This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer File: Po3UOSjt-xIA77xixEH5zSkEhYU.cer (raw, json) Hash identifier: s+b0WYFXol98kKGRXh9IqBkXiJXTYNnV1Yrrpl739YY= Subject key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA69CAD3B81D0C8C31026AE2D141140 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60049 IP: 185.57.232.0/22 IP: 2a02:46e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9c:ad:3b:81:d0:c8:c3:10:26:ae:2d:14:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e8dd43928edfb1200efbc62c441f9cd29048585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:b4:78:0a:ab:33:fe:2c:55:63:01:3a:7b: 73:c7:99:19:75:d5:15:77:88:4c:00:dd:92:65:fe: 67:8f:75:83:a8:68:34:62:12:88:51:f7:f5:01:cd: ed:d7:16:3d:18:7e:b4:6a:e9:f6:7f:6b:46:0f:89: 14:64:85:9d:ef:7e:e4:95:16:8e:7b:43:8b:ad:9b: 71:04:de:53:15:23:87:35:43:6b:f4:cc:c6:6a:33: d8:4d:96:ae:bd:67:26:46:fa:c2:ad:82:1c:10:3b: da:27:b5:c8:bd:b5:56:dd:38:eb:5f:d5:0a:3e:d9: 3b:fc:d7:9a:4b:b1:fc:7f:7d:1c:82:8d:ba:9d:f8: 48:6e:34:3b:e0:87:b2:82:5c:79:96:01:55:74:33: c7:91:8b:ab:1b:e2:49:5f:84:dd:62:13:e8:ad:41: fd:85:ab:a7:66:ab:83:5d:37:b3:86:f4:19:a5:1b: 22:91:95:d1:82:0c:36:ad:57:01:75:eb:d8:3f:e1: 98:4e:c6:bb:05:8d:c6:b6:dc:7d:5a:82:59:4d:73: 03:df:71:08:e8:ae:dc:20:ec:1b:a5:da:90:f3:da: b5:c9:ae:43:b1:ca:2d:0c:88:fc:29:c8:ed:36:49: bc:49:96:78:8c:ab:92:56:68:6c:01:68:29:9f:17: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.232.0/22 IPv6: 2a02:46e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60049 Signature Algorithm: sha256WithRSAEncryption 6f:d5:f4:2e:8b:de:0b:84:92:cf:f3:5d:03:50:55:7e:cc:ba: e7:fd:2c:8e:f8:6b:17:06:f2:6d:6d:f7:e1:b5:32:71:d1:29: 12:e7:ab:6b:37:92:27:46:e8:18:57:a1:cf:d2:d8:60:cf:c7: 1a:95:01:45:8d:9d:dd:91:a1:70:7e:1e:58:b7:eb:d2:8e:ba: ae:66:79:ec:e4:9d:00:a0:c7:44:35:77:dd:5f:27:0b:8a:bd: e4:5b:bd:42:d0:6f:81:9e:0a:8e:52:28:6b:99:b5:30:a4:e4: 88:6c:50:99:6b:7b:62:f1:e9:b6:46:c8:fa:68:98:6d:7d:a7: 1b:4e:08:9a:27:56:51:49:3b:26:91:e1:a5:1d:e1:7b:72:a6: 48:f2:05:13:dc:0f:97:4e:da:03:37:9e:86:fe:14:0d:31:c7: 72:db:ec:d8:60:14:89:c3:c9:dd:43:d3:bb:a4:cf:70:e4:5e: e3:19:61:45:68:7f:73:44:a5:ba:d0:91:86:a6:70:a7:db:cc: ec:f7:b6:cc:0c:8e:af:a9:fb:44:13:aa:6d:b8:b0:9a:02:a5: 63:13:bd:d3:94:bb:9a:4f:aa:e3:97:9a:a1:22:06:39:ee:d5: 0e:e6:ba:17:5a:3c:22:b0:b8:15:87:48:56:2c:c4:97:2a:d7: a6:a6:6c:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+ppytO4HQyMMQJq4tFBFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZThkZDQzOTI4ZWRmYjEyMDBlZmJjNjJjNDQxZjljZDI5MDQ4NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYS0eAqrM/4sVWMBOntzx5kZddUV d4hMAN2SZf5nj3WDqGg0YhKIUff1Ac3t1xY9GH60aun2f2tGD4kUZIWd737klRaO e0OLrZtxBN5TFSOHNUNr9MzGajPYTZauvWcmRvrCrYIcEDvaJ7XIvbVW3TjrX9UK Ptk7/NeaS7H8f30cgo26nfhIbjQ74Ieyglx5lgFVdDPHkYurG+JJX4TdYhPorUH9 haunZquDXTezhvQZpRsikZXRggw2rVcBdevYP+GYTsa7BY3Gttx9WoJZTXMD33EI 6K7cIOwbpdqQ89q1ya5DscotDIj8KcjtNkm8SZZ4jKuSVmhsAWgpnxfjaQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD6N1Dko7fsSAO+8YsRB+c0pBIWFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2Y3ZWNi Ny1mZjZkLTQ1ZTAtOThkNi1jNzdiYWUzZDNlZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZjdlY2I3 LWZmNmQtNDVlMC05OGQ2LWM3N2JhZTNkM2VkMS8xL1BvM1VPU2p0LXhJQTc3eGl4 RUg1elNrRWhZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTnoMA0EAgACMAcDBQAqAkbgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDqkTANBgkqhkiG9w0BAQsFAAOCAQEAb9X0LoveC4SS z/NdA1BVfsy65/0sjvhrFwbybW334bUycdEpEuerazeSJ0boGFehz9LYYM/HGpUB RY2d3ZGhcH4eWLfr0o66rmZ57OSdAKDHRDV33V8nC4q95Fu9QtBvgZ4KjlIoa5m1 MKTkiGxQmWt7YvHptkbI+miYbX2nG04ImidWUUk7JpHhpR3he3KmSPIFE9wPl07a Azeehv4UDTHHctvs2GAUicPJ3UPTu6TPcORe4xlhRWh/c0SlutCRhqZwp9vM7Pe2 zAyOr6n7RBOqbbiwmgKlYxO905S7mk+q45eaoSIGOe7VDua6F1o8IrC4FYdIVizE lyrXpqZsRw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:00 2026 by rpki-client