This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer File: PcOGJxwOCo0B-xkNaNhf92TRatQ.cer (raw, json) Hash identifier: AJcYlrdcMMaj9uxwSB63euUgMxaqmnpOpff1RyVJBoY= Subject key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8C0D6597AEF0406372EC7817C1A22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.37.236.0/24 IP: 185.206.34.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c0:d6:59:7a:ef:04:06:37:2e:c7:81:7c:1a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:83:ea:69:b6:d7:c8:b2:99:7a:5c:29:37:49: ac:57:aa:52:07:18:3d:85:35:0a:df:a2:4d:9d:83: 45:97:25:61:ee:d3:c1:c0:95:4f:ea:23:a2:c9:98: 69:f6:83:d2:73:8c:79:70:9d:7a:24:12:31:33:bf: 84:1c:86:e1:cf:5f:0f:7f:c7:98:21:a4:b5:56:68: 84:bb:7e:9e:9a:f5:2b:d9:8d:09:c6:82:4c:ba:14: cc:71:b0:b5:fa:8b:68:bf:ae:12:6c:47:68:81:b5: af:9e:35:36:52:fc:32:f5:73:24:d7:f3:44:92:66: 46:04:d9:e9:56:1a:02:e7:07:0f:f5:06:51:7b:9a: f3:d0:4b:36:ff:b2:a0:b2:16:37:27:e3:26:87:b4: 6b:ac:98:61:67:57:d8:e3:29:61:2b:6d:4d:53:32: 08:44:6b:9b:d9:e6:be:3b:b0:2a:a9:29:5f:32:39: bd:70:ac:bc:f7:ad:e6:f1:42:2b:a4:92:34:0c:07: 9a:d8:ad:fa:ec:42:a9:56:de:85:0d:c7:1f:08:69: 60:a0:e6:a1:00:6c:0b:1e:bd:b3:2c:d7:3a:c0:f6: 00:60:0e:4d:fd:96:e9:7e:27:97:0a:d2:b9:bf:46: 6a:66:ff:38:b1:9a:18:21:84:a0:85:74:81:65:23: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.236.0/24 185.206.34.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:57:3f:52:fa:c2:cd:15:3a:c5:26:12:2e:89:6d:8d:88:69: 69:ca:3e:78:9d:3a:46:f8:2a:06:bd:8a:46:71:6a:8b:da:3d: e2:38:6f:49:25:c9:8c:e1:eb:82:5a:cc:28:87:e2:6c:ca:5e: 98:99:09:69:5a:6a:ca:65:bd:9a:7d:1e:7f:65:28:33:31:03: 13:36:2c:3a:62:1a:7f:24:ed:a9:fe:ae:99:c4:e5:6c:75:7b: a1:ba:6e:b1:e1:61:f4:8d:cb:22:92:88:fa:f0:ab:21:dc:dd: d1:3d:bb:9a:87:f2:d8:02:50:a8:ca:94:d8:10:7a:c4:a2:cf: 7c:65:a6:ae:80:4d:fa:16:a4:aa:21:3b:50:49:6f:d8:f4:60: 3b:b0:ed:01:e1:ef:7a:f7:eb:3e:7d:28:90:62:5c:1c:1b:b7: 15:02:07:df:39:c7:0a:2e:18:00:51:84:d6:bb:7b:71:a3:74: eb:e4:ee:ac:0b:d0:cb:3a:d4:3f:d9:3b:37:7d:68:bc:91:fc: 0d:f7:0a:70:a5:b5:39:88:d0:a8:e4:be:35:86:aa:2e:9c:32: 28:79:6f:99:55:b2:44:c4:21:25:00:70:3e:cf:bb:89:95:26: 97:4f:1e:fd:38:84:52:d0:72:1b:c1:5f:83:94:6b:52:f5:b0: d4:34:78:3a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6yMDWWXrvBAY3LseBfBoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGMzODYyNzFjMGUwYThkMDFmYjE5MGQ2OGQ4NWZmNzY0ZDE2YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYPqabbXyLKZelwpN0msV6pSBxg9 hTUK36JNnYNFlyVh7tPBwJVP6iOiyZhp9oPSc4x5cJ16JBIxM7+EHIbhz18Pf8eY IaS1VmiEu36emvUr2Y0JxoJMuhTMcbC1+otov64SbEdogbWvnjU2Uvwy9XMk1/NE kmZGBNnpVhoC5wcP9QZRe5rz0Es2/7KgshY3J+Mmh7RrrJhhZ1fY4ylhK21NUzII RGub2ea+O7AqqSlfMjm9cKy8963m8UIrpJI0DAea2K367EKpVt6FDccfCGlgoOah AGwLHr2zLNc6wPYAYA5N/ZbpfieXCtK5v0ZqZv84sZoYIYSghXSBZSMXewIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFD3DhiccDgqNAfsZDWjYX/dk0WrUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2YyNjRi Yi1lZmRkLTQ0OTctYmMxMC1kZGZlZjNjNmFkOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZjI2NGJi LWVmZGQtNDQ5Ny1iYzEwLWRkZmVmM2M2YWQ5ZS8xL1BjT0dKeHdPQ28wQi14a05h TmhmOTJUUmF0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAuSXsAwQBuc4iMA0GCSqGSIb3DQEBCwUAA4IB AQA+Vz9S+sLNFTrFJhIuiW2NiGlpyj54nTpG+CoGvYpGcWqL2j3iOG9JJcmM4euC Wswoh+Jsyl6YmQlpWmrKZb2afR5/ZSgzMQMTNiw6Yhp/JO2p/q6ZxOVsdXuhum6x 4WH0jcsikoj68Ksh3N3RPbuah/LYAlCoypTYEHrEos98ZaaugE36FqSqITtQSW/Y 9GA7sO0B4e969+s+fSiQYlwcG7cVAgffOccKLhgAUYTWu3txo3Tr5O6sC9DLOtQ/ 2Ts3fWi8kfwN9wpwpbU5iNCo5L41hqounDIoeW+ZVbJExCElAHA+z7uJlSaXTx79 OIRS0HIbwV+DlGtS9bDUNHg6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:00 2026 by rpki-client