This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer File: pKB83NCVA-z-Pml8wyZphRga6Co.cer (raw, json) Hash identifier: DuuDyQOITsWs64kEze2joEyrwbi9czy82+xs20gtEhU= Subject key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8090545A7DD4734D35FD4DB4BE86BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62270 IP: 193.162.140.0/24 IP: 2a10:8080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:90:54:5a:7d:d4:73:4d:35:fd:4d:b4:be:86:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:04:ae:7c:3f:e4:64:0d:a0:22:80:29:36: 7c:0d:11:a1:2a:fd:2e:38:8f:b2:ed:5b:ce:83:57: e2:b2:c2:d6:6c:62:1c:c7:95:84:19:df:d5:f5:bf: 06:cc:18:2a:9e:6f:c1:67:94:03:83:98:27:09:9a: ef:fa:c2:b7:21:4d:0a:c3:06:b5:98:94:f2:4c:e0: 9c:5c:75:27:06:44:5f:eb:ce:88:16:f6:05:cf:51: e7:7c:21:43:21:da:df:7d:47:01:02:a9:65:42:6b: 96:dd:5d:46:e1:ac:5f:a8:24:bd:bf:de:44:1d:f1: 3b:d3:90:0f:48:83:27:56:28:2e:21:b5:fe:81:af: 6e:e5:d3:20:a9:ff:c4:b8:77:3d:3d:34:e8:61:cd: 4d:16:b9:e8:27:18:28:de:31:d9:1b:2f:81:90:73: 6a:59:c6:84:96:b0:c5:91:45:45:8b:de:37:ce:e7: 83:29:79:5d:87:5d:87:ab:60:71:e9:7d:b5:70:f2: b9:c8:84:72:07:58:a0:87:22:6e:3a:c5:f7:06:7b: 61:c2:88:6d:76:ff:49:f5:ff:c5:f8:7e:0b:ac:54: 1a:aa:ff:e9:d7:ec:1d:9d:34:a7:8f:a1:c5:e0:4c: 05:15:53:71:7f:17:42:6a:32:ed:e9:81:17:28:bc: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.140.0/24 IPv6: 2a10:8080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62270 Signature Algorithm: sha256WithRSAEncryption 5b:bf:e6:e1:54:d0:40:e0:5b:fe:0c:19:e0:53:5e:97:67:bd: 05:bd:7e:86:36:6c:eb:b1:fc:95:a9:c1:b4:99:76:13:52:88: fd:e0:37:d0:e6:e7:b9:fc:bc:b4:8e:df:82:23:70:f1:3f:60: 3d:79:55:9e:34:4a:7f:6b:9c:17:9d:0a:4d:fb:24:cf:96:6e: c7:33:07:ce:0b:38:3a:89:f7:81:d3:85:84:a1:45:f2:2b:8e: 2f:4a:f3:cd:b6:b2:13:d2:ce:a7:9f:6e:76:09:46:1a:17:69: c2:7f:19:b7:3f:3a:96:e4:ca:49:1a:64:c9:da:f7:fa:97:0c: 3a:7e:41:af:1a:09:8d:31:a0:8f:0f:e3:c8:e2:77:9d:21:c7: 55:19:cc:44:9a:ad:5e:b3:a2:2a:7d:38:ee:57:63:2f:ca:35: 57:d6:5e:d0:f6:a9:4c:b4:ce:0c:26:6b:b4:cf:53:c8:11:7a: 0d:31:56:81:76:91:10:b1:aa:7c:3f:98:09:e1:9a:75:1b:0f: bf:a1:49:25:4c:f3:c5:42:6b:21:51:bb:64:88:dd:8a:5f:c0: 99:5e:32:46:53:cb:b1:8b:ec:f9:0d:ef:1c:89:f4:03:23:5d: d0:78:fc:71:3c:7b:52:85:b9:51:5d:41:fd:81:9d:a8:e1:35: 04:76:8b:a8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gJBUWn3Uc001/U20voa8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGEwN2NkY2QwOTUwM2VjZmUzZTY5N2NjMzI2Njk4NTE4MWFlODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nQErnw/5GQNoCKAKTZ8DRGhKv0u OI+y7VvOg1fissLWbGIcx5WEGd/V9b8GzBgqnm/BZ5QDg5gnCZrv+sK3IU0Kwwa1 mJTyTOCcXHUnBkRf686IFvYFz1HnfCFDIdrffUcBAqllQmuW3V1G4axfqCS9v95E HfE705APSIMnViguIbX+ga9u5dMgqf/EuHc9PTToYc1NFrnoJxgo3jHZGy+BkHNq WcaElrDFkUVFi943zueDKXldh12Hq2Bx6X21cPK5yIRyB1ighyJuOsX3Bnthwoht dv9J9f/F+H4LrFQaqv/p1+wdnTSnj6HF4EwFFVNxfxdCajLt6YEXKLwCCQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKSgfNzQlQPs/j5pfMMmaYUYGugqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2Q4NTQ4 Yy0zMGIxLTQ4YTQtYWUyOC1kNmIwYmM5MGYyZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvZDg1NDhj LTMwYjEtNDhhNC1hZTI4LWQ2YjBiYzkwZjJmNS8xL3BLQjgzTkNWQS16LVBtbDh3 eVpwaFJnYTZDby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaKMMA0EAgACMAcDBQMqEICAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzPjANBgkqhkiG9w0BAQsFAAOCAQEAW7/m4VTQQOBb /gwZ4FNel2e9Bb1+hjZs67H8lanBtJl2E1KI/eA30Obnufy8tI7fgiNw8T9gPXlV njRKf2ucF50KTfskz5ZuxzMHzgs4Oon3gdOFhKFF8iuOL0rzzbayE9LOp59udglG Ghdpwn8Ztz86luTKSRpkydr3+pcMOn5BrxoJjTGgjw/jyOJ3nSHHVRnMRJqtXrOi Kn047ldjL8o1V9Ze0PapTLTODCZrtM9TyBF6DTFWgXaRELGqfD+YCeGadRsPv6FJ JUzzxUJrIVG7ZIjdil/AmV4yRlPLsYvs+Q3vHIn0AyNd0Hj8cTx7UoW5UV1B/YGd qOE1BHaLqA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:33 2026 by rpki-client