This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer (raw, json) Hash identifier: /6tvuZmU2wi1K511lLaQe2DclChyhEq7nMc62EsRN6E= Subject key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3F84A5F92A95B439DE7BF839D652 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211200 IP: 92.119.39.0/24 IP: 194.180.60.0/22 IP: 2a07:ee80::/29 IP: 2a0b:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3f:84:a5:f9:2a:95:b4:39:de:7b:f8:39:d6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c02094c2210d8b21715f98df8598b353208d10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:b8:64:6d:23:af:89:15:18:3b:55:0f:1b: 34:ce:9b:86:0d:4e:a0:39:56:80:cd:88:c0:79:7c: 5d:ec:85:bc:9c:42:91:b8:c3:16:31:c5:95:0e:37: 80:f7:81:24:c3:7c:b5:d3:55:88:ba:c6:26:58:4a: 44:01:19:b6:c2:7b:7a:02:0c:c3:58:31:86:9c:75: 5a:a8:2c:d9:da:c2:b0:a7:3b:39:7e:c4:c4:7d:56: cd:c5:57:46:ff:c6:9d:4e:3b:5e:3f:15:1a:d0:95: a0:36:b6:89:85:2a:79:cc:62:07:c7:63:16:98:40: 3c:95:b2:a2:51:ee:8d:1a:50:8e:9c:87:da:d4:7c: 72:72:e1:a0:27:c5:93:82:74:d2:c7:6c:0a:12:2f: 1e:b2:1a:db:09:27:37:07:f0:99:6e:7f:96:80:9d: d6:b5:35:03:b8:b3:2d:ee:4c:0e:4d:ed:70:3b:98: f7:06:c5:35:fd:03:41:e7:bd:66:f1:ca:ca:da:8a: de:1d:6f:fb:2a:37:7d:e3:ff:21:aa:aa:21:8e:b1: bf:ec:12:5f:fc:1d:2c:11:ad:d7:f5:2f:fc:ff:a2: 63:2a:08:fb:ad:93:6e:08:eb:fa:2e:4a:cd:e6:3b: ff:07:df:b9:d2:be:38:5b:5e:cc:b6:be:76:53:09: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.39.0/24 194.180.60.0/22 IPv6: 2a07:ee80::/29 2a0b:e340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211200 Signature Algorithm: sha256WithRSAEncryption b1:9c:c5:4c:1a:07:a5:2f:55:3b:d5:0b:67:cd:f1:8f:a0:27: aa:ca:c2:ee:f3:e9:72:3e:da:c6:25:30:1d:0b:08:43:99:44: b6:cf:08:f8:ff:4a:2f:a5:78:49:4b:29:4a:7d:76:c0:0c:77: 36:af:ca:59:e4:66:8c:1a:8a:6c:79:56:f7:15:4e:18:21:26: 6b:56:3e:9e:2d:e4:9c:29:6a:e2:0d:e5:58:3c:37:d9:db:0b: 55:9d:4e:60:5a:e8:48:63:29:17:0a:2d:e6:6c:ce:d0:5e:e3: b3:82:2e:78:a7:fa:15:55:6e:f1:32:2b:49:8b:10:19:ea:c1: d0:42:7d:36:c1:57:e5:ac:3a:73:f8:0d:7d:0f:7f:1b:43:b7: 55:d8:5b:b3:8d:ad:77:8d:63:16:21:ac:73:66:c1:fe:36:f3: 78:9f:7f:c8:b5:d7:20:2c:63:32:c7:ad:b6:53:a2:fe:64:17: c0:74:06:9a:81:aa:8e:99:23:7e:87:fe:c6:32:f6:fd:fc:69: 4c:62:c9:6d:3e:ff:1c:1d:d2:dc:e0:85:57:b7:31:9d:b6:bc: e8:94:bc:89:5d:fb:e6:14:f2:5d:42:15:67:e2:e1:9d:e5:9a: f3:cd:4b:6e:b5:eb:4a:04:e2:f7:a9:07:8f:0c:c5:48:2b:a1: bb:b2:fa:75 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt57T+EpfkqlbQ53nv4OdZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzAyMDk0YzIyMTBkOGIyMTcxNWY5OGRmODU5OGIzNTMyMDhkMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMO4ZG0jr4kVGDtVDxs0zpuGDU6g OVaAzYjAeXxd7IW8nEKRuMMWMcWVDjeA94Ekw3y101WIusYmWEpEARm2wnt6AgzD WDGGnHVaqCzZ2sKwpzs5fsTEfVbNxVdG/8adTjtePxUa0JWgNraJhSp5zGIHx2MW mEA8lbKiUe6NGlCOnIfa1HxycuGgJ8WTgnTSx2wKEi8eshrbCSc3B/CZbn+WgJ3W tTUDuLMt7kwOTe1wO5j3BsU1/QNB571m8crK2oreHW/7Kjd94/8hqqohjrG/7BJf /B0sEa3X9S/8/6JjKgj7rZNuCOv6LkrN5jv/B9+50r44W17Mtr52UwlHRQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFDwCCUwiENiyFxX5jfhZizUyCNEMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzk4M2My Yy1kZGFiLTQyMmItYmNkMi0xNzM3NGJmZmI3MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvOTgzYzJj LWRkYWItNDIyYi1iY2QyLTE3Mzc0YmZmYjcxYS8xL1BBSUpUQ0lRMkxJWEZmbU4t Rm1MTlRJSTBRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAXHcnAwQCwrQ8MBQEAgACMA4DBQMqB+6AAwUD KgvjQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOQAwDQYJKoZIhvcNAQELBQAD ggEBALGcxUwaB6UvVTvVC2fN8Y+gJ6rKwu7z6XI+2sYlMB0LCEOZRLbPCPj/Si+l eElLKUp9dsAMdzavylnkZowaimx5VvcVThghJmtWPp4t5JwpauIN5Vg8N9nbC1Wd TmBa6EhjKRcKLeZsztBe47OCLnin+hVVbvEyK0mLEBnqwdBCfTbBV+WsOnP4DX0P fxtDt1XYW7ONrXeNYxYhrHNmwf4283iff8i11yAsYzLHrbZTov5kF8B0BpqBqo6Z I36H/sYy9v38aUxiyW0+/xwd0tzghVe3MZ22vOiUvIld++YU8l1CFWfi4Z3lmvPN S26160oE4vepB48MxUgrobuy+nU= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:08 2026 by rpki-client