This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer File: Pznde9c8PhuifReNVcJvipbNtKk.cer (raw, json) Hash identifier: zTzGl3DcEUCLfRDu68DfwYvFlwRvjlceQeztaPQ4lzE= Subject key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC83AA910737AA4FA35C76992E72734 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198694 IP: 92.249.20.0/22 IP: 2a13:62c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3a:a9:10:73:7a:a4:fa:35:c7:69:92:e7:27:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:58:2c:c7:ed:95:b7:94:85:87:22:9a:31: 53:bd:80:9b:7d:69:77:f2:01:f1:56:3d:ea:81:66: 79:3b:a8:d8:3e:0c:4f:df:9e:ef:c0:ec:5e:68:05: 2b:ff:e5:dc:64:49:d4:99:f6:24:94:2c:e0:c2:8e: 38:12:3d:9e:75:93:62:46:84:7d:eb:de:1a:e1:93: da:4e:86:a2:51:b7:4d:66:98:2b:5e:a5:fa:26:dc: 42:f6:9b:b9:d0:45:c4:9c:5b:3a:6e:fa:2a:ed:02: 44:6d:a6:bd:a2:63:42:60:85:4b:3c:17:15:7b:e9: 5d:79:02:68:f3:b9:b4:cf:84:97:05:12:e6:12:79: 2b:38:15:ee:90:cc:aa:b6:10:be:61:b2:23:e7:aa: 3a:f3:3c:b6:fb:65:23:a8:9d:14:0f:02:55:dc:86: b7:a8:9d:96:db:2d:24:a2:cf:54:32:8e:aa:3b:20: b5:1c:0e:ec:2f:84:4d:3b:2d:aa:c0:f8:20:e9:bd: 75:c6:ef:2e:51:0b:38:24:c0:08:49:77:d4:2c:d5: f3:68:eb:da:da:25:0b:5b:f5:fe:c0:4f:6f:1c:5c: a3:1d:31:19:d5:37:21:f0:45:0d:b5:95:ae:bd:ec: e7:34:9d:24:1a:67:7b:c7:77:ce:b3:64:5f:e4:54: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.20.0/22 IPv6: 2a13:62c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198694 Signature Algorithm: sha256WithRSAEncryption ab:19:eb:58:4e:11:ef:f7:f5:35:fb:fe:c4:55:ed:e8:c5:66: 36:c9:b2:2f:46:20:ea:07:03:57:d4:c0:82:0a:85:c2:7c:88: 17:f4:5b:9f:55:c9:b8:2e:14:b0:25:42:a2:df:00:53:59:58: 7c:9b:a0:bf:99:30:cc:14:fa:80:1f:c2:1e:f3:67:01:b4:9b: 3b:bb:40:ea:4c:1d:81:21:7b:06:fb:d6:05:d8:d4:cc:cc:b4: 26:5b:24:0e:f3:42:54:cf:7e:96:eb:5b:a4:f8:6f:19:1f:fd: 46:55:c4:8d:b3:08:ab:d6:12:51:af:21:f4:24:4e:a8:20:34: a7:e6:55:59:59:1f:5c:ff:9a:69:8f:76:31:66:8c:be:c3:0c: 75:cd:ae:58:85:9f:a2:28:f9:5b:39:b0:a9:63:9c:db:1f:9c: 27:fa:5a:62:4a:9c:01:79:c6:83:fd:b4:b6:7f:ff:c7:c1:cf: 6d:9f:90:48:6c:88:d3:4e:02:7a:03:4c:f2:17:bc:db:cb:a3: 5d:91:f8:4d:39:7f:8d:20:3a:2d:d5:9f:0e:c0:ed:9b:a7:95: de:18:07:7d:e9:a0:75:12:ff:5c:86:89:e9:30:c6:68:01:8e: a9:9d:79:52:64:06:18:a2:60:69:8c:e8:29:32:1a:66:01:d4: fc:20:6c:93 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yDqpEHN6pPo1x2mS5yc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjM5ZGQ3YmQ3M2MzZTFiYTI3ZDE3OGQ1NWMyNmY4YTk2Y2RiNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWdYLMftlbeUhYcimjFTvYCbfWl3 8gHxVj3qgWZ5O6jYPgxP357vwOxeaAUr/+XcZEnUmfYklCzgwo44Ej2edZNiRoR9 694a4ZPaToaiUbdNZpgrXqX6JtxC9pu50EXEnFs6bvoq7QJEbaa9omNCYIVLPBcV e+ldeQJo87m0z4SXBRLmEnkrOBXukMyqthC+YbIj56o68zy2+2UjqJ0UDwJV3Ia3 qJ2W2y0kos9UMo6qOyC1HA7sL4RNOy2qwPgg6b11xu8uUQs4JMAISXfULNXzaOva 2iULW/X+wE9vHFyjHTEZ1Tch8EUNtZWuveznNJ0kGmd7x3fOs2Rf5FQeywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD853XvXPD4bon0XjVXCb4qWzbSpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzYyMWVk ZC0xYjVhLTQ2YWMtYmExMy0wNGY5ZTYxNmFmNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNjIxZWRk LTFiNWEtNDZhYy1iYTEzLTA0ZjllNjE2YWY2MC8xL1B6bmRlOWM4UGh1aWZSZU5W Y0p2aXBiTnRLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCXPkUMA0EAgACMAcDBQMqE2LAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMIJjANBgkqhkiG9w0BAQsFAAOCAQEAqxnrWE4R7/f1 Nfv+xFXt6MVmNsmyL0Yg6gcDV9TAggqFwnyIF/Rbn1XJuC4UsCVCot8AU1lYfJug v5kwzBT6gB/CHvNnAbSbO7tA6kwdgSF7BvvWBdjUzMy0JlskDvNCVM9+lutbpPhv GR/9RlXEjbMIq9YSUa8h9CROqCA0p+ZVWVkfXP+aaY92MWaMvsMMdc2uWIWfoij5 WzmwqWOc2x+cJ/paYkqcAXnGg/20tn//x8HPbZ+QSGyI004CegNM8he828ujXZH4 TTl/jSA6LdWfDsDtm6eV3hgHfemgdRL/XIaJ6TDGaAGOqZ15UmQGGKJgaYzoKTIa ZgHU/CBskw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:44 2026 by rpki-client