This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer File: p2_PrZZq5-gXHPzibbP2V3bSb-g.cer (raw, json) Hash identifier: UMAf+KoaWbVHzwlwpjmVsSLtEmq+OXzXJzlosFzomUM= Subject key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB0DC2584782A2D13D8ABBEF2A196B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199541 IP: 91.224.186.0/24 IP: 147.196.0.0/16 IP: 153.98.0.0/16 IP: 192.70.89.0 -- 192.70.90.255 IP: 192.93.20.0/22 IP: 193.58.16.0 -- 193.58.35.255 IP: 193.221.0.0/20 IP: 193.221.160.0/19 IP: 193.221.224.0/19 IP: 2a14:2900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0d:c2:58:47:82:a2:d1:3d:8a:bb:ef:2a:19:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:da:c1:58:53:0d:e2:1e:c6:fa:9a:fd:de: 9f:c8:33:34:01:87:21:2f:ac:f0:eb:a8:2e:d0:a9: 35:f7:c0:22:7c:40:c5:34:bd:1a:08:2c:45:97:67: 8f:18:bc:75:87:e3:f5:aa:61:4f:8b:35:bf:91:f2: 4c:0a:ad:19:b3:66:12:f6:d2:cd:8c:c5:0f:12:14: 48:2d:c3:52:fe:78:2a:e3:89:9c:09:b3:61:a1:09: 6d:6c:8d:b3:a8:b4:7a:62:8b:7d:81:d3:bc:b3:b3: 0b:02:81:b9:d3:9a:6e:7e:19:28:16:15:6a:ea:50: d7:21:4f:06:f7:b6:50:f5:80:d1:92:f8:c1:60:7e: da:1c:ea:4a:48:50:ce:43:3a:7d:9f:07:93:7d:40: 0c:4c:52:65:69:56:fb:61:5a:e0:57:07:40:8f:a4: f2:36:bc:77:70:8c:61:63:c4:96:5e:c3:d9:f7:8c: 71:7c:4f:e1:a3:cc:43:c1:e4:88:10:08:e4:ef:e0: 59:4a:7a:fc:73:a1:72:f6:3f:e9:33:44:49:ac:77: 96:63:c9:70:8a:0c:10:c7:95:4d:55:0e:ea:a7:3a: 1d:c5:ec:e0:f6:db:e2:87:84:01:13:6a:10:73:b1: bb:c0:2f:d8:27:3b:ae:7f:24:9d:9f:2d:36:f3:c9: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.186.0/24 147.196.0.0/16 153.98.0.0/16 192.70.89.0-192.70.90.255 192.93.20.0/22 193.58.16.0-193.58.35.255 193.221.0.0/20 193.221.160.0/19 193.221.224.0/19 IPv6: 2a14:2900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199541 Signature Algorithm: sha256WithRSAEncryption 04:b3:c9:17:f1:47:88:13:df:47:64:88:5e:63:d6:65:fe:b5: 57:24:4b:fd:43:6d:73:2b:19:43:a3:38:fa:d2:7b:6c:8e:6c: 1c:5e:31:67:82:05:2f:54:28:d7:5b:2d:2d:7b:47:20:b5:09: 2d:29:99:76:8b:be:c9:94:92:59:eb:3f:bf:85:55:c9:14:5c: 91:b0:6e:58:c3:d7:ba:da:86:53:df:71:02:10:55:83:49:ab: b5:e1:85:ed:5a:79:80:eb:62:af:07:e5:ae:d8:9a:de:d8:de: b8:b1:53:24:06:db:4c:55:9f:2e:f0:92:f9:7b:07:7c:c3:18: 83:d5:d3:89:65:12:6e:fb:b9:1f:25:1a:49:ae:4d:2c:42:14: a1:17:83:3c:a9:c9:8d:dc:88:51:4b:6e:34:9a:c9:a6:73:e5: a2:65:39:db:e8:1c:31:e1:15:67:06:9b:e6:54:23:49:bb:bc: 4b:70:4f:89:3e:fa:f6:7a:5e:f0:78:1e:3e:2c:7f:25:a0:31: 01:96:b0:ff:10:b5:4e:8b:37:b1:b2:4f:e4:71:6c:ba:78:92: 4e:29:17:6f:27:6d:52:6c:dd:ab:de:43:44:8b:45:8c:22:95: 9f:cf:cc:2d:c6:f0:a7:a0:30:d6:4e:46:c7:d9:ce:f6:ec:e0: b0:0c:10:9f -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISAZt9yw3CWEeCotE9irvvKhlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzZmY2ZhZDk2NmFlN2U4MTcxY2ZjZTI2ZGIzZjY1Nzc2ZDI2ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dzawVhTDeIexvqa/d6fyDM0AYch L6zw66gu0Kk198AifEDFNL0aCCxFl2ePGLx1h+P1qmFPizW/kfJMCq0Zs2YS9tLN jMUPEhRILcNS/ngq44mcCbNhoQltbI2zqLR6Yot9gdO8s7MLAoG505pufhkoFhVq 6lDXIU8G97ZQ9YDRkvjBYH7aHOpKSFDOQzp9nweTfUAMTFJlaVb7YVrgVwdAj6Ty Nrx3cIxhY8SWXsPZ94xxfE/ho8xDweSIEAjk7+BZSnr8c6Fy9j/pM0RJrHeWY8lw igwQx5VNVQ7qpzodxezg9tvih4QBE2oQc7G7wC/YJzuufySdny0288nbRQIDAQAB o4IC7TCCAukwHQYDVR0OBBYEFKdvz62WaufoFxz84m2z9ld20m/oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2RiODc1 Mi04NGIyLTQzOGEtOWJjMS1jNTQwMWY2ZDkxZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZGI4NzUy LTg0YjItNDM4YS05YmMxLWM1NDAxZjZkOTFkMS8xL3AyX1ByWlpxNS1nWEhQemli YlAyVjNiU2ItZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF BwEHAQH/BF0wWzBKBAIAATBEAwQAW+C6AwMAk8QDAwCZYjAMAwQAwEZZAwQAwEZa AwQCwF0UMAwDBATBOhADBALBOiADBATB3QADBAXB3aADBAXB3eAwDQQCAAIwBwMF ACoUKQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwt1MA0GCSqGSIb3DQEBCwUA A4IBAQAEs8kX8UeIE99HZIheY9Zl/rVXJEv9Q21zKxlDozj60ntsjmwcXjFnggUv VCjXWy0te0cgtQktKZl2i77JlJJZ6z+/hVXJFFyRsG5Yw9e62oZT33ECEFWDSau1 4YXtWnmA62KvB+Wu2Jre2N64sVMkBttMVZ8u8JL5ewd8wxiD1dOJZRJu+7kfJRpJ rk0sQhShF4M8qcmN3IhRS240msmmc+WiZTnb6Bwx4RVnBpvmVCNJu7xLcE+JPvr2 el7weB4+LH8loDEBlrD/ELVOizexsk/kcWy6eJJOKRdvJ21SbN2r3kNEi0WMIpWf z8wtxvCnoDDWTkbH2c727OCwDBCf -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:50 2026 by rpki-client