This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer File: PE0_sETrHAoRvgYCrO74jl9dLd8.cer (raw, json) Hash identifier: 5cdM8FVFSRUtGUD8nJvxsdf+r5/AoCNcu1R8jB5etXc= Subject key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A48FCC514AB3DFD53AFE0DC533A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29384 AS: 34945 IP: 86.36.0.0/18 IP: 86.36.96.0 -- 86.37.255.255 IP: 2a0d:bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a4:8f:cc:51:4a:b3:df:d5:3a:fe:0d:c5:33:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d8:92:8a:fc:15:d3:71:6c:cf:74:a9:77:65: a7:81:b6:40:ab:e6:15:50:92:6e:89:56:2d:65:c2: 77:ec:8f:1b:f0:4a:21:a4:27:90:1c:59:2e:ec:fa: 6a:ef:a8:59:51:d6:26:c5:73:c4:25:51:19:c1:b6: 27:01:c0:42:09:e5:50:51:9e:10:ee:6f:e0:5d:ce: c4:39:7c:31:d6:a3:39:74:d0:ce:3d:ab:2d:35:e8: 57:d1:79:1d:d4:1d:4e:d0:35:d6:30:1b:a5:34:19: c0:cd:01:bf:36:43:82:79:b0:c6:4b:7b:a3:a4:72: 8c:b7:53:0f:ab:48:0f:b4:4e:eb:e0:52:a7:20:c5: 08:cf:2a:30:ed:ab:2f:be:d4:0f:55:6a:36:91:2b: 68:b0:05:e1:f4:74:06:fc:58:6d:e2:26:25:07:27: 35:2c:6d:43:99:d9:00:ef:09:0b:01:10:77:e7:b5: d8:4d:79:48:21:cc:69:39:4c:05:d5:61:9a:4f:bf: dd:a6:1b:b4:3d:09:51:80:9b:39:da:5e:af:44:16: d3:8f:ea:7b:17:3a:55:ad:e5:b6:98:b9:4e:7a:aa: ea:ec:6e:61:f4:2e:b4:52:ad:8d:3c:25:5b:b7:56: 6b:ab:d8:01:1f:8b:d8:89:78:4c:73:b6:b1:db:db: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.36.0.0/18 86.36.96.0-86.37.255.255 IPv6: 2a0d:bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29384 34945 Signature Algorithm: sha256WithRSAEncryption 40:db:7b:7e:d5:c1:bb:ee:63:7a:f7:66:87:86:f3:51:bd:10: 82:06:42:58:49:64:4d:2b:44:88:94:5c:85:40:74:5d:66:9c: d8:6f:60:95:cb:9a:50:ed:43:dc:df:ab:55:67:22:a2:72:f5: 6e:70:b8:eb:07:fa:42:25:7f:52:8c:31:3b:a6:98:cc:8b:9e: fd:cc:1d:e2:ae:a5:58:21:44:10:44:25:39:84:5f:a0:66:d6: 22:50:ea:bb:25:e8:1e:ad:c9:b5:f6:23:2d:5a:f5:99:c8:23: 9d:0f:59:b5:97:5c:d8:f6:71:d9:35:70:8d:3c:61:1f:1e:fe: 2f:00:35:90:f2:89:ea:e1:b9:4b:80:58:3f:10:43:fd:de:be: 6c:e1:ef:2a:13:6d:08:48:af:3c:d6:e4:68:78:ee:95:47:e1: 8e:23:82:94:51:5b:24:22:42:c0:30:23:96:30:d1:e0:4e:63: 79:6f:c9:d2:a3:a8:01:1f:18:a5:4b:04:ca:70:bb:b8:9a:13: cc:43:2d:04:86:af:f2:dc:c0:77:61:25:1a:37:4f:70:2c:5f: a0:ac:0a:28:5e:b5:78:5e:f2:fa:04:89:ec:8c:df:6f:87:79: e7:42:8a:e4:0e:9c:f0:02:5b:84:48:03:1f:91:51:50:33:c1: 5f:22:bb:26 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt3xqSPzFFKs9/VOv4NxTOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzRkM2ZiMDQ0ZWIxYzBhMTFiZTA2MDJhY2VlZjg4ZTVmNWQyZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9iSivwV03Fsz3Spd2WngbZAq+YV UJJuiVYtZcJ37I8b8EohpCeQHFku7Ppq76hZUdYmxXPEJVEZwbYnAcBCCeVQUZ4Q 7m/gXc7EOXwx1qM5dNDOPastNehX0Xkd1B1O0DXWMBulNBnAzQG/NkOCebDGS3uj pHKMt1MPq0gPtE7r4FKnIMUIzyow7asvvtQPVWo2kStosAXh9HQG/Fht4iYlByc1 LG1DmdkA7wkLARB357XYTXlIIcxpOUwF1WGaT7/dphu0PQlRgJs52l6vRBbTj+p7 FzpVreW2mLlOeqrq7G5h9C60Uq2NPCVbt1Zrq9gBH4vYiXhMc7ax29u6XQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFDxNP7BE6xwKEb4GAqzu+I5fXS3fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1Lzc2ZTA3 Yy04YTMyLTQ4OWQtOTFkMS1iMTg0ZTNmNGI1MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNzZlMDdj LThhMzItNDg5ZC05MWQxLWIxODRlM2Y0YjUwZS8xL1BFMF9zRVRySEFvUnZnWUNy Tzc0amw5ZExkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjAZBAIAATATAwQGViQAMAsDBAVWJGADAwFWJDANBAIAAjAHAwUD Kg0LwDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJyyAIDAIiBMA0GCSqGSIb3DQEB CwUAA4IBAQBA23t+1cG77mN692aHhvNRvRCCBkJYSWRNK0SIlFyFQHRdZpzYb2CV y5pQ7UPc36tVZyKicvVucLjrB/pCJX9SjDE7ppjMi579zB3irqVYIUQQRCU5hF+g ZtYiUOq7Jegercm19iMtWvWZyCOdD1m1l1zY9nHZNXCNPGEfHv4vADWQ8onq4blL gFg/EEP93r5s4e8qE20ISK881uRoeO6VR+GOI4KUUVskIkLAMCOWMNHgTmN5b8nS o6gBHxilSwTKcLu4mhPMQy0Ehq/y3MB3YSUaN09wLF+grAooXrV4XvL6BInsjN9v h3nnQorkDpzwAluESAMfkVFQM8FfIrsm -----END CERTIFICATE-----Generated at Tue Jan 20 04:34:39 2026 by rpki-client