This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer File: P_xBJyHAxuekxXZ66YxFId71FQE.cer (raw, json) Hash identifier: ewHh15zeXEEnEowjJnvbvfJx6Zb8uUMEnO+icpxhNFU= Subject key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758847327E0ED98005A343119C0C3F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207307 IP: 91.205.159.0/24 IP: 2a05:b380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:73:27:e0:ed:98:00:5a:34:31:19:c0:c3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:43:38:7c:82:4e:1e:53:d2:c8:2d:35:d2: ed:2d:e7:34:2e:70:26:c4:75:55:96:59:6a:8b:c2: 49:99:8c:ef:fb:2d:63:fa:d8:d5:bb:ff:3b:0b:47: 4f:9f:ba:df:b9:85:7b:ab:e7:c8:9d:64:a4:fb:93: d6:f4:7f:3d:b6:68:0f:63:4b:8a:3a:0f:42:78:0f: b0:43:c9:65:ac:00:7e:c9:7a:b4:40:1a:6a:5d:26: 13:54:d9:4a:c8:56:58:e7:38:c2:d6:aa:d0:c8:16: 17:77:e0:a4:55:81:3e:2e:00:b0:3a:9a:b5:9f:a0: 63:be:aa:06:76:31:37:e9:0b:39:6e:e5:12:91:53: 9b:bd:df:9f:bc:12:8c:af:85:d0:7d:0e:06:f9:ef: 46:73:f9:ae:c0:ba:c6:fb:67:30:6a:09:b8:93:68: d9:99:36:7e:04:8e:66:a7:43:c3:d5:a5:22:72:bb: 05:c2:f1:f5:db:96:88:57:21:df:7b:64:4b:76:ae: ea:68:6f:5b:0b:50:fc:54:65:5c:40:11:45:26:9a: ee:28:51:bb:ef:75:9e:45:1a:87:55:42:32:24:25: f8:67:41:ee:d4:32:b7:3b:2f:00:63:0b:ef:96:23: 04:66:66:22:fd:9b:0a:94:cc:2f:0b:dc:64:0e:c2: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.159.0/24 IPv6: 2a05:b380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207307 Signature Algorithm: sha256WithRSAEncryption a6:fe:46:12:98:41:d2:fd:cd:f0:6b:3f:73:0c:5a:2d:f4:3b: df:82:f7:26:09:34:67:fa:36:fc:73:a0:f9:fe:a9:02:aa:b8: 45:46:7c:8a:9f:72:08:6f:b6:94:c6:4b:e5:9e:f6:98:35:94: 8b:20:6b:13:cc:c1:3c:16:79:ff:b4:71:06:c3:75:c4:af:b1: d0:b7:ca:63:eb:78:a7:89:bb:36:03:6a:08:29:bf:91:f5:3a: 68:ce:1f:a5:9c:48:37:c6:2e:18:ad:ce:c0:f7:69:6c:9d:17: 92:db:68:12:86:84:c6:4d:db:67:f9:f0:93:2b:2c:a2:59:d9: 51:4f:f3:50:0c:22:60:fe:ec:16:bd:8d:ce:f0:ae:99:28:44: 53:3f:bf:83:38:b4:db:41:44:c2:de:9c:de:b6:8a:1f:21:28: 62:8b:31:4f:4e:f6:3c:cf:32:df:16:1a:90:7a:58:4b:a4:b8: 5b:a4:6a:7c:76:30:ba:7f:4a:81:fc:0c:9b:83:8b:6d:a9:fc: 3d:33:01:5a:5a:83:2e:d9:41:67:46:38:4e:cd:5d:f5:df:ea: 9d:ca:f1:c7:0c:b9:09:b6:62:b6:ce:8b:3e:dc:f1:72:f7:0f: 27:45:61:e3:0b:48:f3:d3:ac:9a:db:6f:e8:d7:a2:5a:df:e8: 00:58:c7:a2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WIRzJ+DtmABaNDEZwMPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZjNDEyNzIxYzBjNmU3YTRjNTc2N2FlOThjNDUyMWRlZjUxNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRhDOHyCTh5T0sgtNdLtLec0LnAm xHVVlllqi8JJmYzv+y1j+tjVu/87C0dPn7rfuYV7q+fInWSk+5PW9H89tmgPY0uK Og9CeA+wQ8llrAB+yXq0QBpqXSYTVNlKyFZY5zjC1qrQyBYXd+CkVYE+LgCwOpq1 n6BjvqoGdjE36Qs5buUSkVObvd+fvBKMr4XQfQ4G+e9Gc/muwLrG+2cwagm4k2jZ mTZ+BI5mp0PD1aUicrsFwvH125aIVyHfe2RLdq7qaG9bC1D8VGVcQBFFJpruKFG7 73WeRRqHVUIyJCX4Z0Hu1DK3Oy8AYwvvliMEZmYi/ZsKlMwvC9xkDsKkpQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD/8QSchwMbnpMV2eumMRSHe9RUBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2NkOTBi OS1mYTg4LTRiZDktYTdkNS0yMjExOGIzNjE0OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvY2Q5MGI5 LWZhODgtNGJkOS1hN2Q1LTIyMTE4YjM2MTQ5MC8xL1BfeEJKeUhBeHVla3hYWjY2 WXhGSWQ3MUZRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW82fMA0EAgACMAcDBQMqBbOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpyzANBgkqhkiG9w0BAQsFAAOCAQEApv5GEphB0v3N 8Gs/cwxaLfQ734L3Jgk0Z/o2/HOg+f6pAqq4RUZ8ip9yCG+2lMZL5Z72mDWUiyBr E8zBPBZ5/7RxBsN1xK+x0LfKY+t4p4m7NgNqCCm/kfU6aM4fpZxIN8YuGK3OwPdp bJ0XkttoEoaExk3bZ/nwkyssolnZUU/zUAwiYP7sFr2NzvCumShEUz+/gzi020FE wt6c3raKHyEoYosxT072PM8y3xYakHpYS6S4W6RqfHYwun9KgfwMm4OLban8PTMB WlqDLtlBZ0Y4Ts1d9d/qncrxxwy5CbZits6LPtzxcvcPJ0Vh4wtI89Osmttv6Nei Wt/oAFjHog== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:33 2026 by rpki-client