This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer File: pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer (raw, json) Hash identifier: bdAmG+OORzzk+HnD3MfEBWI5dU1SBUFts8WgZphAWho= Subject key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB37BCE5033B58888614451BF9982 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49140 IP: 193.200.161.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b3:7b:ce:50:33:b5:88:88:61:44:51:bf:99:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:e7:4f:87:2f:c1:85:95:28:d7:f8:bc:18: 17:78:68:19:70:40:04:e9:8d:94:f0:b5:be:24:79: 81:a7:65:03:c9:6e:fa:8c:55:16:60:c1:94:2e:c4: f4:ca:99:1e:04:64:fe:c3:1e:5d:f9:29:2b:e2:2a: 27:35:c0:38:f1:24:49:9c:c9:09:85:8e:e5:e0:e4: 64:3d:c6:80:bf:61:e4:17:9e:e7:a5:48:65:fe:41: 86:19:b6:24:e5:f8:2b:92:76:92:66:fe:fc:81:1a: ae:b0:57:b3:d8:be:22:7d:5a:66:df:8a:c9:e2:f7: d0:d1:0a:12:20:33:2e:ab:10:c8:53:45:11:94:cd: a1:7a:e6:f3:52:03:bd:f6:40:e4:f6:e2:0d:70:66: bb:fd:2c:e1:cb:ba:8c:ae:25:e5:56:0d:48:48:54: 2b:8a:db:21:b6:8c:5e:21:10:66:96:91:c1:db:0c: f2:76:a0:8b:ad:6c:94:10:b9:dc:2f:d7:68:8f:ce: ae:c1:53:2b:9f:4e:97:12:06:af:df:36:81:91:55: 76:0d:a0:71:0b:86:d9:00:94:65:63:b2:bb:7f:6d: b4:09:05:41:7a:2a:03:48:5f:b8:0d:6f:7a:a1:99: 09:0f:9c:82:a4:ba:30:ed:b3:fd:12:1e:b3:09:9d: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.161.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49140 Signature Algorithm: sha256WithRSAEncryption 82:55:66:c3:50:82:56:a1:83:be:a1:c2:dc:4c:69:f1:64:4e: c7:d4:95:1f:c5:9a:6b:fb:e0:b5:98:88:a1:9f:30:2c:f5:67: 6d:ee:8d:62:9c:ce:09:77:9d:8e:2a:a5:73:1e:b1:ea:67:57: 1e:9d:d7:65:7a:48:3b:1a:70:36:17:07:05:56:6f:bd:30:e1: 24:04:76:71:3a:38:df:c6:2d:09:71:36:7d:c1:37:e2:cb:c6: d9:02:18:7b:b8:1b:ed:87:65:a2:01:72:0f:e2:16:78:d3:19: a6:54:ae:f0:b1:a9:d7:51:6e:6c:53:e2:fe:f6:8f:1f:bf:d9: 80:6c:a4:d6:f5:01:8e:e1:08:10:ed:3f:21:86:ea:86:4e:b1: 62:27:2e:5a:55:ff:d3:5a:5d:72:00:5d:ee:5b:c9:88:d9:27: df:1c:d3:26:25:cd:a9:36:1e:70:d5:bd:2f:3c:6b:fd:a0:b2: d0:31:d5:01:78:1a:c9:b4:47:85:fa:33:9e:cd:c4:c6:a5:9c: 59:14:e9:a8:dc:ea:0b:19:c1:f7:24:35:3e:79:25:d6:85:04: 2c:9a:d8:4b:65:46:85:01:f8:af:28:96:63:19:dd:e4:0f:04: 9a:7f:7c:12:62:67:3c:e2:4c:ba:cf:11:15:d2:8d:d3:3d:bf: f4:90:79:c9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26rN7zlAztYiIYURRv5mCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWNkZTIwNGEzNjY5ZjkyODFlZTFmYzFkNWYyNDg1NDJhODA1ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFnnT4cvwYWVKNf4vBgXeGgZcEAE 6Y2U8LW+JHmBp2UDyW76jFUWYMGULsT0ypkeBGT+wx5d+Skr4ionNcA48SRJnMkJ hY7l4ORkPcaAv2HkF57npUhl/kGGGbYk5fgrknaSZv78gRqusFez2L4ifVpm34rJ 4vfQ0QoSIDMuqxDIU0URlM2heubzUgO99kDk9uINcGa7/Szhy7qMriXlVg1ISFQr itshtoxeIRBmlpHB2wzydqCLrWyUELncL9doj86uwVMrn06XEgav3zaBkVV2DaBx C4bZAJRlY7K7f220CQVBeioDSF+4DW96oZkJD5yCpLow7bP9Eh6zCZ2aowIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKXN4gSjZp+Sge4fwdXySFQqgF4AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzFhM2Uw YS05MDJlLTRjODAtODNjNi03YmMyZjljYzE4NTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMWEzZTBh LTkwMmUtNGM4MC04M2M2LTdiYzJmOWNjMTg1MS8xL3BjM2lCS05tbjVLQjdoX0Ix ZkpJVkNxQVhnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcihMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/9DANBgkqhkiG9w0BAQsFAAOCAQEAglVmw1CCVqGDvqHC3Exp8WROx9SVH8Wa a/vgtZiIoZ8wLPVnbe6NYpzOCXedjiqlcx6x6mdXHp3XZXpIOxpwNhcHBVZvvTDh JAR2cTo438YtCXE2fcE34svG2QIYe7gb7YdlogFyD+IWeNMZplSu8LGp11FubFPi /vaPH7/ZgGyk1vUBjuEIEO0/IYbqhk6xYicuWlX/01pdcgBd7lvJiNkn3xzTJiXN qTYecNW9Lzxr/aCy0DHVAXgaybRHhfozns3ExqWcWRTpqNzqCxnB9yQ1Pnkl1oUE LJrYS2VGhQH4ryiWYxnd5A8Emn98EmJnPOJMus8RFdKN0z2/9JB5yQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:07 2026 by rpki-client