This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer (raw, json) Hash identifier: l/FT0jpzJIAMmDwpkLbkOrlMZjGjsgNLA1mCNZFO9mk= Subject key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775956843C91240B3CD9E392B7A9E2AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51664 IP: 78.40.88.0/21 IP: 2a12:a7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:84:3c:91:24:0b:3c:d9:e3:92:b7:a9:e2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:64:e5:c3:98:55:08:42:36:bb:e5:d9:4e: 83:8b:48:39:1c:7a:4c:14:b8:8d:54:67:12:c3:b8: ec:99:54:fa:cd:20:07:d0:a0:04:cf:46:61:64:07: 9e:67:7f:af:a6:fc:60:53:1d:6a:f4:cc:bd:78:15: 47:ec:cd:97:77:d4:36:42:ed:1a:61:0c:91:76:35: 40:5e:7a:67:d8:21:e8:eb:cc:af:ac:68:ca:5f:1b: 3d:85:bb:56:73:0c:eb:6b:4d:c6:3a:ed:d9:af:8c: 69:a6:cf:f7:4c:40:71:8a:2e:0e:bf:05:98:5f:61: 12:14:2c:8d:f1:7f:0c:98:ae:30:fd:0b:45:c4:4e: 8f:f6:06:b4:29:17:3f:10:d3:22:4c:4d:c0:9c:2b: 3c:66:cb:4c:d7:95:be:57:ce:af:7e:72:34:9d:11: 77:dd:39:49:a2:14:69:5b:7a:34:18:ab:e6:00:42: d6:6d:54:85:60:98:a1:8b:04:ff:bb:ba:73:b3:fd: 12:f4:6a:85:9a:8a:67:23:32:ec:a3:4d:56:cf:cc: 1f:e3:85:b6:b6:02:c9:a9:56:bc:8a:bc:ed:4e:bf: ff:22:d3:6b:6c:9d:3f:b2:35:3b:29:ed:a2:42:ff: 1b:a7:de:f5:30:b4:39:4c:20:0b:09:5c:38:b4:b0: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.88.0/21 IPv6: 2a12:a7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51664 Signature Algorithm: sha256WithRSAEncryption 49:0e:21:69:16:69:9d:d5:08:61:bb:7d:c8:ad:5a:ba:bb:99: 2d:89:bb:68:78:16:c2:d8:35:1a:dc:4e:e3:32:9e:49:b5:e7: c5:de:06:55:81:9c:e4:6a:d9:32:d7:54:9e:c7:35:af:e2:c9: 4e:c6:7a:85:26:52:4c:5b:ff:0c:2e:09:fd:dc:ba:52:b4:45: a4:c2:1b:61:d0:e4:62:e5:76:65:ff:dd:26:a8:20:ff:b5:68: 32:5e:7c:cc:88:50:81:3b:dd:72:95:69:a6:6d:da:dc:47:2a: 00:7f:55:39:36:85:11:ce:4a:b5:48:b4:a7:31:28:08:7e:79: bd:09:c6:a5:1e:49:5e:24:7c:de:43:02:26:f2:36:c5:58:74: 63:d6:aa:f2:5f:1d:70:0f:a2:1a:c0:ac:4f:dc:e9:a5:12:33: 7c:36:e6:8c:b4:41:20:00:a8:1f:31:33:80:6e:a0:e3:27:8d: a0:0b:46:eb:58:05:e6:a0:98:6f:ad:7c:4f:0d:bc:b7:d7:53: ff:30:8d:a4:40:48:3e:5a:8f:4b:29:e2:0b:48:24:c9:ae:96: eb:30:71:34:0b:da:12:6b:c7:a4:9b:6a:b0:e8:58:d0:4d:63: 0f:7a:6a:92:d2:77:b7:6b:6e:32:1d:4a:ca:91:47:a0:59:40: 43:33:69:12 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WVaEPJEkCzzZ45K3qeKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmY3Nzg5MzQ2YTlmOTI5MTVmMWY3NWIxMGFmOTRmOTdiNmUyNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+hk5cOYVQhCNrvl2U6Di0g5HHpM FLiNVGcSw7jsmVT6zSAH0KAEz0ZhZAeeZ3+vpvxgUx1q9My9eBVH7M2Xd9Q2Qu0a YQyRdjVAXnpn2CHo68yvrGjKXxs9hbtWcwzra03GOu3Zr4xpps/3TEBxii4OvwWY X2ESFCyN8X8MmK4w/QtFxE6P9ga0KRc/ENMiTE3AnCs8ZstM15W+V86vfnI0nRF3 3TlJohRpW3o0GKvmAELWbVSFYJihiwT/u7pzs/0S9GqFmopnIzLso01Wz8wf44W2 tgLJqVa8irztTr//ItNrbJ0/sjU7Ke2iQv8bp971MLQ5TCALCVw4tLDtJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD/3eJNGqfkpFfH3WxCvlPl7biT6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzQ4MWEz NS0yNDM0LTQ2ZTMtYWVlMS1hZTEzMDUzMTMzY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNDgxYTM1 LTI0MzQtNDZlMy1hZWUxLWFlMTMwNTMxMzNjYi8xL1BfZDRrMGFwLVNrVjhmZGJF Sy1VLVh0dUpQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDTihYMA0EAgACMAcDBQMqEqfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJ0DANBgkqhkiG9w0BAQsFAAOCAQEASQ4haRZpndUI Ybt9yK1auruZLYm7aHgWwtg1GtxO4zKeSbXnxd4GVYGc5GrZMtdUnsc1r+LJTsZ6 hSZSTFv/DC4J/dy6UrRFpMIbYdDkYuV2Zf/dJqgg/7VoMl58zIhQgTvdcpVppm3a 3EcqAH9VOTaFEc5KtUi0pzEoCH55vQnGpR5JXiR83kMCJvI2xVh0Y9aq8l8dcA+i GsCsT9zppRIzfDbmjLRBIACoHzEzgG6g4yeNoAtG61gF5qCYb618Tw28t9dT/zCN pEBIPlqPSyniC0gkya6W6zBxNAvaEmvHpJtqsOhY0E1jD3pqktJ3t2tuMh1KypFH oFlAQzNpEg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:31 2026 by rpki-client