This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer File: PnFWq-5roji5BzFd-cVShlrc2ug.cer (raw, json) Hash identifier: 26wA2C8KUx69QPSUc1/JzG3Mt6j0xbDA0i4aAKp/QHw= Subject key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C808DACD6092DB43DA567C0F7F070A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49775 IP: 45.15.40.0/24 IP: 2a0c:7d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8d:ac:d6:09:2d:b4:3d:a5:67:c0:f7:f0:70:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e7156abee6ba238b907315df9c552865adcdae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:75:32:ab:08:1d:2c:e1:41:2e:c9:c0:61: 7c:8f:9c:68:24:88:4e:2c:d4:c0:9b:c3:f8:48:af: 8a:b0:d6:60:64:73:54:ee:bb:51:3d:43:22:9f:da: 5a:65:98:a4:8f:e6:0e:03:43:b0:76:24:f7:72:ac: 32:78:d2:29:7b:6b:2e:e7:8b:78:af:6e:34:94:32: 45:2d:4a:f5:f4:59:7d:5b:7d:be:6b:fa:cf:a2:e7: 60:69:70:4e:45:b0:d5:0f:ea:ce:f8:4d:05:86:c4: de:9a:f1:61:c7:18:4f:80:f8:ed:85:66:2d:1c:71: fa:67:d7:67:58:50:c4:81:68:91:0c:1c:5f:1e:70: 04:be:2c:e3:29:07:e6:4c:3e:d9:83:e3:b4:1e:5a: 68:43:cd:c2:c9:01:1e:b3:05:67:1f:30:40:d7:8b: 48:74:87:d7:99:d5:39:24:ae:03:ab:1c:26:01:4c: f6:21:27:38:bb:7c:de:4f:60:6a:3b:8d:92:07:74: fb:1d:ae:4c:ab:b3:f7:f1:0f:66:34:0b:fe:a7:e0: c4:c1:7e:56:ba:a3:ac:93:82:ca:22:8d:f2:36:ee: 44:6e:7a:a1:d1:47:75:f8:21:86:4b:2f:33:ed:85: d7:b4:d9:73:b4:ca:ae:8c:b7:7a:20:75:66:e4:c1: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.40.0/24 IPv6: 2a0c:7d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49775 Signature Algorithm: sha256WithRSAEncryption 5d:f7:36:a7:36:39:e4:c1:76:23:00:9a:c1:01:1e:87:18:cc: f5:a7:5e:76:f3:49:8e:8a:d4:6c:30:0c:9d:c0:16:cd:84:67: 5b:a1:de:9f:75:66:f4:66:a1:da:19:3b:db:3d:7e:79:50:20: 26:ef:59:ef:7b:8b:ad:ff:50:4d:5d:ca:f9:ac:18:fc:d2:34: 28:02:61:34:dd:6e:c4:e3:b1:8a:70:18:2a:8b:ba:38:b0:68: cb:60:d3:d8:95:e7:2e:be:59:f8:b4:7f:87:22:9f:70:6d:00: b3:1c:e2:8f:a2:60:73:ee:ea:2c:dd:93:bb:91:55:3c:7a:f1: b4:76:16:61:34:b4:19:0b:72:b2:fd:39:71:b4:2e:2d:57:af: 11:90:06:63:b7:fd:9c:59:e6:0d:0f:12:46:81:6d:29:fc:b1: dc:6f:c8:a6:3d:ac:9e:c2:4e:b7:0b:fe:ed:9d:0e:3c:ad:0f: 16:17:30:83:9f:0b:13:6f:e0:c2:8f:0a:50:e0:d2:a0:2e:e9: 35:29:2b:de:27:05:04:87:32:1a:00:a6:86:22:ce:9a:c2:fb: ff:32:06:fe:4f:c4:1c:d4:d0:bf:ff:51:81:0b:16:90:cc:d8: 98:92:5d:b2:86:dd:f2:79:04:fc:92:76:cc:0d:57:99:a8:58: 3a:20:71:9e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gI2s1gkttD2lZ8D38HCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTcxNTZhYmVlNmJhMjM4YjkwNzMxNWRmOWM1NTI4NjVhZGNkYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/R1MqsIHSzhQS7JwGF8j5xoJIhO LNTAm8P4SK+KsNZgZHNU7rtRPUMin9paZZikj+YOA0OwdiT3cqwyeNIpe2su54t4 r240lDJFLUr19Fl9W32+a/rPoudgaXBORbDVD+rO+E0FhsTemvFhxxhPgPjthWYt HHH6Z9dnWFDEgWiRDBxfHnAEvizjKQfmTD7Zg+O0HlpoQ83CyQEeswVnHzBA14tI dIfXmdU5JK4DqxwmAUz2ISc4u3zeT2BqO42SB3T7Ha5Mq7P38Q9mNAv+p+DEwX5W uqOsk4LKIo3yNu5Ebnqh0Ud1+CGGSy8z7YXXtNlztMqujLd6IHVm5MFWhQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD5xVqvua6I4uQcxXfnFUoZa3NroMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2E0YTBm Ny03ZGJkLTRiMDMtYjdmOS01OGYyZDQ0ZmYyODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYTRhMGY3 LTdkYmQtNGIwMy1iN2Y5LTU4ZjJkNDRmZjI4MS8xL1BuRldxLTVyb2ppNUJ6RmQt Y1ZTaGxyYzJ1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALQ8oMA0EAgACMAcDBQMqDH2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDCbzANBgkqhkiG9w0BAQsFAAOCAQEAXfc2pzY55MF2 IwCawQEehxjM9adedvNJjorUbDAMncAWzYRnW6Hen3Vm9Gah2hk72z1+eVAgJu9Z 73uLrf9QTV3K+awY/NI0KAJhNN1uxOOxinAYKou6OLBoy2DT2JXnLr5Z+LR/hyKf cG0Asxzij6Jgc+7qLN2Tu5FVPHrxtHYWYTS0GQtysv05cbQuLVevEZAGY7f9nFnm DQ8SRoFtKfyx3G/Ipj2snsJOtwv+7Z0OPK0PFhcwg58LE2/gwo8KUODSoC7pNSkr 3icFBIcyGgCmhiLOmsL7/zIG/k/EHNTQv/9RgQsWkMzYmJJdsobd8nkE/JJ2zA1X mahYOiBxng== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:47 2026 by rpki-client