This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer (raw, json) Hash identifier: XG4YrHv+OPv6WSjn2wM0RIIQ96tU8woabuDokkNSLXc= Subject key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783515E640DD958A9AE8D2DB42B6D410 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212074 IP: 185.31.203.0/24 IP: 2a13:1180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:15:e6:40:dd:95:8a:9a:e8:d2:db:42:b6:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a475e651f81aab603392f25521b7c9ab5bd281c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:e3:63:ec:0e:81:64:8c:5a:57:94:1f:b2: 69:db:4c:d6:5b:41:1e:b8:c8:50:48:f1:13:52:c2: 18:66:cd:06:eb:0a:b8:13:10:b5:47:38:7c:21:32: 92:d9:4c:e5:76:c2:bf:d7:c2:d2:20:05:2a:de:7a: 62:0d:c3:64:f4:d5:81:55:f4:82:2a:ad:d0:8d:17: b0:69:c5:ab:40:09:bd:4c:dd:87:97:da:99:58:a5: db:b5:dc:93:57:91:aa:38:6c:09:51:5d:af:57:2b: df:c2:b7:90:0f:54:a5:f7:33:44:40:c2:24:1b:47: 9f:fe:a8:97:ca:86:42:50:0f:c4:03:f2:79:13:49: 60:a4:6b:bd:1e:4b:cd:34:1d:18:f3:19:a2:1a:ff: a5:75:ca:ab:d2:de:03:eb:e4:ab:b9:f2:53:be:a5: 10:6c:87:bb:5a:ce:16:a2:1a:6e:b1:55:6e:e5:e1: 28:9b:02:cc:6f:02:4e:ef:70:3c:80:11:6c:6c:0b: df:ce:27:3c:5c:6f:68:09:e2:b8:3b:f3:46:30:3d: e1:41:d5:ec:83:75:19:b5:9b:84:ae:28:81:aa:0e: a0:72:33:f2:b5:f1:72:07:bb:6e:da:6b:d0:64:a9: 15:1c:49:92:d2:db:32:af:b0:e1:91:5d:c4:29:f3: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.203.0/24 IPv6: 2a13:1180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212074 Signature Algorithm: sha256WithRSAEncryption 37:11:02:9f:b7:77:af:ec:1d:2d:98:37:0b:9d:ae:d1:f0:c2: ad:ba:6e:75:b8:e3:c3:95:0b:cd:88:80:ef:90:8b:f1:8b:88: b3:6b:20:95:f5:a6:d9:76:77:9b:87:68:65:7a:e4:51:9d:c1: 43:0b:98:79:3b:03:96:a2:75:db:88:73:28:4b:13:8c:d0:c4: 60:d7:e1:b5:3f:19:be:52:f1:02:69:56:f3:d6:72:5b:17:67: 3d:0e:b0:be:ce:63:d9:3c:01:9b:4a:e9:05:bc:dd:11:51:4e: 6d:19:42:d9:d8:b8:e8:45:bb:d7:54:21:d3:a0:b9:bc:48:ad: 11:06:e2:36:f0:a1:0e:22:25:b2:b1:4b:3e:db:c5:9e:c6:67: b5:c5:0b:5c:df:4c:90:95:0f:9f:11:11:82:3c:0c:54:b8:c7: 4f:9d:a4:65:77:3e:5f:9c:32:61:8c:17:14:f2:3c:93:79:08: 03:25:09:53:47:8f:79:25:02:3b:92:fc:e7:84:58:b9:dd:d7: 0b:1b:f2:95:03:43:02:24:e1:49:b5:cc:2f:6b:18:8a:14:c1: ea:a2:35:a4:6b:78:f1:4b:d9:fe:2d:9d:a2:78:32:b3:5f:e1: 2e:76:07:f6:80:d3:27:b9:53:7d:d2:2b:fa:72:33:d8:5e:b8: 9e:35:1d:32 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NRXmQN2Vipro0ttCttQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDc1ZTY1MWY4MWFhYjYwMzM5MmYyNTUyMWI3YzlhYjViZDI4MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lPjY+wOgWSMWleUH7Jp20zWW0Ee uMhQSPETUsIYZs0G6wq4ExC1Rzh8ITKS2UzldsK/18LSIAUq3npiDcNk9NWBVfSC Kq3QjRewacWrQAm9TN2Hl9qZWKXbtdyTV5GqOGwJUV2vVyvfwreQD1Sl9zNEQMIk G0ef/qiXyoZCUA/EA/J5E0lgpGu9HkvNNB0Y8xmiGv+ldcqr0t4D6+SrufJTvqUQ bIe7Ws4WohpusVVu5eEomwLMbwJO73A8gBFsbAvfzic8XG9oCeK4O/NGMD3hQdXs g3UZtZuEriiBqg6gcjPytfFyB7tu2mvQZKkVHEmS0tsyr7DhkV3EKfPI3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKR15lH4GqtgM5LyVSG3yatb0oHAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2NlYzMy Ny0zOGUxLTRhZjQtYTA4Zi03N2NmZDIxNWI3MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvY2VjMzI3 LTM4ZTEtNGFmNC1hMDhmLTc3Y2ZkMjE1YjczMi8xL3BIWG1VZmdhcTJBemt2SlZJ YmZKcTF2U2djQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuR/LMA0EAgACMAcDBQMqExGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8ajANBgkqhkiG9w0BAQsFAAOCAQEANxECn7d3r+wd LZg3C52u0fDCrbpudbjjw5ULzYiA75CL8YuIs2sglfWm2XZ3m4doZXrkUZ3BQwuY eTsDlqJ124hzKEsTjNDEYNfhtT8ZvlLxAmlW89ZyWxdnPQ6wvs5j2TwBm0rpBbzd EVFObRlC2di46EW711Qh06C5vEitEQbiNvChDiIlsrFLPtvFnsZntcULXN9MkJUP nxERgjwMVLjHT52kZXc+X5wyYYwXFPI8k3kIAyUJU0ePeSUCO5L854RYud3XCxvy lQNDAiThSbXML2sYihTB6qI1pGt48UvZ/i2dongys1/hLnYH9oDTJ7lTfdIr+nIz 2F64njUdMg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:55 2026 by rpki-client