This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer File: PI0Z2SQBkcNql0ti35PCIUNtm90.cer (raw, json) Hash identifier: eNYjzQso2u0wYSl6PQw9B5nJ+5OyoDulzYkLAYsfWU4= Subject key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759293D02649909C8C7443BFFE43011 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216095 IP: 195.226.196.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:29:3d:02:64:99:09:c8:c7:44:3b:ff:e4:30:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c8d19d9240191c36a974b62df93c221436d9bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:8f:9a:b9:da:2e:19:22:ab:91:22:3f:95: 87:92:4f:63:4d:70:d2:a6:80:c1:f5:6d:c3:96:c1: 63:ea:eb:51:a3:d3:18:83:7a:56:9a:69:dc:51:77: 58:b1:19:f7:65:72:8d:7d:9f:1e:7b:8f:c3:63:6c: 0d:95:32:ec:7d:6c:d7:df:64:cd:1f:98:0d:21:6f: 9b:da:de:2d:7b:63:fc:10:e4:d0:d7:c1:04:2a:70: 13:cc:b3:ca:0a:27:84:3c:54:f2:3e:1e:5f:26:6c: c5:6d:a9:c6:03:f2:88:aa:37:8e:12:94:0d:f3:49: fd:b3:6e:32:87:ee:3b:c2:d8:dc:87:ab:8c:9c:8a: f1:e5:de:1a:47:3b:07:34:c8:18:a7:7d:34:5a:02: f6:54:06:c0:dd:37:0b:c1:65:a1:e4:4d:43:25:72: 1e:a2:44:17:7e:27:a5:40:ae:4d:6f:0d:a3:2d:33: 72:a2:8d:e9:c2:5c:f2:5e:9e:f0:88:7c:d3:bf:94: d7:42:cb:da:c6:92:4d:56:bc:fa:92:01:fe:f7:10: 74:d8:cb:cb:80:0c:a7:57:00:fe:d0:5a:b2:87:08: 9e:81:f1:97:82:9d:63:31:a2:35:32:c3:33:80:e8: 9c:8a:26:a9:8d:3d:ad:d1:3b:69:68:bd:86:99:e4: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.196.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216095 Signature Algorithm: sha256WithRSAEncryption 77:28:d0:40:56:5c:ed:ac:66:a1:80:bc:7e:76:ec:b5:37:a8: 09:7c:f1:52:13:9d:5d:87:0d:5e:b7:13:9f:ac:70:10:4e:0a: 87:61:a6:58:61:4c:3b:58:76:7b:f1:da:4a:41:c8:d4:e6:ec: 37:93:c9:d1:26:6e:5d:7d:77:6a:ca:11:dc:74:bc:6b:eb:93: 44:c5:b6:c3:1a:37:c7:a1:6f:4c:47:d9:2f:86:51:7b:52:4a: fe:f0:54:61:90:17:6e:28:66:44:4f:19:74:e2:0b:d9:1f:cb: 5e:61:24:b5:ba:d3:8e:a3:32:bb:74:15:f5:7d:00:f9:08:ef: ce:4e:29:e1:b9:d5:a9:e5:99:84:4c:c1:52:ad:8a:59:40:e7: e6:1e:55:37:98:b1:97:4d:53:42:ac:85:2b:8b:23:c9:11:55: a9:81:95:19:e3:f2:f3:88:3f:76:15:6c:98:be:1d:de:7b:97: 6d:5a:91:1d:cb:7e:91:9f:6a:c0:50:7d:37:4b:10:4b:a4:b3: e7:8a:e7:e0:a1:72:37:05:93:72:7a:38:53:bc:0d:16:70:0f: 48:de:51:38:76:bf:60:63:9d:9b:2b:f5:06:eb:da:81:77:da: e2:83:df:92:e1:a7:eb:d4:0c:01:06:80:3a:03:65:d2:a3:45: 3e:22:dd:18 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WSk9AmSZCcjHRDv/5DARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzhkMTlkOTI0MDE5MWMzNmE5NzRiNjJkZjkzYzIyMTQzNmQ5YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4qPmrnaLhkiq5EiP5WHkk9jTXDS poDB9W3DlsFj6utRo9MYg3pWmmncUXdYsRn3ZXKNfZ8ee4/DY2wNlTLsfWzX32TN H5gNIW+b2t4te2P8EOTQ18EEKnATzLPKCieEPFTyPh5fJmzFbanGA/KIqjeOEpQN 80n9s24yh+47wtjch6uMnIrx5d4aRzsHNMgYp300WgL2VAbA3TcLwWWh5E1DJXIe okQXfielQK5Nbw2jLTNyoo3pwlzyXp7wiHzTv5TXQsvaxpJNVrz6kgH+9xB02MvL gAynVwD+0FqyhwiegfGXgp1jMaI1MsMzgOiciiapjT2t0TtpaL2GmeTuQQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDyNGdkkAZHDapdLYt+TwiFDbZvdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzgwMGUz OS1mOWIxLTRmOGQtOWMxMC0xMDM1N2I4N2NiMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvODAwZTM5 LWY5YjEtNGY4ZC05YzEwLTEwMzU3Yjg3Y2IyMy8xL1BJMFoyU1FCa2NOcWwwdGkz NVBDSVVOdG05MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+LEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNMHzANBgkqhkiG9w0BAQsFAAOCAQEAdyjQQFZc7axmoYC8fnbstTeoCXzxUhOd XYcNXrcTn6xwEE4Kh2GmWGFMO1h2e/HaSkHI1ObsN5PJ0SZuXX13asoR3HS8a+uT RMW2wxo3x6FvTEfZL4ZRe1JK/vBUYZAXbihmRE8ZdOIL2R/LXmEktbrTjqMyu3QV 9X0A+Qjvzk4p4bnVqeWZhEzBUq2KWUDn5h5VN5ixl01TQqyFK4sjyRFVqYGVGePy 84g/dhVsmL4d3nuXbVqRHct+kZ9qwFB9N0sQS6Sz54rn4KFyNwWTcno4U7wNFnAP SN5ROHa/YGOdmyv1BuvagXfa4oPfkuGn69QMAQaAOgNl0qNFPiLdGA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:16 2026 by rpki-client