec: fb:5e:65:77:f1:6e:e4:99:17:3a:1d:89:0d:fd:88: 76:2a:1e:b6:48:24:6a:10:a0:1b:ac:f0:9d:eb:7c: 82:ee:89:12:6b:c6:51:05:41:b8:28:8b:93:93:ea: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 3280 49348 56555 Signature Algorithm: sha256WithRSAEncryption ac:cf:77:d7:6b:5c:73:9d:22:24:49:48:4c:96:a6:82:cb:bc: 24:fe:fe:b3:1a:1b:8b:e8:e1:5b:21:e6:80:2c:dd:3e:97:31: 5b:99:f1:ee:18:4b:67:83:7c:2b:69:8a:9a:b8:e0:8c:44:1f: c6:5b:a8:dc:2e:2c:95:9e:00:d6:6d:79:b3:e6:0c:12:d8:d4: c4:7b:e8:93:f0:75:42:7c:43:dd:91:e8:77:44:41:54:54:b3: 15:c1:57:61:8f:d9:ff:b9:0a:5a:d3:08:7e:4c:01:5b:08:9d: f3:1e:27:2b:e4:ae:0b:61:e6:df:0e:0b:0d:9c:47:16:f7:4a: aa:09:61:6d:ed:7b:a6:93:dd:6d:48:1b:f6:54:da:b4:d8:82: 31:15:bd:da:1c:5f:1b:5c:cb:f5:60:c9:18:a5:e0:fc:4a:ac: 01:94:9a:b2:b7:a8:bb:19:c6:6d:1f:ec:f1:3a:34:6e:c3:21: 2c:ba:4c:91:0e:a0:aa:e0:b9:5e:21:cc:ee:9b:0a:ec:29:4e: 06:6e:b1:af:ce:49:37:7e:fe:00:2b:00:e6:aa:ab:ca:65:1a: 50:7a:c2:e1:e6:45:c4:fc:3c:20:34:81:65:23:6e:1f:47:44: f5:79:13:a9:ac:8a:f1:0d:fd:1c:54:20:5e:b4:45:3d:bd:88: cc:f7:d7:f8 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt57ROKemGt3ZMMGCuzYq5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjlmNzUxM2VkMDRjYTlmZThmN2E0NTRlODI3OThkMDRmMWE4MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L0PmNVuJkh4qO9djLZAXDGwMIWs sntyMrwboXgq+x/CfC3p4fPN/iH+IDP5Via/I3RPZJB229hd1B7d8YqkUXCUa8Q4 MAyr5rQKlp6u408HKWESd8ycqjJymMGpPhkPr/U0fS03S8gwX6V3AL6t1IfEDX3o vg+7HvTXDD75i/cVBaKL0amDwSBJyOlwl9MLYyc7c4J9+OJYcZoT15/wDrJ3gcg0 u0ua+d2x4I3uAnKEi/xFyFFKlo3vYTSr5ht/Xg/AdC+p1jugqxQ67/Q86+z7XmV3 8W7kmRc6HYkN/Yh2Kh62SCRqEKAbrPCd63yC7okSa8ZRBUG4KIuTk+pOKwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFD+fdRPtBMqf6PekVOgnmNBPGoCoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzBkZjMw ZS1iMGJmLTRkMTAtYTA2Ni02OTE3Y2I0Yzk5YmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMGRmMzBl LWIwYmYtNGQxMC1hMDY2LTY5MTdjYjRjOTliYy8xL1A1OTFFLTBFeXBfbzk2UlU2 Q2VZMEU4YWdLZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAgzQAgMAwMQCAwDc6zANBgkqhkiG9w0BAQsFAAOCAQEA rM9312tcc50iJElITJamgsu8JP7+sxobi+jhWyHmgCzdPpcxW5nx7hhLZ4N8K2mK mrjgjEQfxluo3C4slZ4A1m15s+YMEtjUxHvok/B1QnxD3ZHod0RBVFSzFcFXYY/Z /7kKWtMIfkwBWwid8x4nK+SuC2Hm3w4LDZxHFvdKqglhbe17ppPdbUgb9lTatNiC MRW92hxfG1zL9WDJGKXg/EqsAZSasreouxnGbR/s8To0bsMhLLpMkQ6gquC5XiHM 7psK7ClOBm6xr85JN37+ACsA5qqrymUaUHrC4eZFxPw8IDSBZSNuH0dE9XkTqayK 8Q39HFQgXrRFPb2IzPfX+A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:55 2026 by rpki-client