This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer File: PgiDSzspc5CcCq9btdNUscDlyj4.cer (raw, json) Hash identifier: ssPuvC2+UqxhMI10Zv3bDsqVAtaPkN9k0vCvhemJ3fY= Subject key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE11E430290272A5137734180A357E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34600 IP: 193.29.254.0/24 IP: 193.30.1.0 -- 193.30.2.255 IP: 193.30.5.0/24 IP: 2a0f:7c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:11:e4:30:29:02:72:a5:13:77:34:18:0a:35:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:91:04:8f:be:68:51:7b:83:2c:77:a6:23: 8a:54:08:02:4b:2c:18:7e:2d:e0:55:00:ee:f5:96: 89:df:14:18:11:6b:9c:be:4e:2d:e4:85:fa:2c:41: 5b:5c:fd:3c:61:4d:62:d2:8e:ae:7c:6c:b4:cf:3a: 63:fe:06:62:22:8a:36:be:eb:c5:09:1a:2e:25:e7: 3e:5c:3e:da:d5:bf:08:7b:8e:72:5f:81:d6:80:08: 9a:d6:7e:0a:9a:37:ee:68:7f:48:91:50:7c:2b:c8: c1:fa:73:d9:54:f6:b1:ea:00:8e:5d:92:a9:c7:1f: ce:99:2d:53:44:f8:9a:8f:9f:78:a1:7c:43:23:46: 3e:08:17:6f:4d:03:15:3c:ec:07:bf:5b:ab:21:94: 38:8f:b7:6b:47:32:bb:77:a0:9b:2f:97:5e:fe:bd: 92:92:a8:9c:41:13:b1:d9:b6:05:47:49:a2:a3:10: c0:79:74:a7:03:a3:f6:fb:58:7a:1a:5b:87:fe:f9: 99:69:f5:6b:ed:ed:ab:ee:b4:ff:7a:42:6b:d3:12: a5:d2:fa:be:22:1f:bd:b1:18:10:7e:e4:48:a2:99: ad:be:ee:70:85:28:8e:ff:a2:9f:19:a3:8e:cb:9d: e9:e9:c6:0a:bb:d4:c3:6e:3d:d1:59:ac:0d:08:86: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.254.0/24 193.30.1.0-193.30.2.255 193.30.5.0/24 IPv6: 2a0f:7c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34600 Signature Algorithm: sha256WithRSAEncryption 91:ec:ea:e4:ed:73:0a:18:3b:c9:75:22:11:1a:c4:20:ff:0a: c0:9e:ca:f0:03:96:c3:67:c1:fe:eb:92:62:d2:18:d7:73:66: a7:35:92:e2:cb:20:b0:14:09:b7:57:1d:d9:c9:b6:48:49:35: a8:04:ce:6e:3c:f3:32:ab:f1:fb:68:2c:3c:ac:ff:0b:1c:38: 9a:9d:3e:ca:d2:b3:6f:cc:0e:08:50:7c:50:94:f2:38:b7:2b: 14:b1:90:49:0a:00:98:79:b8:0b:7a:63:22:ce:d5:9c:16:4e: 53:ad:0c:f2:84:23:36:3b:b8:ed:cb:0b:2f:e2:fb:d4:1c:90: c5:e4:a0:67:51:68:dc:d9:2c:56:75:a9:16:aa:3a:be:2a:c8: 16:1d:51:2e:4e:20:53:72:bc:b4:c6:bc:fa:35:eb:7d:81:37: 76:98:cb:e5:a4:90:e6:02:90:50:4e:84:d7:3c:2f:5b:5a:2a: 77:98:71:e8:03:ce:fe:05:8f:5e:5c:72:ce:ec:b6:a9:be:16: 7b:cd:6c:9f:39:8b:2f:9c:ba:d7:18:93:08:4a:52:f8:9f:84: dd:64:9d:65:22:c3:6c:6b:bf:ef:a9:3e:8d:3e:b6:33:4e:d9: d0:97:0e:e8:e8:b4:24:07:6e:28:b9:6f:0c:c8:e3:98:c9:51: 0f:3d:df:8b -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt87hHkMCkCcqUTdzQYCjV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTA4ODM0YjNiMjk3MzkwOWMwYWFmNWJiNWQzNTRiMWMwZTVjYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTqRBI++aFF7gyx3piOKVAgCSywY fi3gVQDu9ZaJ3xQYEWucvk4t5IX6LEFbXP08YU1i0o6ufGy0zzpj/gZiIoo2vuvF CRouJec+XD7a1b8Ie45yX4HWgAia1n4KmjfuaH9IkVB8K8jB+nPZVPax6gCOXZKp xx/OmS1TRPiaj594oXxDI0Y+CBdvTQMVPOwHv1urIZQ4j7drRzK7d6CbL5de/r2S kqicQROx2bYFR0mioxDAeXSnA6P2+1h6GluH/vmZafVr7e2r7rT/ekJr0xKl0vq+ Ih+9sRgQfuRIopmtvu5whSiO/6KfGaOOy53p6cYKu9TDbj3RWawNCIaM+QIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFD4Ig0s7KXOQnAqvW7XTVLHA5co+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2VmMDNi My03NDcyLTQ2ZGUtOTU4Ni1mZDdiOTczOWNhMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvZWYwM2Iz LTc0NzItNDZkZS05NTg2LWZkN2I5NzM5Y2EyNi8xL1BnaURTenNwYzVDY0NxOWJ0 ZE5Vc2NEbHlqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAwR3+MAwDBADBHgEDBADBHgIDBADBHgUwDQQC AAIwBwMFAyoPfEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIcoMA0GCSqGSIb3 DQEBCwUAA4IBAQCR7Ork7XMKGDvJdSIRGsQg/wrAnsrwA5bDZ8H+65Ji0hjXc2an NZLiyyCwFAm3Vx3ZybZISTWoBM5uPPMyq/H7aCw8rP8LHDianT7K0rNvzA4IUHxQ lPI4tysUsZBJCgCYebgLemMiztWcFk5TrQzyhCM2O7jtywsv4vvUHJDF5KBnUWjc 2SxWdakWqjq+KsgWHVEuTiBTcry0xrz6Net9gTd2mMvlpJDmApBQToTXPC9bWip3 mHHoA87+BY9eXHLO7LapvhZ7zWyfOYsvnLrXGJMISlL4n4TdZJ1lIsNsa7/vqT6N PrYzTtnQlw7o6LQkB24ouW8MyOOYyVEPPd+L -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:18 2026 by rpki-client