This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer File: pS3-y7QxcCl5YaIbfltKPEfeCVs.cer (raw, json) Hash identifier: 6omKli3kxyhDsVntlYIfu5cGjHnqwvF1aVxrxufZYd8= Subject key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14BF13C23AC257E2520DEBBBC839C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198071 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:bf:13:c2:3a:c2:57:e2:52:0d:eb:bb:c8:39:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2f:16:fc:36:7c:16:5a:81:6a:e4:65:ab:72: 42:b5:fd:ba:12:ae:52:bb:c5:e8:78:a9:c6:ce:7d: f9:2c:09:b8:4b:78:b9:a7:ff:d4:a1:42:43:62:72: c6:d9:da:18:75:08:cf:35:b3:99:02:ef:0b:58:3a: 32:be:f9:25:ac:16:ae:71:bc:0d:15:f2:24:20:c3: 67:aa:e9:99:f3:d6:92:a9:b8:9f:1c:c4:c2:23:59: 28:a6:5d:b2:34:64:2e:e2:22:4d:66:f5:49:a5:68: 00:3f:5a:8e:57:55:85:f0:77:bf:6f:f1:7a:24:3d: b2:12:db:4b:9a:4d:4e:09:bf:00:61:05:9f:4b:93: 62:56:00:d4:04:0b:a5:e0:34:cf:b8:8b:18:44:c4: 65:09:58:a8:86:79:30:35:ea:ca:cc:24:2c:7f:85: 56:a2:7c:39:af:d0:e8:d0:b6:ef:13:92:42:aa:ad: c4:3c:7e:d7:81:b7:d8:16:17:7c:d0:b0:cf:83:b7: 09:f9:0a:99:a4:06:b1:91:e1:8c:42:17:b0:93:f4: f1:aa:c6:bd:a1:a2:68:b6:ef:1d:7a:35:f2:60:6d: 62:38:39:ac:c2:c6:21:0c:68:07:f4:2b:57:23:1f: b9:8f:33:81:fe:04:71:59:88:b6:8e:66:c4:16:b9: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198071 Signature Algorithm: sha256WithRSAEncryption 5b:63:59:b6:95:9b:2f:4c:39:0c:c6:b0:d2:e8:71:66:59:77: b3:4f:f7:ad:46:13:b2:5c:29:1e:e9:69:53:dd:4a:80:a8:a7: e0:9b:0d:3a:36:d5:1a:55:b7:51:f4:9b:f6:44:e6:be:08:85: 03:b5:a8:03:19:52:50:29:68:1c:19:2d:36:1a:a0:82:ef:e4: 2f:d0:4f:2f:b1:79:0b:d5:83:21:4a:6b:c5:e2:f4:b7:75:9b: 02:44:87:11:47:ae:e5:ed:e0:05:35:73:be:a1:58:16:f7:52: 55:2e:2f:d8:17:b2:bd:cc:f0:f0:7b:00:7e:dd:6c:0c:13:3d: 97:b7:49:64:02:37:02:75:88:46:95:24:d5:82:70:84:2b:f6: 5d:3a:bb:be:18:d5:e1:fa:8d:6b:4a:2b:3e:13:23:ec:51:8a: 35:ff:ae:be:17:ed:8f:37:e0:45:45:7b:9b:d1:cf:19:32:3f: 7b:58:85:a0:82:a2:00:26:98:a5:4e:51:af:14:1b:72:6a:b4: e7:61:84:9d:7c:b7:26:00:8d:46:0d:18:df:4d:01:d8:66:e5: 81:20:00:14:76:fd:e9:6e:5e:08:71:83:2d:38:42:f6:81:ae: 1b:e6:d7:32:95:6d:9e:2b:1c:f9:02:36:b3:7e:4a:d3:80:5b: 60:85:67:cd -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FL8TwjrCV+JSDeu7yDnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTJkZmVjYmI0MzE3MDI5Nzk2MWEyMWI3ZTViNGEzYzQ3ZGUwOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky8W/DZ8FlqBauRlq3JCtf26Eq5S u8XoeKnGzn35LAm4S3i5p//UoUJDYnLG2doYdQjPNbOZAu8LWDoyvvklrBaucbwN FfIkIMNnqumZ89aSqbifHMTCI1kopl2yNGQu4iJNZvVJpWgAP1qOV1WF8He/b/F6 JD2yEttLmk1OCb8AYQWfS5NiVgDUBAul4DTPuIsYRMRlCViohnkwNerKzCQsf4VW onw5r9Do0LbvE5JCqq3EPH7XgbfYFhd80LDPg7cJ+QqZpAaxkeGMQhewk/Txqsa9 oaJotu8dejXyYG1iODmswsYhDGgH9CtXIx+5jzOB/gRxWYi2jmbEFrnePwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKUt/su0MXApeWGiG35bSjxH3glbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzYzMjkx NS1lN2ExLTQ2MTAtYmYxNS1iZDU3OTBhMmJhNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNjMyOTE1 LWU3YTEtNDYxMC1iZjE1LWJkNTc5MGEyYmE1MC8xL3BTMy15N1F4Y0NsNVlhSWJm bHRLUEVmZUNWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMFtzANBgkqhkiG9w0BAQsFAAOCAQEAW2NZtpWbL0w5 DMaw0uhxZll3s0/3rUYTslwpHulpU91KgKin4JsNOjbVGlW3UfSb9kTmvgiFA7Wo AxlSUCloHBktNhqggu/kL9BPL7F5C9WDIUprxeL0t3WbAkSHEUeu5e3gBTVzvqFY FvdSVS4v2Beyvczw8HsAft1sDBM9l7dJZAI3AnWIRpUk1YJwhCv2XTq7vhjV4fqN a0orPhMj7FGKNf+uvhftjzfgRUV7m9HPGTI/e1iFoIKiACaYpU5RrxQbcmq052GE nXy3JgCNRg0Y300B2GblgSAAFHb96W5eCHGDLThC9oGuG+bXMpVtnisc+QI2s35K 04BbYIVnzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:09 2026 by rpki-client