This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer File: pJxODPXI27tqZ88dovMfQWJ0n90.cer (raw, json) Hash identifier: Q6fKOU5g0M6T4EXL7aS45kqYhrUlhrHchgGHzOr7hg0= Subject key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA336D72BC4A9B51BC79BD53932E35D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202087 IP: 45.89.212.0/22 IP: 45.94.8.0/22 IP: 94.26.93.0/24 IP: 94.26.95.0/24 IP: 94.26.97.0 -- 94.26.99.255 IP: 94.26.101.0/24 IP: 94.26.103.0/24 IP: 94.26.109.0/24 IP: 94.190.196.0/22 IP: 104.255.128.0/21 IP: 153.94.56.0/21 IP: 185.9.212.0/22 IP: 185.49.216.0/22 IP: 185.75.80.0/22 IP: 185.83.148.0/22 IP: 185.94.76.0/22 IP: 192.190.168.0/22 IP: 2a03:50c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:36:d7:2b:c4:a9:b5:1b:c7:9b:d5:39:32:e3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:eb:fd:22:ff:a4:d2:db:42:20:3a:38:f2: 0c:d4:e0:31:45:db:94:40:dc:a3:91:16:1c:53:27: db:c1:2d:2a:57:01:7a:d3:1a:8e:a0:7e:ae:38:41: 62:14:03:a7:b5:ee:89:59:38:42:a6:2c:0a:04:05: 15:3e:c1:1d:47:ee:d1:73:6c:e3:89:85:75:9f:c1: 72:ed:dc:00:cc:55:fe:55:16:bd:19:9c:8d:9a:f1: 8d:f4:67:f7:8f:ae:42:53:36:e2:92:ee:79:a1:09: 94:76:fe:44:23:1a:29:61:32:b1:2d:7e:ea:2a:04: 8e:d2:86:5c:5f:c4:dd:5a:63:52:6a:db:92:13:fa: 7b:2b:96:a4:4b:bc:07:b2:62:8d:cc:24:80:09:7f: af:ca:eb:3d:13:80:8e:71:97:79:8c:ab:18:bf:66: f0:8f:81:41:7f:3c:e7:43:ac:32:2b:dc:61:37:d2: 7c:a1:a3:a2:bb:c8:d6:96:9a:aa:3f:3e:1b:b9:f9: 05:f9:d4:7c:6f:ce:87:31:d9:2c:f2:d4:77:56:b4: 30:c9:f5:06:67:34:e4:28:69:2e:39:0b:23:14:3f: e9:3a:f9:ae:b3:4f:2f:aa:7a:69:31:97:b7:1b:88: 1e:9c:c0:15:70:36:ef:47:61:18:79:d1:5d:95:fd: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.212.0/22 45.94.8.0/22 94.26.93.0/24 94.26.95.0/24 94.26.97.0-94.26.99.255 94.26.101.0/24 94.26.103.0/24 94.26.109.0/24 94.190.196.0/22 104.255.128.0/21 153.94.56.0/21 185.9.212.0/22 185.49.216.0/22 185.75.80.0/22 185.83.148.0/22 185.94.76.0/22 192.190.168.0/22 IPv6: 2a03:50c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202087 Signature Algorithm: sha256WithRSAEncryption a6:ce:75:2c:63:42:f3:69:39:f7:4f:fd:4d:66:9c:0b:21:50: 8c:7a:90:d7:18:4e:b8:f5:b4:ee:66:9b:6c:5f:0a:30:6e:c2: 8d:74:3b:5e:ff:d1:11:15:a8:78:43:d1:e2:ae:cd:7c:cc:15: 80:16:51:a3:5c:18:cf:d3:ae:83:6b:df:5c:b2:03:54:f2:91: bd:42:ec:d7:85:9c:ed:e8:be:36:b9:96:a7:56:2c:1c:ba:6a: 42:76:0c:3b:fb:96:d0:7e:69:6c:75:3f:12:84:03:25:e4:75: c6:af:7c:a5:31:bd:db:d8:b3:e6:59:a0:46:bc:d9:87:bd:85: 15:61:37:2f:d6:95:4d:c2:e4:48:ad:0a:ad:b7:ce:a4:16:4a: c0:6d:db:30:e1:0f:19:7b:69:4c:4c:b4:d7:9d:8a:7a:51:4c: cc:af:1e:38:28:b7:c1:02:5d:83:65:4e:e0:61:ef:b4:2c:a1: 94:c4:8a:dd:9c:ca:f6:33:44:54:7d:90:a4:4f:b9:52:59:8f: c9:5a:bb:0b:7c:6b:65:fe:c6:f6:34:b9:9a:7c:fa:90:25:d2: 9e:cb:86:b3:44:49:9b:32:00:d2:8a:20:bd:03:ca:58:81:cb: 4a:25:2b:e8:40:81:12:0d:3c:64:70:87:54:7a:b3:ea:a6:f6: 0f:40:d3:d4 -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISAZt7ozbXK8SptRvHm9U5MuNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDljNGUwY2Y1YzhkYmJiNmE2N2NmMWRhMmYzMWY0MTYyNzQ5ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKzr/SL/pNLbQiA6OPIM1OAxRduU QNyjkRYcUyfbwS0qVwF60xqOoH6uOEFiFAOnte6JWThCpiwKBAUVPsEdR+7Rc2zj iYV1n8Fy7dwAzFX+VRa9GZyNmvGN9Gf3j65CUzbiku55oQmUdv5EIxopYTKxLX7q KgSO0oZcX8TdWmNSatuSE/p7K5akS7wHsmKNzCSACX+vyus9E4COcZd5jKsYv2bw j4FBfzznQ6wyK9xhN9J8oaOiu8jWlpqqPz4bufkF+dR8b86HMdks8tR3VrQwyfUG ZzTkKGkuOQsjFD/pOvmus08vqnppMZe3G4genMAVcDbvR2EYedFdlf06OQIDAQAB o4IDGjCCAxYwHQYDVR0OBBYEFKScTgz1yNu7amfPHaLzH0FidJ/dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzllMTlj Ni1kZWZkLTQ1NWYtOTBhMy04OGVkOGQ3NzE3YTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOWUxOWM2 LWRlZmQtNDU1Zi05MGEzLTg4ZWQ4ZDc3MTdhNC8xL3BKeE9EUFhJMjd0cVo4OGRv dk1mUVdKMG45MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGYBggrBgEF BQcBBwEB/wSBiDCBhTB0BAIAATBuAwQCLVnUAwQCLV4IAwQAXhpdAwQAXhpfMAwD BABeGmEDBAJeGmADBABeGmUDBABeGmcDBABeGm0DBAJevsQDBANo/4ADBAOZXjgD BAK5CdQDBAK5MdgDBAK5S1ADBAK5U5QDBAK5XkwDBALAvqgwDQQCAAIwBwMFACoD UMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxVnMA0GCSqGSIb3DQEBCwUAA4IB AQCmznUsY0LzaTn3T/1NZpwLIVCMepDXGE649bTuZptsXwowbsKNdDte/9ERFah4 Q9Hirs18zBWAFlGjXBjP066Da99csgNU8pG9QuzXhZzt6L42uZanViwcumpCdgw7 +5bQfmlsdT8ShAMl5HXGr3ylMb3b2LPmWaBGvNmHvYUVYTcv1pVNwuRIrQqtt86k FkrAbdsw4Q8Ze2lMTLTXnYp6UUzMrx44KLfBAl2DZU7gYe+0LKGUxIrdnMr2M0RU fZCkT7lSWY/JWrsLfGtl/sb2NLmafPqQJdKey4azREmbMgDSiiC9A8pYgctKJSvo QIESDTxkcIdUerPqpvYPQNPU -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:44 2026 by rpki-client