This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer (raw, json) Hash identifier: 4tmPobNu7MD1rRIpe/U8kFa7MFCxnXbwYgq1zaCdwDE= Subject key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38F18C3237DB7535BC68E149D38471 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207209 IP: 46.149.64.0/23 IP: 2001:678:9f4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f1:8c:32:37:db:75:35:bc:68:e1:49:d3:84:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:f7:5f:7e:0e:99:4e:8c:74:8d:89:43:3a: c4:48:c5:0d:8b:1e:62:fa:9a:c0:fe:ab:88:4c:bf: b5:b1:a2:b5:b2:16:ac:94:6c:e3:ab:b5:0f:dc:97: 02:c1:59:19:4b:27:dd:ce:e7:df:23:19:9f:95:bd: eb:c4:22:80:05:9a:4b:e9:02:3f:2b:9d:13:4e:6e: d8:f4:99:3d:6b:d5:c0:d9:bb:dc:d4:0b:6d:2d:0f: 58:5e:d9:d5:88:17:fd:b3:7f:bb:52:d8:99:4f:29: e3:21:75:e2:69:0c:4b:3e:f5:51:2c:7c:3e:1e:da: c6:22:fc:3e:77:95:96:ff:e2:c9:34:f0:ea:14:1e: 63:0a:e1:29:5e:2b:68:e0:42:d7:e4:8e:a3:8d:d8: 94:e8:65:ff:b0:79:28:14:6c:e0:27:b4:19:98:b0: 54:69:59:57:df:ea:6d:c7:d3:09:bb:70:a1:23:dd: 44:dd:d3:c9:17:04:c4:19:87:f6:c4:da:a7:08:4e: 95:7a:7f:04:d7:cb:39:bc:94:71:73:3e:d8:f3:5c: bc:26:28:4f:47:90:ed:71:4f:4c:2a:fc:d1:12:db: ed:9b:e8:78:6f:f8:3c:5b:a0:ff:ba:df:f6:d8:f2: a8:bb:a2:24:b2:c1:d0:3d:a3:25:cc:e6:36:89:64: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.64.0/23 IPv6: 2001:678:9f4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207209 Signature Algorithm: sha256WithRSAEncryption 8e:99:a5:a5:ba:88:9a:78:02:14:0a:94:69:14:a8:c6:e5:4c: 1c:15:34:27:4f:ae:ab:fb:94:e2:27:24:7f:09:ad:eb:ab:2e: 43:34:ea:9f:06:03:e3:0d:8b:ab:65:8e:db:e1:67:4f:3b:3d: 35:dd:59:43:32:ba:3a:f8:7a:60:f7:f0:8e:5e:d4:f7:d8:4e: 33:49:d8:df:fb:4c:bf:91:cf:fb:4d:cc:98:e4:ec:77:c0:ad: 13:c1:f2:42:55:48:61:b2:87:a6:67:52:b7:04:34:75:56:30: 9c:d5:84:21:a1:c9:31:12:2c:1d:3d:e3:e0:9d:d5:c0:fb:c3: e8:79:82:c4:91:6a:82:ca:7c:0c:e0:48:1b:d6:49:d8:94:ae: 19:53:02:c9:f6:72:1e:55:c3:0d:da:44:31:9c:0e:32:4a:53: 54:23:e7:b4:0d:89:72:d6:7a:52:2d:67:28:92:67:84:80:43: 5e:30:26:62:fa:fc:89:8f:9f:f0:36:d9:f5:28:5b:ae:e0:d4: 83:12:f8:de:d0:74:32:1e:92:90:2e:b2:37:d8:11:0a:fa:e6: 87:19:81:33:59:c1:88:84:e8:82:a3:b5:7a:7c:6f:70:b1:91: 32:3e:bd:bd:84:9d:aa:7a:17:22:1d:2e:82:af:ac:73:ba:27: ad:f6:32:ea -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+OPGMMjfbdTW8aOFJ04RxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTAzYjFkZDQxMDA3MGFkNjJlNGEyZmM2NmExM2I0ZWI2MTM2OGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc73X34OmU6MdI2JQzrESMUNix5i +prA/quITL+1saK1shaslGzjq7UP3JcCwVkZSyfdzuffIxmflb3rxCKABZpL6QI/ K50TTm7Y9Jk9a9XA2bvc1AttLQ9YXtnViBf9s3+7UtiZTynjIXXiaQxLPvVRLHw+ HtrGIvw+d5WW/+LJNPDqFB5jCuEpXito4ELX5I6jjdiU6GX/sHkoFGzgJ7QZmLBU aVlX3+ptx9MJu3ChI91E3dPJFwTEGYf2xNqnCE6Ven8E18s5vJRxcz7Y81y8JihP R5DtcU9MKvzREtvtm+h4b/g8W6D/ut/22PKou6IkssHQPaMlzOY2iWSnnQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFKUDsd1BAHCtYuSi/GahO062E2j0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2ZmZWY5 Ni1iYWM1LTQxMjYtYjJiNy0wMTM1ZDkxMjhlODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZmZlZjk2 LWJhYzUtNDEyNi1iMmI3LTAxMzVkOTEyOGU4Ni8xL3BRT3gzVUVBY0sxaTVLTDha cUU3VHJZVGFQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBLpVAMA8EAgACMAkDBwAgAQZ4CfQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAylpMA0GCSqGSIb3DQEBCwUAA4IBAQCOmaWluoia eAIUCpRpFKjG5UwcFTQnT66r+5TiJyR/Ca3rqy5DNOqfBgPjDYurZY7b4WdPOz01 3VlDMro6+Hpg9/COXtT32E4zSdjf+0y/kc/7TcyY5Ox3wK0TwfJCVUhhsoemZ1K3 BDR1VjCc1YQhockxEiwdPePgndXA+8PoeYLEkWqCynwM4Egb1knYlK4ZUwLJ9nIe VcMN2kQxnA4ySlNUI+e0DYly1npSLWcokmeEgENeMCZi+vyJj5/wNtn1KFuu4NSD Evje0HQyHpKQLrI32BEK+uaHGYEzWcGIhOiCo7V6fG9wsZEyPr29hJ2qehciHS6C r6xzuiet9jLq -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:31 2026 by rpki-client