This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer File: pMK1k9mMCS_TCmAepdJEqr08sU0.cer (raw, json) Hash identifier: YjbDJY0Uv0I5immJMbI+tE1VuzOGNLHyxAJRjhlJN44= Subject key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13475FF7A98703808C3C73097E515E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35023 IP: 193.221.112.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:47:5f:f7:a9:87:03:80:8c:3c:73:09:7e:51:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:56:0b:dd:f5:ac:b0:7d:78:68:2c:1c:38: e6:e7:2a:1e:cd:2d:9a:f9:02:ca:ab:62:3c:f9:46: 09:70:2c:24:84:fc:13:ee:ca:ec:9c:c4:51:05:40: e0:ef:ac:a3:7b:5e:fb:f1:3c:f5:08:5a:e2:0d:08: b2:a5:f5:37:37:b2:7a:05:2e:b1:b9:7b:38:9e:93: de:a6:fe:46:cc:c2:7d:60:66:90:d3:c1:bc:de:5d: 65:4a:7d:c4:63:a7:2a:b9:7d:7e:14:66:cd:a0:ee: cb:37:cb:fa:93:55:b5:de:9e:e7:20:b4:49:1b:9f: cf:b3:91:85:f6:a9:80:1d:45:88:0d:b6:da:21:81: ab:ed:ce:68:21:95:7c:29:9e:9f:4d:81:54:07:a4: cc:aa:05:95:f3:c2:3f:0c:72:7a:72:bc:c7:8e:12: f7:34:cf:40:72:4b:97:db:4c:e4:50:34:30:fe:e6: fa:71:84:e7:6f:01:2f:17:24:c4:11:a8:ef:c8:1f: 76:50:71:19:ea:62:08:95:d1:3f:60:8d:75:62:b2: a2:70:51:6f:7b:f1:95:46:32:2b:ae:09:94:b2:c6: a9:d6:81:88:46:ec:93:78:94:0a:62:3b:e2:bd:8d: b7:52:27:68:13:d2:37:8b:36:d4:ea:75:b6:a4:dd: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.112.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35023 Signature Algorithm: sha256WithRSAEncryption 66:60:11:21:b4:54:ef:17:04:f1:73:d5:c0:7d:57:86:27:4f: a4:7c:07:46:38:99:c1:e9:9c:de:c5:b9:94:4d:8d:8a:65:6c: ab:16:84:e1:d3:86:0d:dc:be:8b:4e:1e:e0:98:3f:41:12:7c: c2:da:dc:03:d3:c4:93:38:7b:0e:e9:90:98:b2:44:d0:58:9c: 4d:8e:46:ac:79:18:57:5e:33:aa:f8:80:06:c4:9e:31:20:22: f7:81:f5:fa:72:dd:62:94:86:38:e1:39:2f:d1:d8:b0:ec:d5: c9:cc:b4:8f:15:5e:92:57:cb:ff:c5:ef:e0:02:ac:6f:8c:9e: 44:af:d0:4e:2b:69:06:73:4a:c7:e0:1f:d7:4e:75:1c:4a:8c: 3b:62:d6:2a:2d:23:47:48:2b:71:52:2f:ef:d1:c5:ea:c8:3c: 4d:dc:94:00:16:f1:7e:bf:ab:59:4d:78:3f:71:61:04:9e:dd: 46:0a:85:ec:90:73:21:1d:6e:5b:1a:f8:16:43:29:8d:d8:70: 58:df:c8:21:82:b2:9f:b3:d9:55:38:89:88:79:3d:6d:ef:6b: a6:42:9b:91:cd:ee:ad:d3:b1:2d:cb:97:f6:84:be:ef:be:1e: 5f:dc:d3:66:14:9d:33:f7:f1:c7:bf:0b:28:88:74:68:2f:87: d3:99:8b:95 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8E0df96mHA4CMPHMJflFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGMyYjU5M2Q5OGMwOTJmZDMwYTYwMWVhNWQyNDRhYWJkM2NiMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprNWC931rLB9eGgsHDjm5yoezS2a +QLKq2I8+UYJcCwkhPwT7srsnMRRBUDg76yje1778Tz1CFriDQiypfU3N7J6BS6x uXs4npPepv5GzMJ9YGaQ08G83l1lSn3EY6cquX1+FGbNoO7LN8v6k1W13p7nILRJ G5/Ps5GF9qmAHUWIDbbaIYGr7c5oIZV8KZ6fTYFUB6TMqgWV88I/DHJ6crzHjhL3 NM9AckuX20zkUDQw/ub6cYTnbwEvFyTEEajvyB92UHEZ6mIIldE/YI11YrKicFFv e/GVRjIrrgmUssap1oGIRuyTeJQKYjvivY23UidoE9I3izbU6nW2pN274QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKTCtZPZjAkv0wpgHqXSRKq9PLFNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzk0MjJi MC1kYzc5LTRjNzEtYmZkOC1mY2Y5OTQ3MGI5ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTQyMmIw LWRjNzktNGM3MS1iZmQ4LWZjZjk5NDcwYjk4NS8xL3BNSzFrOW1NQ1NfVENtQWVw ZEpFcXIwOHNVMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwd1wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCIzzANBgkqhkiG9w0BAQsFAAOCAQEAZmARIbRU7xcE8XPVwH1XhidPpHwHRjiZ wemc3sW5lE2NimVsqxaE4dOGDdy+i04e4Jg/QRJ8wtrcA9PEkzh7DumQmLJE0Fic TY5GrHkYV14zqviABsSeMSAi94H1+nLdYpSGOOE5L9HYsOzVycy0jxVeklfL/8Xv 4AKsb4yeRK/QTitpBnNKx+Af1051HEqMO2LWKi0jR0grcVIv79HF6sg8TdyUABbx fr+rWU14P3FhBJ7dRgqF7JBzIR1uWxr4FkMpjdhwWN/IIYKyn7PZVTiJiHk9be9r pkKbkc3urdOxLcuX9oS+774eX9zTZhSdM/fxx78LKIh0aC+H05mLlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:43 2026 by rpki-client