This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.cer (raw, json) Hash identifier: QIY2E5J3rzm5h2/pVOHhNOpXYR+p09mFuXgvKWfnjl4= Subject key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED1551437FFFC9946FF7F6E710F735 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39247 IP: 195.72.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:15:51:43:7f:ff:c9:94:6f:f7:f6:e7:10:f7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcf53402fa76fa06376cdea6bcd395e180079db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:c1:18:70:32:6f:57:a9:c4:82:29:01:fa: 8d:ef:cb:47:c7:6e:8b:ea:e8:24:cf:b2:b3:24:99: bf:fd:52:ac:6a:23:d8:9e:e0:b1:ce:db:76:ff:c9: 04:f9:10:d0:ef:3b:cd:e2:9d:29:81:e9:b8:84:f0: 4f:a0:0d:49:54:4e:88:17:55:be:98:e6:7b:5a:b2: 39:66:f1:99:d3:2f:b5:c9:63:f0:ff:df:2e:2a:e9: c9:fb:90:cf:06:6b:56:13:d1:fc:a9:e3:36:54:d7: a9:1f:89:64:a7:92:56:05:a7:91:9b:0f:5a:5d:90: 84:dd:1d:73:22:2b:8a:f3:3d:40:c8:b3:25:2b:83: e7:f8:ff:af:67:74:ac:ec:fa:a8:81:d1:aa:95:41: 38:81:76:36:0b:d3:09:f5:08:39:9d:d6:71:fc:f0: 30:32:29:48:97:0a:11:e0:a7:18:ba:6d:aa:05:57: 6e:9d:38:03:be:a5:fb:d9:97:31:bd:0f:ab:b0:ee: ab:7f:c5:31:07:34:db:05:23:a9:80:45:07:20:03: 7c:2d:6a:9c:4e:70:63:ff:b6:85:e5:21:70:e6:19: f9:3f:1f:0f:a3:d8:65:85:39:eb:26:67:85:68:3c: c2:41:75:9c:2d:a0:f0:12:a4:6b:51:a9:dc:c3:e6: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.147.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39247 Signature Algorithm: sha256WithRSAEncryption 99:e8:65:8e:d7:de:a1:fd:88:82:80:70:f7:0d:93:8c:e0:b9: 94:02:b8:6a:0f:58:ec:33:eb:6d:cb:c2:f9:15:a7:fb:e3:8f: 11:11:44:a9:5c:c5:7c:ab:e4:6d:5a:9f:fa:07:19:c2:a5:0e: e3:89:5a:23:13:dd:7c:96:47:c3:0e:6a:4f:ea:1d:e2:58:db: 70:04:83:72:10:a4:8b:eb:46:29:96:e6:33:2c:de:5f:ff:fe: 2b:61:34:ea:28:de:ef:30:77:c3:8f:4b:55:ef:32:8d:9c:3c: e7:50:df:38:68:3a:c7:6e:88:79:a5:d2:77:83:da:2c:68:ed: 65:59:6d:1e:a7:fc:8e:d2:5a:69:b5:6b:64:e8:29:8b:fa:9c: da:e5:0a:42:fb:8d:5c:6a:17:bb:99:01:1b:17:39:b7:ce:64: f3:72:11:24:a2:88:37:a3:63:23:0a:08:05:52:89:4f:e3:c7: 9b:63:0a:b7:4a:8e:cc:1a:63:ce:f6:40:7a:54:16:e7:a0:f9: 98:0f:99:e8:6e:84:30:5b:ec:55:45:f7:e0:8f:57:bc:8e:5d: 69:0e:70:61:2a:b4:d5:ed:7c:b5:85:23:a9:a6:98:77:03:d5: 10:f6:b0:3b:ad:d4:b8:cb:52:d3:27:57:40:61:1b:01:cb:0b: 98:76:d9:9e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87RVRQ3//yZRv9/bnEPc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Y1MzQwMmZhNzZmYTA2Mzc2Y2RlYTZiY2QzOTVlMTgwMDc5ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8TBGHAyb1epxIIpAfqN78tHx26L 6ugkz7KzJJm//VKsaiPYnuCxztt2/8kE+RDQ7zvN4p0pgem4hPBPoA1JVE6IF1W+ mOZ7WrI5ZvGZ0y+1yWPw/98uKunJ+5DPBmtWE9H8qeM2VNepH4lkp5JWBaeRmw9a XZCE3R1zIiuK8z1AyLMlK4Pn+P+vZ3Ss7PqogdGqlUE4gXY2C9MJ9Qg5ndZx/PAw MilIlwoR4KcYum2qBVdunTgDvqX72ZcxvQ+rsO6rf8UxBzTbBSOpgEUHIAN8LWqc TnBj/7aF5SFw5hn5Px8Po9hlhTnrJmeFaDzCQXWcLaDwEqRrUancw+Yw0wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPz1NAL6dvoGN2zeprzTleGAB523MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzhjODMx My1lZDFjLTQxNGItYjRjYy01ZWQwNTcwMjU1MTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvOGM4MzEz LWVkMWMtNDE0Yi1iNGNjLTVlZDA1NzAyNTUxNi8xL19QVTBBdnAyLWdZM2JONm12 Tk9WNFlBSG5iYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0iTMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCZTzANBgkqhkiG9w0BAQsFAAOCAQEAmehljtfeof2IgoBw9w2TjOC5lAK4ag9Y 7DPrbcvC+RWn++OPERFEqVzFfKvkbVqf+gcZwqUO44laIxPdfJZHww5qT+od4ljb cASDchCki+tGKZbmMyzeX//+K2E06ije7zB3w49LVe8yjZw851DfOGg6x26IeaXS d4PaLGjtZVltHqf8jtJaabVrZOgpi/qc2uUKQvuNXGoXu5kBGxc5t85k83IRJKKI N6NjIwoIBVKJT+PHm2MKt0qOzBpjzvZAelQW56D5mA+Z6G6EMFvsVUX34I9XvI5d aQ5wYSq01e18tYUjqaaYdwPVEPawO63UuMtS0ydXQGEbAcsLmHbZng== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:30 2026 by rpki-client