This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer File: pC0LgmZEoYOHz4Mi235kavY9mGo.cer (raw, json) Hash identifier: XB3Ys1TQY14YAzxndjDwODMziylYsWodGXek6qGPgjI= Subject key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB38BE7703D8EC17D401F80FD7FB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42517 IP: 77.241.224.0/20 IP: 89.248.128.0/20 IP: 109.69.224.0/21 IP: 145.35.0.0/16 IP: 185.130.240.0/22 IP: 2a00:1ae8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b3:8b:e7:70:3d:8e:c1:7d:40:1f:80:fd:7f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42d0b826644a18387cf8322db7e646af63d986a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:57:31:94:81:a9:b1:db:35:c9:b3:34:e4: 2d:73:86:04:b3:2a:0b:5b:75:ef:d3:1f:61:4c:26: 8d:2e:33:19:bf:06:05:93:11:92:6e:d5:4f:4d:14: 6e:17:6f:1a:26:2a:d4:8f:c5:1f:4c:58:d9:ad:96: ac:bd:58:1f:9a:7a:03:a5:19:46:bb:5c:a9:e5:d6: c0:11:52:75:3c:b8:34:51:4b:9b:b7:96:99:fc:1f: c4:97:80:ff:e2:fa:27:36:6b:d1:6d:ca:13:79:7b: 66:e5:f3:53:bc:bd:64:98:f1:53:df:c2:3c:22:70: 9b:88:fa:28:84:01:14:ac:68:a7:79:76:ff:d8:ec: bb:4b:f0:53:c8:fd:ca:f2:0d:95:cf:fb:66:b6:05: 0c:e3:fc:b6:0a:ac:46:1f:f3:18:59:08:d6:5a:69: 79:bb:4d:db:aa:f0:83:c9:73:c8:f7:28:a0:75:f9: c0:cd:38:10:9b:5a:5d:79:29:89:c4:f1:18:13:c9: cb:18:88:ae:f1:25:6d:92:02:ac:b1:8e:00:af:a7: f6:ce:dd:1e:03:b1:87:73:ba:b8:5c:a8:f4:71:f0: 86:88:bc:c9:dd:8f:50:2f:f5:28:d5:c4:a7:e9:30: e6:da:6a:cf:ba:d8:20:55:21:dd:37:f8:d2:07:b9: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.241.224.0/20 89.248.128.0/20 109.69.224.0/21 145.35.0.0/16 185.130.240.0/22 IPv6: 2a00:1ae8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42517 Signature Algorithm: sha256WithRSAEncryption 36:a4:05:25:4c:9d:d4:ac:6c:89:cc:1c:00:90:33:9c:be:23: 9f:3d:0b:eb:21:8e:5d:7e:6a:87:25:4a:ba:a0:6c:29:9f:51: 68:94:e9:9c:69:23:36:2c:df:cc:23:5d:92:41:d8:99:db:f6: a1:d6:15:52:c4:49:7d:d0:d4:34:32:73:be:97:17:2b:a6:5d: 88:0b:4c:06:46:89:55:df:38:57:0d:c9:03:c4:c0:5f:28:5d: 3c:56:fd:9b:5e:fa:6a:b8:65:cc:33:80:40:03:fe:d0:bd:67: d0:41:d6:d9:a4:17:26:a6:35:d6:cb:42:70:0e:97:63:8a:75: c1:64:22:03:0d:e4:f8:8c:e9:14:a4:56:c5:42:b8:1f:74:71: fb:3d:87:a2:ac:2d:83:c2:c6:c4:86:a8:d9:fb:f8:3a:20:29: 86:02:95:0b:a1:76:57:7b:e3:96:02:7b:03:3a:56:c9:65:50: 8f:ad:0e:f7:a7:0f:e8:14:44:16:df:8f:2c:89:1e:ee:fa:17: 03:bc:78:3e:9e:78:43:0d:aa:d4:59:3b:50:f7:9f:32:eb:37: 62:49:3c:b8:20:31:ce:b6:1a:c7:19:7b:49:e8:c2:9c:2b:a7: af:fb:89:dc:d6:75:27:fd:ee:28:12:2c:17:27:05:79:bd:57: 63:8f:17:86 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt26rOL53A9jsF9QB+A/X+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJkMGI4MjY2NDRhMTgzODdjZjgzMjJkYjdlNjQ2YWY2M2Q5ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpFXMZSBqbHbNcmzNOQtc4YEsyoL W3Xv0x9hTCaNLjMZvwYFkxGSbtVPTRRuF28aJirUj8UfTFjZrZasvVgfmnoDpRlG u1yp5dbAEVJ1PLg0UUubt5aZ/B/El4D/4vonNmvRbcoTeXtm5fNTvL1kmPFT38I8 InCbiPoohAEUrGineXb/2Oy7S/BTyP3K8g2Vz/tmtgUM4/y2CqxGH/MYWQjWWml5 u03bqvCDyXPI9yigdfnAzTgQm1pdeSmJxPEYE8nLGIiu8SVtkgKssY4Ar6f2zt0e A7GHc7q4XKj0cfCGiLzJ3Y9QL/Uo1cSn6TDm2mrPutggVSHdN/jSB7kglQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFKQtC4JmRKGDh8+DItt+ZGr2PZhqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzIyNjBm Mi0zY2NkLTQ0ZTUtODQyOC1lODJkNWVlNGU0MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMjI2MGYy LTNjY2QtNDRlNS04NDI4LWU4MmQ1ZWU0ZTQwZi8xL3BDMExnbVpFb1lPSHo0TWky MzVrYXZZOW1Hby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAjBAIAATAdAwQETfHgAwQEWfiAAwQDbUXgAwMAkSMDBAK5gvAw DQQCAAIwBwMFACoAGugwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKYVMA0GCSqG SIb3DQEBCwUAA4IBAQA2pAUlTJ3UrGyJzBwAkDOcviOfPQvrIY5dfmqHJUq6oGwp n1FolOmcaSM2LN/MI12SQdiZ2/ah1hVSxEl90NQ0MnO+lxcrpl2IC0wGRolV3zhX DckDxMBfKF08Vv2bXvpquGXMM4BAA/7QvWfQQdbZpBcmpjXWy0JwDpdjinXBZCID DeT4jOkUpFbFQrgfdHH7PYeirC2DwsbEhqjZ+/g6ICmGApULoXZXe+OWAnsDOlbJ ZVCPrQ73pw/oFEQW348siR7u+hcDvHg+nnhDDarUWTtQ958y6zdiSTy4IDHOthrH GXtJ6MKcK6ev+4nc1nUn/e4oEiwXJwV5vVdjjxeG -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:30 2026 by rpki-client