This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.cer (raw, json) Hash identifier: A1rxc8CgqiDa7PSi/5amJeLaw/O0T63nY1Cnfs9F2IM= Subject key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C16093BC04192743B8ECD75A31758 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202814 IP: 171.22.140.0/22 IP: 185.139.192.0/22 IP: 2a06:f440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:16:09:3b:c0:41:92:74:3b:8e:cd:75:a3:17:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:d4:4c:eb:86:dd:27:42:55:97:32:ae:1b: c6:58:62:bb:83:a4:8c:d9:cf:9b:8e:12:61:8c:9c: 5f:31:f5:55:7f:73:bf:9c:75:60:9f:98:34:93:30: 57:81:a0:c9:ec:c5:34:87:93:76:90:bd:5f:e1:07: 94:e7:4c:5b:80:84:6c:63:cb:c0:1a:30:cd:bd:e5: 89:ae:a3:3d:88:f3:84:31:3a:4f:7f:19:25:81:c3: 25:95:4c:66:38:fa:80:75:68:b0:eb:86:8e:24:15: d9:77:ae:c6:2c:2c:88:5a:8b:f1:65:23:0b:84:87: c6:21:da:9c:ad:9c:a4:43:5c:f0:fd:0e:6e:8b:cc: 5d:00:e0:53:3e:2a:64:10:6a:4c:e4:db:21:ee:5f: 74:38:35:c9:55:fd:bd:88:6d:9f:5e:a4:10:5e:6a: 5b:36:cc:a3:52:9a:25:a7:66:84:0a:c4:59:f3:e4: be:2d:86:cb:32:61:30:e1:73:8f:a5:e3:69:d3:ce: 1d:d6:62:95:81:21:e2:8f:33:dd:89:ec:93:8d:c6: 3a:b1:72:01:22:b0:06:87:fc:06:e9:06:c6:ad:cb: 46:13:b4:6d:90:12:f8:b3:a4:b1:20:3a:92:0c:b1: ad:55:7c:15:9f:90:f9:d0:5b:bc:c8:a2:11:5f:56: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.140.0/22 185.139.192.0/22 IPv6: 2a06:f440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202814 Signature Algorithm: sha256WithRSAEncryption af:ef:15:a3:68:cf:a0:79:09:32:10:49:90:01:1c:fa:0b:7b: 29:eb:1e:e7:8b:a2:a2:8f:79:01:43:70:42:c7:2a:9b:67:23: 28:8b:45:66:0b:ca:fe:21:32:ea:f6:b6:99:1a:39:fe:5b:5a: 02:ad:6a:39:31:14:db:37:e1:5a:00:35:59:5e:1b:eb:a2:03: f0:6b:c3:e9:6f:4e:ab:d2:e4:4d:de:79:59:4c:5b:87:61:97: 3a:08:a8:52:48:b1:e1:f2:53:93:9a:56:3d:e3:c3:ed:d8:04: 6c:3a:59:2d:a3:23:81:e6:2e:0e:ba:78:d5:40:91:1a:d1:cd: 00:a1:21:89:ef:a4:fc:9c:b8:9e:02:e0:e2:35:18:94:85:f9: 50:50:ed:7f:d5:7e:1a:e2:29:ab:8e:25:4f:b8:57:a1:9a:b4: 1a:f9:dc:d8:9e:4b:6a:57:4f:a8:1a:55:19:d8:33:8c:81:f0: a3:c1:38:cc:0c:3a:64:65:9b:23:e3:5e:c8:3f:6e:70:eb:7b: 8a:0b:c8:c2:14:cd:42:5c:f2:b7:9b:eb:2a:9e:1b:57:65:a7: b8:15:a5:81:0a:03:c3:15:72:7e:0a:dc:94:8a:d9:f4:76:12: d6:d4:62:97:c8:f2:3b:1e:29:9b:f5:aa:f2:38:e8:4c:69:38: ec:64:66:36 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XBYJO8BBknQ7js11oxdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Y5YWRhOWIyOGI2OTk3ZmRhMWM0NjhhOGQ4Njk2Mzg0MDdhMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXDUTOuG3SdCVZcyrhvGWGK7g6SM 2c+bjhJhjJxfMfVVf3O/nHVgn5g0kzBXgaDJ7MU0h5N2kL1f4QeU50xbgIRsY8vA GjDNveWJrqM9iPOEMTpPfxklgcMllUxmOPqAdWiw64aOJBXZd67GLCyIWovxZSML hIfGIdqcrZykQ1zw/Q5ui8xdAOBTPipkEGpM5Nsh7l90ODXJVf29iG2fXqQQXmpb NsyjUpolp2aECsRZ8+S+LYbLMmEw4XOPpeNp084d1mKVgSHijzPdieyTjcY6sXIB IrAGh/wG6QbGrctGE7RtkBL4s6SxIDqSDLGtVXwVn5D50Fu8yKIRX1b1NQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPz5ramyi2mX/aHEaKjYaWOEB6C7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzdhOTZk MS1jZjFiLTRmNDctOTNlZS0yNTlmZTE3NTBlZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvN2E5NmQx LWNmMWItNGY0Ny05M2VlLTI1OWZlMTc1MGVlYi8xL19QbXRxYktMYVpmOW9jUm9x TmhwWTRRSG9Mcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCqxaMAwQCuYvAMA0EAgACMAcDBQMqBvRAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMYPjANBgkqhkiG9w0BAQsFAAOCAQEAr+8V o2jPoHkJMhBJkAEc+gt7Kese54uioo95AUNwQscqm2cjKItFZgvK/iEy6va2mRo5 /ltaAq1qOTEU2zfhWgA1WV4b66ID8GvD6W9Oq9LkTd55WUxbh2GXOgioUkix4fJT k5pWPePD7dgEbDpZLaMjgeYuDrp41UCRGtHNAKEhie+k/Jy4ngLg4jUYlIX5UFDt f9V+GuIpq44lT7hXoZq0Gvnc2J5LaldPqBpVGdgzjIHwo8E4zAw6ZGWbI+NeyD9u cOt7igvIwhTNQlzyt5vrKp4bV2WnuBWlgQoDwxVyfgrclIrZ9HYS1tRil8jyOx4p m/Wq8jjoTGk47GRmNg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:27 2026 by rpki-client