This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer File: PrkDKEodFdwVitcYLqC854bOsq0.cer (raw, json) Hash identifier: 3h6T+5QeyF2pXbIC+rV6T1W6/DmalXtSLuWBiDDdC4Q= Subject key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EE4F1C68C8DD845B58E54EBE61F6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8865 AS: 29414 IP: 37.128.152.0/21 IP: 82.139.128.0/18 IP: 89.31.64.0/21 IP: 130.180.192.0/21 IP: 185.61.4.0/22 IP: 212.33.64.0/19 IP: 2a02:1770::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e4:f1:c6:8c:8d:d8:45:b5:8e:54:eb:e6:1f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:a1:b1:7c:5d:fb:e7:7c:cf:f5:63:44:11: d4:75:5c:1e:29:08:fa:18:13:53:91:1b:fa:27:6a: de:74:4a:15:12:d8:01:84:35:50:93:97:d3:81:f0: 2c:21:88:37:d6:ba:fa:6a:f7:32:bd:8d:0a:9d:e4: 0a:d8:b6:3f:65:a0:ce:b0:0e:58:f0:d0:f6:95:27: 2c:8a:8b:40:79:91:7d:02:9f:c4:7a:80:9c:b0:61: ea:e4:8d:f1:71:a6:af:bb:51:4d:86:5d:85:e8:57: 62:2d:ff:e9:e7:99:04:f4:e1:47:5c:fb:dc:2a:93: 98:ea:a4:c7:81:a3:28:99:85:14:8b:b8:73:68:23: 88:b5:cf:f5:7a:0a:ca:5b:8e:36:cf:3b:a1:db:e1: 57:96:56:97:b6:81:01:e3:a1:01:84:5d:99:16:96: 7c:84:ef:e5:d6:f4:ce:7a:35:b5:40:02:98:03:63: 3d:38:41:0e:18:b0:39:ef:06:b3:fa:ab:81:13:8c: 09:ac:85:33:ef:38:0f:80:01:c8:8b:68:53:5a:73: af:fa:00:de:06:fd:13:81:e3:73:a1:7f:9c:fe:36: 65:d4:b8:f0:99:24:fe:4c:27:49:e0:67:54:6c:42: b4:a7:1b:c4:6e:23:95:9c:70:ad:19:d2:b4:fb:54: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.128.152.0/21 82.139.128.0/18 89.31.64.0/21 130.180.192.0/21 185.61.4.0/22 212.33.64.0/19 IPv6: 2a02:1770::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8865 29414 Signature Algorithm: sha256WithRSAEncryption 9e:91:ab:20:eb:0a:74:9b:83:20:00:98:d8:76:5a:7b:bd:3b: 0e:d9:3b:c8:26:51:c4:c7:b8:49:85:4c:90:11:1c:97:80:2f: a9:0d:4c:a5:76:b7:4a:9b:d8:04:92:d6:32:52:f0:f5:fb:e0: 59:76:c3:99:5d:05:c4:58:f6:ea:6f:af:cc:06:37:e2:31:0c: 48:6c:8a:d5:f3:4e:6e:1f:aa:9f:27:68:6c:3d:40:cb:0f:44: b4:19:e8:49:6e:7e:e1:af:9e:6e:a1:00:c4:c2:ce:d8:e8:6b: f6:a3:37:5b:6d:ad:54:30:41:55:38:7f:d8:3d:bd:c3:29:fa: 1c:fd:3f:77:0c:3f:fa:20:dc:68:2b:6b:e3:e1:06:d3:50:b0: ed:28:cf:a9:c4:54:c5:47:62:44:a3:6e:dd:ad:c2:2d:1b:61: a2:90:27:50:6c:97:21:98:8a:60:dc:30:c5:e2:83:0b:84:3e: 0f:54:29:0d:94:d3:e4:8e:41:6f:6a:e5:8d:32:93:d9:c5:da: d6:ee:12:0c:4e:68:a3:5d:4a:07:cb:a9:81:ec:76:c9:52:47: db:e0:3a:7c:86:e4:59:92:10:56:b2:eb:20:11:9b:8a:92:e1: 7f:68:cf:74:67:83:62:1d:81:b4:5e:aa:b3:0a:d5:ba:04:b3: 10:1c:b1:62 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt8fuTxxoyN2EW1jlTr5h9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWI5MDMyODRhMWQxNWRjMTU4YWQ3MTgyZWEwYmNlNzg2Y2ViMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR6hsXxd++d8z/VjRBHUdVweKQj6 GBNTkRv6J2redEoVEtgBhDVQk5fTgfAsIYg31rr6avcyvY0KneQK2LY/ZaDOsA5Y 8ND2lScsiotAeZF9Ap/EeoCcsGHq5I3xcaavu1FNhl2F6FdiLf/p55kE9OFHXPvc KpOY6qTHgaMomYUUi7hzaCOItc/1egrKW442zzuh2+FXllaXtoEB46EBhF2ZFpZ8 hO/l1vTOejW1QAKYA2M9OEEOGLA57waz+quBE4wJrIUz7zgPgAHIi2hTWnOv+gDe Bv0TgeNzoX+c/jZl1LjwmST+TCdJ4GdUbEK0pxvEbiOVnHCtGdK0+1TDFwIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFD65AyhKHRXcFYrXGC6gvOeGzrKtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzkyZWE5 Zi1iMTJlLTRkZDUtOWJkMy1iNzdkYzhkYzFjN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvOTJlYTlm LWIxMmUtNGRkNS05YmQzLWI3N2RjOGRjMWM3ZS8xL1Bya0RLRW9kRmR3Vml0Y1lM cUM4NTRiT3NxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDJYCYAwQGUouAAwQDWR9AAwQDgrTAAwQCuT0E AwQF1CFAMA0EAgACMAcDBQAqAhdwMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAiKh AgJy5jANBgkqhkiG9w0BAQsFAAOCAQEAnpGrIOsKdJuDIACY2HZae707Dtk7yCZR xMe4SYVMkBEcl4AvqQ1MpXa3SpvYBJLWMlLw9fvgWXbDmV0FxFj26m+vzAY34jEM SGyK1fNObh+qnydobD1Ayw9EtBnoSW5+4a+ebqEAxMLO2Ohr9qM3W22tVDBBVTh/ 2D29wyn6HP0/dww/+iDcaCtr4+EG01Cw7SjPqcRUxUdiRKNu3a3CLRthopAnUGyX IZiKYNwwxeKDC4Q+D1QpDZTT5I5Bb2rljTKT2cXa1u4SDE5oo11KB8upgex2yVJH 2+A6fIbkWZIQVrLrIBGbipLhf2jPdGeDYh2BtF6qswrVugSzEByxYg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:06 2026 by rpki-client