This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer File: p03gktwuTXKqfmqWDSGtTnl1izw.cer (raw, json) Hash identifier: Hl7TDqFCCvUJAyNZ0pKEURD/hqv2lPi3r2ssHmfFX7w= Subject key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF20B5A662AFD20CAD1E299BC1FB8A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12521 IP: 91.195.72.0/23 IP: 91.195.102.0/23 IP: 212.85.32.0 -- 212.85.55.255 IP: 2a03:2e00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0b:5a:66:2a:fd:20:ca:d1:e2:99:bc:1f:b8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:15:29:65:06:dc:44:46:f3:62:ce:30:54: 21:96:be:0f:8b:42:b9:bb:fd:77:d7:b7:c5:5c:f2: 4d:21:f4:51:1f:16:a8:2a:ea:79:3e:2c:52:53:6d: 8b:73:cf:69:e1:e6:2d:c4:82:7b:98:1d:1a:05:bc: b1:78:62:63:71:ee:b3:ef:62:e2:cc:9a:96:af:d9: 08:e9:5e:fd:47:50:5a:8d:0b:70:f5:39:da:d5:60: 14:e7:4f:ec:29:83:21:99:2e:05:1c:67:af:cf:11: 0b:57:56:53:2b:56:61:3a:4c:b6:d4:ed:3d:96:49: 4f:75:1c:8f:31:cf:bc:91:f7:f8:27:38:88:6f:cc: fa:e3:ea:7b:4a:ed:e8:e2:ff:19:79:a5:8e:0e:c1: 46:47:a1:57:76:38:ba:c5:2e:47:7e:1f:ba:7b:a6: 58:b1:56:e3:80:20:06:48:8e:38:17:93:d7:9b:ca: 6f:f1:04:a5:6b:20:16:45:b1:b3:ca:7f:fe:78:64: 60:96:b3:59:c0:67:1b:2b:a5:3a:f1:fe:6c:ea:a9: 62:b2:06:43:f3:6f:13:e1:04:dc:82:64:32:b8:cd: 73:93:8d:72:de:82:63:75:46:b3:23:66:b4:89:cd: 9a:44:16:06:6f:29:65:47:e7:dc:dd:65:4d:60:a7: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.72.0/23 91.195.102.0/23 212.85.32.0-212.85.55.255 IPv6: 2a03:2e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12521 Signature Algorithm: sha256WithRSAEncryption 3d:24:45:10:68:07:17:7f:ef:23:91:2b:57:77:a3:49:d2:36: 09:88:b3:bb:b2:f5:e2:57:91:c8:a2:4d:93:22:bd:84:f6:8c: 26:b6:a9:ee:87:f1:a2:1a:89:9c:90:cb:27:ec:b6:65:7b:88: e5:55:69:3d:1b:79:fa:d3:38:37:7f:e8:92:a4:ca:f2:1d:58: 77:a5:ba:5e:1b:ad:36:78:1d:76:b7:30:5c:94:1b:0f:9e:af: 03:72:01:18:6a:5f:96:16:4b:b4:fb:35:15:12:ba:2a:71:9e: f6:5c:6d:0e:da:f7:12:95:4c:71:b8:21:4f:93:93:ed:7d:14: ce:25:c7:09:8f:67:cf:c9:57:c5:d6:a2:84:cf:3f:19:c8:39: 52:a2:62:fe:2e:de:02:c9:81:e0:61:97:3b:5c:2f:db:a9:1c: a5:50:b1:74:ac:b7:2e:2a:6c:02:9d:6d:63:b3:71:7a:72:42: 80:34:8d:f9:ca:b9:01:2f:71:d8:2b:42:4f:25:ad:f2:0c:ee: f5:26:66:6a:11:3d:8e:6f:94:70:1b:c7:81:66:f4:78:10:8c: e1:c2:ae:6b:fe:b3:b9:7b:d3:a2:91:06:5f:23:77:ad:01:0f: c3:29:33:4b:88:3c:43:90:f4:f9:b5:b9:43:c8:e4:a3:e7:3e: 81:dc:47:56 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt/8gtaZir9IMrR4pm8H7inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzRkZTA5MmRjMmU0ZDcyYWE3ZTZhOTYwZDIxYWQ0ZTc5NzU4YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlUVKWUG3ERG82LOMFQhlr4Pi0K5 u/1317fFXPJNIfRRHxaoKup5PixSU22Lc89p4eYtxIJ7mB0aBbyxeGJjce6z72Li zJqWr9kI6V79R1BajQtw9Tna1WAU50/sKYMhmS4FHGevzxELV1ZTK1ZhOky21O09 lklPdRyPMc+8kff4JziIb8z64+p7Su3o4v8ZeaWODsFGR6FXdji6xS5Hfh+6e6ZY sVbjgCAGSI44F5PXm8pv8QSlayAWRbGzyn/+eGRglrNZwGcbK6U68f5s6qlisgZD 828T4QTcgmQyuM1zk41y3oJjdUazI2a0ic2aRBYGbyllR+fc3WVNYKeZ8wIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFKdN4JLcLk1yqn5qlg0hrU55dYs8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzQ2OTk3 NC0xMTg0LTQ4MjQtOTE4MS1mNGEyNzVkNmI1ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNDY5OTc0 LTExODQtNDgyNC05MTgxLWY0YTI3NWQ2YjU4NC8xL3AwM2drdHd1VFhLcWZtcVdE U0d0VG5sMWl6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQBW8NIAwQBW8NmMAwDBAXUVSADBAPUVTAwDQQC AAIwBwMFACoDLgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICMOkwDQYJKoZIhvcN AQELBQADggEBAD0kRRBoBxd/7yORK1d3o0nSNgmIs7uy9eJXkciiTZMivYT2jCa2 qe6H8aIaiZyQyyfstmV7iOVVaT0befrTODd/6JKkyvIdWHelul4brTZ4HXa3MFyU Gw+erwNyARhqX5YWS7T7NRUSuipxnvZcbQ7a9xKVTHG4IU+Tk+19FM4lxwmPZ8/J V8XWooTPPxnIOVKiYv4u3gLJgeBhlztcL9upHKVQsXSsty4qbAKdbWOzcXpyQoA0 jfnKuQEvcdgrQk8lrfIM7vUmZmoRPY5vlHAbx4Fm9HgQjOHCrmv+s7l706KRBl8j d60BD8MpM0uIPEOQ9Pm1uUPI5KPnPoHcR1Y= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:41 2026 by rpki-client