This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer File: P5oSEPUJkiOdOn8uXoATtatJH_8.cer (raw, json) Hash identifier: Yy3g8V+aFb3AOCWvLiJEjhGckBZTLFOEFll5JDUKPG0= Subject key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11DBC68745B098EEC77FAA0F4E7A03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203008 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:db:c6:87:45:b0:98:ee:c7:7f:aa:0f:4e:7a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b9:87:aa:44:fd:e7:fa:1d:27:d1:8a:e2:7c: 0e:6d:4b:b1:db:d9:b6:bb:b3:b0:3d:ae:09:db:4c: 8d:13:51:6f:b1:a8:7d:46:dd:90:c6:a5:2f:75:8a: 26:98:5e:2f:68:0c:cd:b3:a3:d8:25:e6:2c:60:38: 20:c4:de:9d:8c:fc:a6:78:be:fc:79:2b:7f:05:8c: 41:f8:71:75:45:19:b0:5c:b5:32:47:a7:73:e5:2f: 21:85:15:17:dd:98:08:36:04:20:72:46:d1:5b:e7: 60:fa:6c:db:b8:45:f0:69:e4:57:25:f4:30:c6:62: db:1d:62:9b:21:2b:41:42:98:f9:91:31:15:9a:d5: a0:52:a1:f6:f0:c9:a8:4c:05:74:65:91:3f:51:06: 35:7e:41:34:97:4c:73:ff:51:dd:5d:c0:53:02:fb: af:3f:90:bb:22:e9:b6:41:30:1c:26:a1:87:7c:ea: fd:b8:ac:56:96:de:30:6a:77:5e:e3:a4:ee:f1:06: 75:80:c1:c5:37:27:ff:53:3a:d1:a0:6a:d4:90:8e: 9c:e7:df:8c:98:65:2d:5c:54:0b:bf:32:f0:8f:24: 14:1c:e8:ce:bd:27:78:cf:83:28:d6:11:65:13:29: c6:cb:96:a0:ed:a7:45:53:0e:95:01:6f:71:8f:3d: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203008 Signature Algorithm: sha256WithRSAEncryption 80:ce:16:c5:1d:22:4c:50:7b:d8:42:2b:de:ea:9f:36:05:f5: 87:0e:7a:8f:55:71:0e:65:b3:2e:de:f3:e1:77:fd:8b:34:6f: b2:b1:22:e7:d2:76:1d:29:a5:89:1d:e8:a6:f2:24:28:9c:94: f2:7a:0b:ac:a1:b9:a7:0a:78:aa:88:d2:ee:2e:f5:87:28:3e: 1a:77:a4:3b:df:74:fd:6b:99:6f:e7:6c:bf:cf:23:89:33:20: 05:88:78:d5:05:2c:e1:c4:81:eb:93:bc:0f:dc:05:94:4f:2a: 09:a1:25:34:6e:67:a6:62:03:81:7f:1c:80:2a:70:12:e5:f2: db:25:3c:ac:9c:67:46:1d:82:22:a2:cf:3a:0a:09:66:00:9c: 18:4c:b2:9f:94:68:0f:df:5a:1c:fa:3e:16:36:2f:ba:9b:17: 8f:83:5c:d5:d7:28:10:83:f7:cc:9e:c6:ca:a7:7d:e1:3f:69: be:49:8c:c3:35:61:8f:0a:27:15:ca:a9:c7:95:c6:eb:77:af: 54:cc:67:a9:fc:b0:5a:3c:bc:9f:ad:4f:d1:33:85:87:f1:21: b4:6c:5e:4d:62:1d:21:8e:29:67:a6:cb:78:f2:84:e5:ea:96: 0f:f7:05:64:5b:d7:b9:ac:2a:63:0b:c7:81:3f:77:25:12:b0: 5f:94:87:a2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EdvGh0WwmO7Hf6oPTnoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjlhMTIxMGY1MDk5MjIzOWQzYTdmMmU1ZTgwMTNiNWFiNDkxZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67mHqkT95/odJ9GK4nwObUux29m2 u7OwPa4J20yNE1Fvsah9Rt2QxqUvdYommF4vaAzNs6PYJeYsYDggxN6djPymeL78 eSt/BYxB+HF1RRmwXLUyR6dz5S8hhRUX3ZgINgQgckbRW+dg+mzbuEXwaeRXJfQw xmLbHWKbIStBQpj5kTEVmtWgUqH28MmoTAV0ZZE/UQY1fkE0l0xz/1HdXcBTAvuv P5C7Ium2QTAcJqGHfOr9uKxWlt4wande46Tu8QZ1gMHFNyf/UzrRoGrUkI6c59+M mGUtXFQLvzLwjyQUHOjOvSd4z4Mo1hFlEynGy5ag7adFUw6VAW9xjz3RlwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFD+aEhD1CZIjnTp/Ll6AE7WrSR//MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzE0YTVl OC1mM2JmLTQyZjktYTI4NS1hODczNGY3MDNiOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMTRhNWU4 LWYzYmYtNDJmOS1hMjg1LWE4NzM0ZjcwM2I5OC8xL1A1b1NFUFVKa2lPZE9uOHVY b0FUdGF0SkhfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZADANBgkqhkiG9w0BAQsFAAOCAQEAgM4WxR0iTFB7 2EIr3uqfNgX1hw56j1VxDmWzLt7z4Xf9izRvsrEi59J2HSmliR3opvIkKJyU8noL rKG5pwp4qojS7i71hyg+GnekO990/WuZb+dsv88jiTMgBYh41QUs4cSB65O8D9wF lE8qCaElNG5npmIDgX8cgCpwEuXy2yU8rJxnRh2CIqLPOgoJZgCcGEyyn5RoD99a HPo+FjYvupsXj4Nc1dcoEIP3zJ7Gyqd94T9pvkmMwzVhjwonFcqpx5XG63evVMxn qfywWjy8n61P0TOFh/EhtGxeTWIdIY4pZ6bLePKE5eqWD/cFZFvXuawqYwvHgT93 JRKwX5SHog== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:14 2026 by rpki-client