This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer (raw, json) Hash identifier: 6IpTVqutAnNjP/lR6HyfovwoiGl2038AV8K5D2kW4/Q= Subject key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC29D7656CDB03787102BEDB67889 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43989 IP: 79.98.40.0/21 IP: 93.188.96.0/21 IP: 109.234.56.0/21 IP: 185.181.136.0/22 IP: 195.206.246.0/23 IP: 195.216.202.0/23 IP: 213.217.7.0/24 IP: 2a01:b600::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c2:9d:76:56:cd:b0:37:87:10:2b:ed:b6:78:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:44:d5:b3:cc:99:30:9b:38:78:dd:bc:6d: 5b:93:cf:69:75:34:90:fd:d2:50:c5:0b:75:64:36: ff:70:6f:9a:3c:07:f8:b4:f7:69:3e:3b:e9:ca:82: f5:61:c6:eb:b3:35:8d:49:41:e6:aa:6e:be:e7:83: 44:8d:21:bf:0c:d2:f4:a2:8e:d3:27:1f:64:13:3b: bf:af:13:ad:f2:d0:85:9a:e6:6a:82:58:ab:3b:ef: fb:11:ce:ec:f0:e7:0b:d7:7b:61:e6:86:99:cb:0a: ee:9d:06:86:98:9d:2d:5b:f1:83:08:1b:5c:00:5f: d5:e8:fa:a3:46:cf:38:c8:ba:7a:04:18:d1:d9:4b: 63:85:4a:62:4f:88:bf:62:69:f6:47:9b:10:f6:ea: 14:69:15:fc:9e:0e:26:25:ee:d4:98:8e:4f:68:15: b0:7a:bc:7b:50:c5:3f:88:32:ac:74:24:5e:be:a3: e2:b7:24:f6:ff:b1:0f:22:58:e1:30:f8:a6:d8:46: 4a:f1:5f:e9:7d:50:3b:e0:26:bb:0d:7f:3a:24:cc: 75:f3:16:ad:52:88:9f:1b:8a:36:1a:03:5c:b8:00: 9b:c1:6a:80:40:b6:8a:1b:36:f1:66:be:c7:3e:eb: 44:d4:76:d3:a7:e7:45:a8:2c:c5:a8:30:9e:00:82: dc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.40.0/21 93.188.96.0/21 109.234.56.0/21 185.181.136.0/22 195.206.246.0/23 195.216.202.0/23 213.217.7.0/24 IPv6: 2a01:b600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43989 Signature Algorithm: sha256WithRSAEncryption 17:cc:a8:3c:07:73:74:30:ae:31:49:56:0a:54:89:2d:3a:44: bd:cc:a7:fb:03:6c:5c:9e:46:c0:17:7c:54:88:82:cf:36:ea: 53:b9:f0:a5:5b:8f:65:7d:87:f1:c9:39:57:2b:97:de:dc:c6: 33:0d:30:df:1e:0b:e0:26:02:88:ab:23:a1:b7:12:8c:3f:dd: 1f:19:65:36:30:4d:f7:5a:81:76:6c:22:0b:61:33:be:c5:30: 50:f6:d9:8c:69:38:23:fe:68:1a:58:fb:34:90:50:a8:5b:2b: fa:fd:b2:78:cb:33:6a:56:a1:f6:fb:e7:2b:88:80:d9:95:f7: 81:d7:30:6e:ca:52:e8:39:10:78:9b:f4:8c:5f:79:d0:c3:fd: 11:ee:fe:d8:45:8c:9a:e2:0f:30:99:e9:ba:65:ef:a5:e3:a7: 67:5c:a4:58:4b:37:f4:aa:d8:38:47:28:9a:93:45:89:37:d2: 33:54:d9:a2:8a:62:ff:d1:79:e0:a7:5d:b7:12:ad:d8:53:da: 1f:cd:18:13:90:98:ac:5a:2e:dd:51:4e:1a:31:82:30:fa:2d: 3c:b1:07:1d:ac:58:9c:1c:f3:48:d4:23:69:8a:c2:09:8b:cc: 3a:6b:f0:59:4d:f2:11:ed:5f:22:f2:c3:9b:6a:46:ae:30:e5: 3e:53:3c:c7 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt5fsKddlbNsDeHECvttniJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmYzZDE4MzM2NjQyYjZhOWFjOGFlZGZmYmY3YWVlNmU1ZTYyOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8xE1bPMmTCbOHjdvG1bk89pdTSQ /dJQxQt1ZDb/cG+aPAf4tPdpPjvpyoL1YcbrszWNSUHmqm6+54NEjSG/DNL0oo7T Jx9kEzu/rxOt8tCFmuZqglirO+/7Ec7s8OcL13th5oaZywrunQaGmJ0tW/GDCBtc AF/V6PqjRs84yLp6BBjR2UtjhUpiT4i/Ymn2R5sQ9uoUaRX8ng4mJe7UmI5PaBWw erx7UMU/iDKsdCRevqPityT2/7EPIljhMPim2EZK8V/pfVA74Ca7DX86JMx18xat UoifG4o2GgNcuACbwWqAQLaKGzbxZr7HPutE1HbTp+dFqCzFqDCeAILctQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFEvz0YM2ZCtqmsiu3/v3rubl5in0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzY0Mjg5 Ny01MzBlLTQ2MTMtYWY4NC0wZGEzMDBjN2M2M2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvNjQyODk3 LTUzMGUtNDYxMy1hZjg0LTBkYTMwMGM3YzYzZC8xL1NfUFJnelprSzJxYXlLN2Yt X2V1NXVYbUtmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDT2IoAwQDXbxgAwQDbeo4AwQCubWIAwQBw872 AwQBw9jKAwQA1dkHMA0EAgACMAcDBQAqAbYAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCr1TANBgkqhkiG9w0BAQsFAAOCAQEAF8yoPAdzdDCuMUlWClSJLTpEvcyn +wNsXJ5GwBd8VIiCzzbqU7nwpVuPZX2H8ck5VyuX3tzGMw0w3x4L4CYCiKsjobcS jD/dHxllNjBN91qBdmwiC2EzvsUwUPbZjGk4I/5oGlj7NJBQqFsr+v2yeMszalah 9vvnK4iA2ZX3gdcwbspS6DkQeJv0jF950MP9Ee7+2EWMmuIPMJnpumXvpeOnZ1yk WEs39KrYOEcompNFiTfSM1TZoopi/9F54KddtxKt2FPaH80YE5CYrFou3VFOGjGC MPotPLEHHaxYnBzzSNQjaYrCCYvMOmvwWU3yEe1fIvLDm2pGrjDlPlM8xw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:53 2026 by rpki-client