This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer File: PxyTi7IGo4ltBkwIUvqYhf8s69k.cer (raw, json) Hash identifier: fnUPnAywFKP4NSrZFS6k+XhJ/e8AdB2jqRXZ+QtQCG8= Subject key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB593DD54D414E582BF97CE33958A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203343 IP: 185.120.24.0/22 IP: 2a0f:a5c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:59:3d:d5:4d:41:4e:58:2b:f9:7c:e3:39:58:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3b:e2:d0:2d:0b:04:61:e5:c4:5e:2e:36:61: 22:16:1b:06:9f:e0:df:22:2a:8f:5e:64:bf:8a:a7: 09:0b:fd:6c:5c:24:74:d7:34:ef:50:ec:c7:79:d4: 7c:30:4d:5f:78:43:54:d5:7f:66:a9:ce:48:6e:92: f6:6c:25:18:df:23:96:30:5e:79:82:d2:fb:9e:89: 60:b3:a5:16:0a:0e:24:31:9e:ca:12:6d:23:01:da: 0b:59:87:ba:5e:3d:00:99:ed:91:61:d2:1c:d4:24: 62:5a:ff:ab:53:42:f9:b1:e1:e4:e6:9b:f0:92:40: 01:42:79:66:7a:07:d9:dd:9f:3c:4c:a6:9f:3b:9c: 90:e1:27:60:91:5c:6a:b4:7f:3c:a4:be:b3:2e:7e: a3:14:b5:9a:6d:b2:55:b3:5f:f6:4c:f5:29:1e:8c: 0c:74:2d:61:1f:22:83:87:8b:90:44:06:65:9c:f1: 1f:91:31:08:27:37:fe:d4:26:e6:40:2f:88:f4:9a: 26:69:0f:a2:57:31:9c:a8:a3:2d:79:2b:e3:c1:3c: fd:e7:10:87:b5:e5:0a:1a:09:1a:71:c4:7e:c9:f4: 83:2e:d5:d1:ef:50:88:60:aa:24:5f:89:ad:c2:d4: eb:c4:c0:8e:f5:f3:b9:ed:86:6c:fc:87:b3:01:d7: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.24.0/22 IPv6: 2a0f:a5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203343 Signature Algorithm: sha256WithRSAEncryption 98:42:23:9c:9b:d9:1f:89:5b:5e:8c:26:98:12:0b:c9:3a:10: d3:d5:14:85:8d:2a:98:33:51:58:a6:b4:00:fb:0d:eb:4b:7b: 7b:69:d8:4e:92:c1:45:73:fe:33:a5:ef:b0:99:5e:b1:51:5e: be:ef:d5:a5:39:33:0f:b0:30:f7:6e:59:6c:31:97:75:f9:f5: 84:ff:93:f4:f7:7f:a9:b5:48:62:03:04:b2:cd:0d:5b:48:5b: c0:cd:cd:b6:ce:64:9f:58:00:2f:f2:22:26:b4:3a:e2:b0:36: fa:8d:0a:65:c8:9a:22:7b:30:0a:88:85:41:e2:86:2b:db:8b: 2a:34:35:6b:7f:0c:c2:95:60:f9:01:71:96:3b:12:28:c4:96: 29:fb:81:8a:e8:6d:ed:2c:ac:80:cf:84:1e:07:f0:0c:5d:7f: 27:22:3f:58:a1:48:77:58:12:9c:aa:ca:e2:15:14:b3:5b:9e: 9b:67:78:2a:47:64:bb:48:72:58:e0:58:25:f9:9c:8e:f7:f3: 10:7f:d9:0e:2b:9f:d3:33:34:c2:33:8c:9a:56:f0:8f:5b:68: 45:e3:e6:00:65:2d:d1:be:ff:7c:02:ff:df:15:50:3e:bf:54: a5:a3:cb:4d:86:2a:56:30:70:e1:c3:8b:7f:66:ac:80:2e:5e: c2:22:30:14 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt261k91U1BTlgr+XzjOVikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFjOTM4YmIyMDZhMzg5NmQwNjRjMDg1MmZhOTg4NWZmMmNlYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTvi0C0LBGHlxF4uNmEiFhsGn+Df IiqPXmS/iqcJC/1sXCR01zTvUOzHedR8ME1feENU1X9mqc5IbpL2bCUY3yOWMF55 gtL7nolgs6UWCg4kMZ7KEm0jAdoLWYe6Xj0Ame2RYdIc1CRiWv+rU0L5seHk5pvw kkABQnlmegfZ3Z88TKafO5yQ4SdgkVxqtH88pL6zLn6jFLWabbJVs1/2TPUpHowM dC1hHyKDh4uQRAZlnPEfkTEIJzf+1CbmQC+I9JomaQ+iVzGcqKMteSvjwTz95xCH teUKGgkaccR+yfSDLtXR71CIYKokX4mtwtTrxMCO9fO57YZs/IezAdfTUQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD8ck4uyBqOJbQZMCFL6mIX/LOvZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzNiMjQ5 Yy1iNDBlLTRmYjktOGZmNC1lMDUyNjAzM2E0ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvM2IyNDlj LWI0MGUtNGZiOS04ZmY0LWUwNTI2MDMzYTQ4NC8xL1B4eVRpN0lHbzRsdEJrd0lV dnFZaGY4czY5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXgYMA0EAgACMAcDBQAqD6XAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaTzANBgkqhkiG9w0BAQsFAAOCAQEAmEIjnJvZH4lb XowmmBILyToQ09UUhY0qmDNRWKa0APsN60t7e2nYTpLBRXP+M6XvsJlesVFevu/V pTkzD7Aw925ZbDGXdfn1hP+T9Pd/qbVIYgMEss0NW0hbwM3Nts5kn1gAL/IiJrQ6 4rA2+o0KZciaInswCoiFQeKGK9uLKjQ1a38MwpVg+QFxljsSKMSWKfuBiuht7Sys gM+EHgfwDF1/JyI/WKFId1gSnKrK4hUUs1uem2d4Kkdku0hyWOBYJfmcjvfzEH/Z Diuf0zM0wjOMmlbwj1toRePmAGUt0b7/fAL/3xVQPr9UpaPLTYYqVjBw4cOLf2as gC5ewiIwFA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:09 2026 by rpki-client