This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer File: Phq1-Isc13KPF3zIbjO8654iFLI.cer (raw, json) Hash identifier: JABM79QNl12enMTJeZppCi5b19UceQgLvBUv8VC4iI8= Subject key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C00DF4ABBA1EA247E3F955FA0BD80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39172 IP: 185.53.60.0/22 IP: 2a04:ca40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:00:df:4a:bb:a1:ea:24:7e:3f:95:5f:a0:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:87:88:d7:67:71:40:25:99:21:fc:55:b7: 7b:88:81:eb:5b:d6:7e:54:06:cf:aa:b8:c7:48:46: f3:dc:0b:3d:65:55:58:9b:fd:db:2d:79:a9:97:6c: 06:b2:50:00:a1:1c:e8:c2:37:25:e2:ea:35:e0:25: 4e:b8:36:cb:9a:0f:c7:00:92:ab:67:86:6a:cd:b1: 94:f3:99:c9:2e:42:49:8c:85:52:15:d5:f7:8f:08: 86:49:83:92:fb:d5:87:9a:54:25:5d:fc:53:f9:75: 08:22:1b:7e:a1:ca:08:5c:c7:4e:90:50:5d:ac:10: a9:fe:21:85:95:0d:a4:56:73:8a:24:06:ff:d4:b8: e6:7e:8e:c4:87:f2:1e:16:1a:8b:90:56:f6:e8:03: 31:7d:6f:00:54:97:b1:b6:57:dd:7d:28:ef:db:40: d3:a2:da:f8:16:62:e1:d6:c9:16:08:95:52:e2:15: 8f:52:92:6a:2e:bf:25:d0:08:06:8d:e0:24:59:dd: ab:9a:40:fb:0b:99:b1:d7:db:3e:a5:e7:90:4f:a8: 07:ba:a4:89:8d:0d:dd:c2:1c:df:e6:12:d5:a3:72: 1c:6d:5a:16:a9:80:d5:19:2c:65:2d:71:9b:8f:a1: b2:2c:51:73:2d:22:4d:c4:24:6e:0f:25:ff:de:9f: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.60.0/22 IPv6: 2a04:ca40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39172 Signature Algorithm: sha256WithRSAEncryption 29:c2:e6:37:e7:3a:39:71:33:89:52:49:bf:d4:af:5d:72:e8: 0f:00:eb:0c:cb:9f:df:25:1c:44:9a:b8:3b:3f:af:d7:3b:49: f7:c5:40:c3:4a:57:64:98:ac:87:21:ef:a9:9a:12:da:6b:91: b8:58:25:7e:50:4a:40:c4:53:5b:b0:d6:09:86:a5:2c:b4:ec: 54:a5:ed:27:0f:10:de:75:7a:df:4a:64:1f:f6:b7:2c:86:be: af:a1:2a:9b:9e:a2:93:62:5b:0d:7c:06:a2:ea:42:01:56:c3: b1:bf:69:39:84:02:f3:00:dc:bc:44:d8:c5:df:2d:da:18:73: fc:08:81:93:72:8f:d5:02:09:8d:53:1e:ec:60:fd:61:bc:d7: 7b:bd:e2:75:aa:77:61:81:ab:7f:a4:c3:e1:5a:ea:68:00:cc: 21:2c:36:ed:77:c4:f6:15:1d:48:ce:7b:23:0a:32:8e:22:c4: 8d:06:28:77:c0:4a:f0:51:c4:e5:91:f7:c5:58:a1:4f:e4:58: 82:22:2e:cf:d7:f6:c6:d1:33:4b:57:d3:53:52:ba:30:a0:9b: 36:d6:3a:b0:7f:13:ea:53:2c:c2:13:1a:50:7f:19:d7:5a:22: 90:2a:e2:bf:ab:c0:d8:9e:9b:fc:eb:eb:09:72:3a:35:04:94: c4:f2:b8:35 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XADfSruh6iR+P5VfoL2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTFhYjVmODhiMWNkNzcyOGYxNzdjYzg2ZTMzYmNlYjllMjIxNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7OHiNdncUAlmSH8Vbd7iIHrW9Z+ VAbPqrjHSEbz3As9ZVVYm/3bLXmpl2wGslAAoRzowjcl4uo14CVOuDbLmg/HAJKr Z4ZqzbGU85nJLkJJjIVSFdX3jwiGSYOS+9WHmlQlXfxT+XUIIht+ocoIXMdOkFBd rBCp/iGFlQ2kVnOKJAb/1Ljmfo7Eh/IeFhqLkFb26AMxfW8AVJextlfdfSjv20DT otr4FmLh1skWCJVS4hWPUpJqLr8l0AgGjeAkWd2rmkD7C5mx19s+peeQT6gHuqSJ jQ3dwhzf5hLVo3IcbVoWqYDVGSxlLXGbj6GyLFFzLSJNxCRuDyX/3p9U8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD4atfiLHNdyjxd8yG4zvOueIhSyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzhiMmFh Zi0zNDViLTQwYmItYTMxYi1mZDk4ZmQ3MGYzNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvOGIyYWFm LTM0NWItNDBiYi1hMzFiLWZkOThmZDcwZjM0Zi8xL1BocTEtSXNjMTNLUEYzekli ak84NjU0aUZMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTU8MA0EAgACMAcDBQMqBMpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCZBDANBgkqhkiG9w0BAQsFAAOCAQEAKcLmN+c6OXEz iVJJv9SvXXLoDwDrDMuf3yUcRJq4Oz+v1ztJ98VAw0pXZJishyHvqZoS2muRuFgl flBKQMRTW7DWCYalLLTsVKXtJw8Q3nV630pkH/a3LIa+r6Eqm56ik2JbDXwGoupC AVbDsb9pOYQC8wDcvETYxd8t2hhz/AiBk3KP1QIJjVMe7GD9YbzXe73idap3YYGr f6TD4VrqaADMISw27XfE9hUdSM57IwoyjiLEjQYod8BK8FHE5ZH3xVihT+RYgiIu z9f2xtEzS1fTU1K6MKCbNtY6sH8T6lMswhMaUH8Z11oikCriv6vA2J6b/OvrCXI6 NQSUxPK4NQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:16 2026 by rpki-client