This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer File: pa6KPYvaq_R2X9p51V7KjGnIvyw.cer (raw, json) Hash identifier: HDL20URD7nebBYyBD9Tti02g3jr4WQ5APoRG3rHkaGY= Subject key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38D00E63E8245F2F3DB2E832045917 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.209.192.0/21 IP: 91.237.174.0/23 IP: 185.135.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d0:0e:63:e8:24:5f:2f:3d:b2:e8:32:04:59:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:3a:7e:cc:d0:89:e7:27:be:c0:9b:b9:a7: 77:c8:94:ac:3d:d4:0e:fa:48:be:6c:29:37:df:75: 7d:eb:26:d7:7e:ee:f2:3c:e0:1a:d1:3d:52:27:bd: 0d:fd:c1:4b:78:69:b5:97:b2:5e:68:11:f5:c7:84: 9e:e8:7d:bc:80:8c:c6:39:91:23:97:48:8f:93:54: 3f:cd:e3:08:fa:90:b8:2a:88:e5:ed:03:43:f0:b9: fa:52:de:d4:b7:e7:dd:ac:a8:ae:be:32:c5:a5:98: 3f:7c:25:31:6f:98:af:96:b1:7e:ea:9a:da:d7:44: 08:0b:7f:95:d3:15:0e:bc:22:07:21:3d:3f:fc:a1: a4:b1:14:6e:b4:34:9b:70:e8:7c:43:2b:57:75:04: 92:82:09:11:76:8c:00:be:de:84:a5:1e:9a:45:2d: 78:bd:0c:bf:a4:0b:6f:48:7b:ef:18:72:72:90:ad: 7a:25:1f:4d:b4:51:5a:2a:0f:13:76:c0:a2:a7:a7: 22:ca:69:bd:04:38:25:c4:a5:50:b4:c1:9e:f7:0e: 96:aa:24:65:03:c8:3e:1a:98:a1:c1:33:45:00:3e: e2:69:55:f7:fe:8d:59:73:c6:5a:2f:83:9b:62:38: 50:1b:be:dc:36:80:b2:79:e5:42:de:e7:c1:ad:b8: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/21 91.237.174.0/23 185.135.152.0/22 Signature Algorithm: sha256WithRSAEncryption 33:dc:e0:e2:12:76:81:45:fc:02:8a:dc:e1:6d:1d:0f:17:90: e9:8e:7c:a0:31:96:b5:ba:d0:27:e6:56:0c:6d:e5:a6:da:ef: ec:b5:cf:b8:87:02:6d:c4:ab:5a:57:b6:ee:34:35:1b:f8:fb: 0d:15:7a:30:9a:4b:8c:eb:6d:ef:9b:a7:a7:b8:2f:2b:ff:4c: 25:f8:9f:b8:55:3f:bf:16:db:e6:92:00:17:51:f2:4e:ed:17: c6:2b:7c:fa:39:46:8b:12:00:52:1d:ee:e4:52:2a:b5:b9:0c: b7:18:96:8c:d2:1e:49:92:5e:e4:ee:ab:eb:11:bd:c5:a2:eb: 4d:5b:50:5f:31:2d:38:ab:f9:d7:e7:d3:f6:04:0a:a5:12:c5: 88:51:c6:db:1d:5f:b6:93:8c:1c:bd:aa:53:f7:57:8e:46:b5: 7a:3b:77:a1:77:f6:91:52:c1:65:72:dc:c5:e2:bf:9e:0a:dc: c7:ba:df:da:49:f4:e8:ec:22:66:c6:4f:ba:eb:bb:f3:83:52: fc:02:1d:f0:f6:8a:9b:ca:73:a2:ce:4e:9c:6e:e3:0f:e6:5d: ff:11:a9:b4:e1:c4:a4:30:8b:7d:f7:91:26:15:43:7a:7e:92: 24:90:fb:88:8b:94:1f:84:c8:15:c7:d1:fd:b5:7b:f8:86:65: 46:cd:3f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt+ONAOY+gkXy89sugyBFkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWFlOGEzZDhiZGFhYmY0NzY1ZmRhNzlkNTVlY2E4YzY5YzhiZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYE6fszQiecnvsCbuad3yJSsPdQO +ki+bCk333V96ybXfu7yPOAa0T1SJ70N/cFLeGm1l7JeaBH1x4Se6H28gIzGOZEj l0iPk1Q/zeMI+pC4Kojl7QND8Ln6Ut7Ut+fdrKiuvjLFpZg/fCUxb5ivlrF+6pra 10QIC3+V0xUOvCIHIT0//KGksRRutDSbcOh8QytXdQSSggkRdowAvt6EpR6aRS14 vQy/pAtvSHvvGHJykK16JR9NtFFaKg8TdsCip6ciymm9BDglxKVQtMGe9w6WqiRl A8g+GpihwTNFAD7iaVX3/o1Zc8ZaL4ObYjhQG77cNoCyeeVC3ufBrbgGTwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFKWuij2L2qv0dl/aedVeyoxpyL8sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzBkMjgw Yy05ZDg4LTRhZWEtYjUyMS00MTZmODVlZTIzN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvMGQyODBj LTlkODgtNGFlYS1iNTIxLTQxNmY4NWVlMjM3Yi8xL3BhNktQWXZhcV9SMlg5cDUx VjdLakduSXZ5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDJdHAAwQBW+2uAwQCuYeYMA0GCSqGSIb3DQEB CwUAA4IBAQAz3ODiEnaBRfwCitzhbR0PF5DpjnygMZa1utAn5lYMbeWm2u/stc+4 hwJtxKtaV7buNDUb+PsNFXowmkuM623vm6enuC8r/0wl+J+4VT+/FtvmkgAXUfJO 7RfGK3z6OUaLEgBSHe7kUiq1uQy3GJaM0h5Jkl7k7qvrEb3FoutNW1BfMS04q/nX 59P2BAqlEsWIUcbbHV+2k4wcvapT91eORrV6O3ehd/aRUsFlctzF4r+eCtzHut/a SfTo7CJmxk+667vzg1L8Ah3w9oqbynOizk6cbuMP5l3/Eam04cSkMIt995EmFUN6 fpIkkPuIi5QfhMgVx9H9tXv4hmVGzT+9 -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:06 2026 by rpki-client