This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer (raw, json) Hash identifier: iE8k+Enjh7c9xJOb+7KS6Cf+3SlgRblI+OQgYEhFUJk= Subject key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85310D5AD9BA968E2B641CFA1EFF5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.138.91.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:31:0d:5a:d9:ba:96:8e:2b:64:1c:fa:1e:ff:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:c2:6f:4a:79:f8:84:8c:be:d4:d5:19:69: 3f:6a:1f:7b:ec:21:31:df:25:9f:91:bc:d2:44:3a: a6:ee:20:65:4a:b1:87:49:77:94:91:7d:00:1f:fe: 75:13:6d:06:b6:45:6a:af:d3:81:7a:48:6c:bc:a6: e1:1b:91:f1:13:6b:96:20:a4:4d:62:54:56:33:07: bd:50:c6:1a:92:6b:a1:3e:96:c5:c8:ea:04:bc:36: 74:de:d2:c2:44:b0:1a:0f:42:75:50:9e:49:6f:fc: fc:fa:35:49:fc:c4:18:c4:21:d4:a6:16:6c:8a:77: f7:80:b6:d6:09:89:d6:05:8f:13:22:b2:66:83:00: 12:60:4b:02:a0:e1:27:09:5d:be:55:e3:c8:b0:b1: eb:35:33:a5:b4:43:5f:6c:28:47:a7:4d:73:da:ff: 60:4f:05:72:0f:3f:ce:ea:87:9f:ee:85:ee:bb:0f: da:2f:71:a1:99:02:4f:c7:3f:a9:ba:8c:62:9d:9e: 4a:d5:cf:ce:83:1c:0e:aa:64:ac:52:22:0d:02:45: 9a:c0:c4:bd:5c:b1:4a:e8:a9:2b:b9:fc:fb:3e:e4: 96:1a:62:e6:7f:35:c0:fb:93:a5:d6:29:a9:3b:31: 0b:46:c4:1f:58:b9:d8:11:be:e1:74:09:87:8a:cd: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.91.0/24 Signature Algorithm: sha256WithRSAEncryption 06:7e:f7:a8:6a:f4:95:4a:a5:f6:07:e4:b7:b5:f8:dd:dd:a0: 3b:f8:44:b4:79:bc:3d:88:e2:9b:11:5a:eb:43:19:16:f5:12: b8:47:d9:09:b7:b4:2b:8d:f9:97:b8:bf:c5:14:28:eb:e1:ab: ff:e5:b6:54:55:10:3e:65:71:c1:36:8c:8f:a4:9d:4e:e6:e8: 4e:2a:ae:be:0c:35:82:26:d3:41:77:51:f2:39:5a:1a:e2:0f: 3b:4b:2f:12:2a:f7:ec:05:72:a9:49:ad:7c:9d:e8:b8:cd:e4: 4e:de:93:90:00:de:fb:ee:d4:82:01:fb:82:76:1e:d0:52:c2: 36:31:d2:ca:12:d3:17:51:5d:55:54:e7:e7:2a:82:a5:79:8c: c0:68:a6:f2:6e:91:06:a9:fa:f4:24:1a:38:af:42:94:9c:d2: 89:20:7b:98:fd:02:73:60:47:c3:1e:d3:35:21:f9:bd:cd:b9: c4:ff:98:7f:df:0e:b0:54:2d:6d:03:2b:58:2f:d6:90:df:74: 46:ea:69:7a:84:48:20:4d:32:c6:62:5e:50:b4:3d:04:8b:e1: 0c:53:be:d1:07:43:7b:a2:f9:be:ff:28:c5:dc:7b:2a:4b:db: b3:9b:f0:71:31:5a:89:14:6f:32:47:cc:1f:1e:f6:44:f0:d3: ac:16:47:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hTENWtm6lo4rZBz6Hv9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDNkNjlhYjYyYzhkODgyNWYyYmE0YjQ4M2QwZTM5M2UyNTM0ZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZXCb0p5+ISMvtTVGWk/ah977CEx 3yWfkbzSRDqm7iBlSrGHSXeUkX0AH/51E20GtkVqr9OBekhsvKbhG5HxE2uWIKRN YlRWMwe9UMYakmuhPpbFyOoEvDZ03tLCRLAaD0J1UJ5Jb/z8+jVJ/MQYxCHUphZs inf3gLbWCYnWBY8TIrJmgwASYEsCoOEnCV2+VePIsLHrNTOltENfbChHp01z2v9g TwVyDz/O6oef7oXuuw/aL3GhmQJPxz+puoxinZ5K1c/OgxwOqmSsUiINAkWawMS9 XLFK6Kkrufz7PuSWGmLmfzXA+5Ol1impOzELRsQfWLnYEb7hdAmHis20VQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFD09aatiyNiCXyuktIPQ45PiU07vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2QxMjA1 Yi0wNzJmLTQ2YzEtODE3MC0wNzA1YmNjZDFmMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZDEyMDVi LTA3MmYtNDZjMS04MTcwLTA3MDViY2NkMWYyYS8xL1BUMXBxMkxJMklKZks2UzBn OURqay1KVFR1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwYpbMA0GCSqGSIb3DQEBCwUAA4IBAQAGfveo avSVSqX2B+S3tfjd3aA7+ES0ebw9iOKbEVrrQxkW9RK4R9kJt7QrjfmXuL/FFCjr 4av/5bZUVRA+ZXHBNoyPpJ1O5uhOKq6+DDWCJtNBd1HyOVoa4g87Sy8SKvfsBXKp Sa18nei4zeRO3pOQAN777tSCAfuCdh7QUsI2MdLKEtMXUV1VVOfnKoKleYzAaKby bpEGqfr0JBo4r0KUnNKJIHuY/QJzYEfDHtM1Ifm9zbnE/5h/3w6wVC1tAytYL9aQ 33RG6ml6hEggTTLGYl5QtD0Ei+EMU77RB0N7ovm+/yjF3HsqS9uzm/BxMVqJFG8y R8wfHvZE8NOsFkcs -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:53 2026 by rpki-client