This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer File: Pc9PDCdz75iQD5w1kHXMph0XwLM.cer (raw, json) Hash identifier: Fcl1Eqs8jJVxNAsW5m5VshY8TviO5OvwcFH+BBPRCCI= Subject key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12CBB892C14749B5BB350393F8FF22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204795 IP: 185.240.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cb:b8:92:c1:47:49:b5:bb:35:03:93:f8:ff:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:6a:d1:29:e5:a9:e0:bd:34:c2:2e:62:59: 8c:77:28:d3:ba:57:44:16:d7:9e:29:6a:2e:3a:1b: 4c:61:b6:97:bf:f6:1e:aa:3a:96:9e:40:d0:d4:a4: 7d:8f:b4:72:e8:38:91:63:bb:dd:e7:9e:1a:40:20: d0:d2:a9:9a:82:9d:0b:3b:2d:e2:be:fc:d8:ae:18: 98:91:d9:35:8b:29:63:f7:99:c3:bc:f4:06:01:01: 5e:0b:27:44:ab:4f:a0:66:f6:1e:55:7b:9d:29:9f: a5:4c:a0:4f:6a:3d:ee:07:cf:0c:91:e2:a7:d0:3d: 8e:88:b1:95:5d:4f:e6:60:54:f1:5b:8e:9e:46:a9: 55:09:86:d6:32:7e:89:0c:81:63:3d:bb:0f:00:ba: 0c:d2:cd:1c:26:17:a6:b4:0f:28:fc:29:b3:eb:3c: 55:fe:17:85:f9:31:7d:a7:a4:50:be:82:d2:47:dd: c2:72:99:a9:e9:38:3a:2a:28:64:6a:e9:1e:e9:6d: 1f:f7:12:5c:95:0f:93:a2:e2:a8:27:5e:3c:b4:57: a4:51:91:48:28:3e:73:e4:56:eb:d8:9c:99:32:2d: 73:16:da:7b:dd:94:46:f0:7b:61:e3:1f:d0:50:bd: 40:3e:97:75:a8:85:1f:82:36:c0:c5:30:7f:fb:73: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204795 Signature Algorithm: sha256WithRSAEncryption 38:21:32:cd:3f:be:69:15:f0:78:75:77:4f:85:24:5a:ae:d6: b2:6f:75:cc:47:40:3c:dc:ba:66:f5:74:32:3c:39:ea:79:fd: b5:e8:8c:6b:c6:3c:95:64:95:0b:07:aa:a2:93:ae:2b:d4:93: 08:81:33:97:69:bf:78:81:bd:1d:f1:5a:12:ea:9c:2e:7b:9f: 5b:cd:f2:5a:90:d1:ce:c6:77:6e:73:5f:af:a3:d8:2b:b3:04: d1:53:b3:c0:2d:ce:eb:b5:6e:a8:98:a0:07:96:cc:17:da:09: b8:41:de:24:ce:5c:64:46:0f:cb:ae:15:7d:9d:41:a3:ad:cd: b2:10:fb:cf:7e:68:10:b6:76:5e:e3:04:6c:24:c0:e4:ca:04: fe:13:13:57:4f:6b:05:e3:9b:5f:c6:71:2f:10:e0:90:18:5d: c0:7e:d7:07:d7:d7:ff:f6:5a:c3:b9:de:b1:8f:1e:a6:d6:9d: a4:0e:1a:46:86:be:d8:d7:a0:35:bd:9b:3a:7a:47:89:42:bc: 4c:e6:1f:15:0e:2e:46:f0:22:09:2d:5c:a1:92:92:9b:6e:91: d0:90:73:e5:bd:cf:65:ef:3a:8d:41:a5:ab:91:f8:76:8d:f2: 2a:73:62:7a:dc:d7:36:22:12:38:7a:3a:be:c8:58:c9:c4:09: 93:e8:13:43 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8Esu4ksFHSbW7NQOT+P8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGNmNGYwYzI3NzNlZjk4OTAwZjljMzU5MDc1Y2NhNjFkMTdjMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Jq0SnlqeC9NMIuYlmMdyjTuldE FteeKWouOhtMYbaXv/YeqjqWnkDQ1KR9j7Ry6DiRY7vd554aQCDQ0qmagp0LOy3i vvzYrhiYkdk1iylj95nDvPQGAQFeCydEq0+gZvYeVXudKZ+lTKBPaj3uB88MkeKn 0D2OiLGVXU/mYFTxW46eRqlVCYbWMn6JDIFjPbsPALoM0s0cJhemtA8o/Cmz6zxV /heF+TF9p6RQvoLSR93Ccpmp6Tg6Kihkauke6W0f9xJclQ+TouKoJ148tFekUZFI KD5z5Fbr2JyZMi1zFtp73ZRG8Hth4x/QUL1APpd1qIUfgjbAxTB/+3ORtQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFD3PTwwnc++YkA+cNZB1zKYdF8CzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzA5ODE3 Mi1jOThhLTQ4ZmMtYWZjNi0zYmRlNzM5NmI3YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvMDk4MTcy LWM5OGEtNDhmYy1hZmM2LTNiZGU3Mzk2YjdiNC8xL1BjOVBEQ2R6NzVpUUQ1dzFr SFhNcGgwWHdMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufAMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMf+zANBgkqhkiG9w0BAQsFAAOCAQEAOCEyzT++aRXweHV3T4UkWq7Wsm91zEdA PNy6ZvV0Mjw56nn9teiMa8Y8lWSVCweqopOuK9STCIEzl2m/eIG9HfFaEuqcLnuf W83yWpDRzsZ3bnNfr6PYK7ME0VOzwC3O67VuqJigB5bMF9oJuEHeJM5cZEYPy64V fZ1Bo63NshD7z35oELZ2XuMEbCTA5MoE/hMTV09rBeObX8ZxLxDgkBhdwH7XB9fX //Zaw7nesY8eptadpA4aRoa+2NegNb2bOnpHiUK8TOYfFQ4uRvAiCS1coZKSm26R 0JBz5b3PZe86jUGlq5H4do3yKnNietzXNiISOHo6vshYycQJk+gTQw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:12 2026 by rpki-client