This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer File: pRA1bcClIYlc5h-FSV4G2vehKzs.cer (raw, json) Hash identifier: Q3NvG66G3kwIDbgGXkO2gsow8s+Re9+p3CWdIvvfAZE= Subject key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7AD81B9AC99959F97EE8A39FAA5BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199727 AS: 206308 IP: 185.37.40.0/22 IP: 185.189.172.0/22 IP: 2a04:1170::/31 IP: 2a0a:1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ad:81:b9:ac:99:95:9f:97:ee:8a:39:fa:a5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a510356dc0a521895ce61f85495e06daf7a12b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:a7:19:2c:02:68:7c:68:8f:f9:cf:3f:3b: f8:b7:ba:3a:aa:3a:06:dd:6a:31:b4:7a:e3:45:b8: 65:02:b3:a9:b4:3a:9a:49:10:ec:2a:74:42:98:f7: ee:94:1f:e2:f4:81:a5:51:e0:65:a7:7e:23:5d:97: bd:60:3a:6f:94:5c:25:b8:b0:09:28:bb:27:4a:a1: 34:c6:d5:9a:be:0f:d3:9b:46:bd:97:19:6a:80:a4: c4:19:24:af:27:07:2e:c4:96:fd:03:20:ad:f1:b4: ab:64:05:b1:47:b5:3d:53:38:eb:e6:c7:88:89:77: 38:ff:98:7b:89:8f:06:09:c1:4a:cf:86:eb:c6:44: 5f:e3:c0:8e:41:d9:7f:50:53:49:29:a4:2c:e3:7a: b7:e1:8c:3b:24:12:bc:27:0c:ef:0e:67:f3:c7:79: e7:21:cd:e5:e3:cd:55:fd:fa:ae:23:ef:5f:8e:f6: b1:b3:d4:ea:06:ed:0c:32:55:d5:fd:b3:8c:ca:1a: b7:19:9c:a8:91:14:fe:a7:08:f2:bf:20:3d:40:9d: a0:4a:77:53:d7:24:c3:77:e1:40:fb:ec:6a:46:c8: ca:a3:32:5e:ab:e0:09:da:6b:8a:57:3d:35:87:b9: 3f:a8:cb:57:89:dc:12:14:b4:b9:bd:7d:3c:50:7d: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.40.0/22 185.189.172.0/22 IPv6: 2a04:1170::/31 2a0a:1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199727 206308 Signature Algorithm: sha256WithRSAEncryption 77:c1:ee:f7:36:66:29:eb:59:c5:54:a1:f8:16:e5:e6:91:69: fd:09:69:ab:dd:94:34:0c:b1:a1:19:44:cd:5a:94:38:c4:aa: ac:88:b3:40:92:b8:05:99:79:d7:d8:64:df:36:41:98:3a:b1: 3c:fd:41:6a:68:71:57:0e:60:a0:f4:2a:db:0a:7d:31:0f:68: 94:21:99:0d:a3:e3:22:61:80:e2:d4:92:af:e1:68:9b:5a:ca: 89:f8:8e:82:7b:fe:19:3e:f9:3f:78:3a:49:1c:9e:f8:8f:50: ef:7c:ae:76:d9:e8:a1:47:25:1e:80:56:1f:4e:c7:1f:06:46: 76:07:ba:b4:78:ae:b6:78:4b:43:71:c2:30:86:e9:b9:e4:e0: 20:96:d6:4b:e3:5e:74:46:34:24:9b:fc:d7:57:39:5c:6c:12: f7:b7:c4:0c:9c:d2:ed:f9:72:20:22:0c:7a:53:22:92:00:6a: 94:47:cc:99:df:b0:5f:bf:47:75:05:24:48:9f:ed:80:8d:31: c8:f5:50:b4:22:40:63:fd:94:76:9f:f4:6b:88:83:34:c7:2b: bb:95:78:f7:52:88:3e:8a:cc:08:b2:cc:e4:31:55:17:32:24: 3f:81:fb:f0:8a:c8:d9:b0:4d:df:18:46:06:2e:fa:c4:c4:24: 4f:11:25:9f -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt6x62BuayZlZ+X7oo5+qW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTEwMzU2ZGMwYTUyMTg5NWNlNjFmODU0OTVlMDZkYWY3YTEyYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv6nGSwCaHxoj/nPPzv4t7o6qjoG 3WoxtHrjRbhlArOptDqaSRDsKnRCmPfulB/i9IGlUeBlp34jXZe9YDpvlFwluLAJ KLsnSqE0xtWavg/Tm0a9lxlqgKTEGSSvJwcuxJb9AyCt8bSrZAWxR7U9Uzjr5seI iXc4/5h7iY8GCcFKz4brxkRf48COQdl/UFNJKaQs43q34Yw7JBK8JwzvDmfzx3nn Ic3l481V/fquI+9fjvaxs9TqBu0MMlXV/bOMyhq3GZyokRT+pwjyvyA9QJ2gSndT 1yTDd+FA++xqRsjKozJeq+AJ2muKVz01h7k/qMtXidwSFLS5vX08UH2KCwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKUQNW3ApSGJXOYfhUleBtr3oSs7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzNjN2M3 Yy00MzI2LTQxODQtODM1Ni0wMTE4MmY4NDA3ODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvM2M3Yzdj LTQzMjYtNDE4NC04MzU2LTAxMTgyZjg0MDc4OS8xL3BSQTFiY0NsSVlsYzVoLUZT VjRHMnZlaEt6cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuSUoAwQCub2sMBQEAgACMA4DBQEqBBFwAwUD KgoBwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDDC8CAwMl5DANBgkqhkiG9w0B AQsFAAOCAQEAd8Hu9zZmKetZxVSh+Bbl5pFp/Qlpq92UNAyxoRlEzVqUOMSqrIiz QJK4BZl519hk3zZBmDqxPP1BamhxVw5goPQq2wp9MQ9olCGZDaPjImGA4tSSr+Fo m1rKifiOgnv+GT75P3g6SRye+I9Q73yudtnooUclHoBWH07HHwZGdge6tHiutnhL Q3HCMIbpueTgIJbWS+NedEY0JJv811c5XGwS97fEDJzS7flyICIMelMikgBqlEfM md+wX79HdQUkSJ/tgI0xyPVQtCJAY/2Udp/0a4iDNMcru5V491KIPorMCLLM5DFV FzIkP4H78IrI2bBN3xhGBi76xMQkTxElnw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:52 2026 by rpki-client