This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer File: pcEGAjxJWQSwQKy5l49Po7DF4tw.cer (raw, json) Hash identifier: i5GvIDcJwt9qh1h/BYcAHOUxuKL2CD/92Hs7jrMOivo= Subject key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF15870CCA9DBE39AD1A3889407540A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41345 IP: 193.37.153.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:58:70:cc:a9:db:e3:9a:d1:a3:88:94:07:54:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:e8:ea:4d:34:e4:40:f0:7b:af:19:38:da: f1:9e:4c:1d:a1:a6:69:89:13:83:d3:bd:2f:92:e8: 52:e9:de:c2:36:d2:5e:86:1d:08:4d:d7:41:ad:2e: 5b:eb:6c:e8:02:ac:81:49:74:71:6b:92:40:15:68: 42:9b:cb:e0:e0:69:ce:81:03:b8:84:07:4e:90:6e: bc:04:3b:dc:4a:9f:54:80:0d:ae:78:e3:9c:10:d7: b4:0a:43:09:a7:15:78:0e:12:22:e2:2e:63:8c:e0: d8:1f:df:f2:98:91:9d:cc:98:2d:1a:91:a1:11:d9: 23:55:1c:e8:ad:8d:8c:44:9d:96:55:a0:0c:2a:d0: 59:6b:5a:d5:58:85:aa:8f:65:87:d4:f0:ae:02:e4: 82:77:89:10:47:17:aa:fc:61:2f:db:e9:1e:5f:06: c4:16:a6:9b:b5:8e:e7:7d:47:68:bd:ed:94:db:b7: a8:69:56:9f:c5:5c:5e:da:db:43:d3:8c:44:87:dd: e8:f2:83:52:c4:8c:05:cd:1e:17:b4:4a:2e:3a:79: b7:17:34:85:72:8f:c0:a9:86:78:6b:7b:f9:44:f4: 89:0d:c1:81:59:75:7b:79:c9:34:2d:f6:be:72:03: 8f:78:57:d2:45:2f:a5:39:b5:77:e3:2c:76:35:c9: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.153.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41345 Signature Algorithm: sha256WithRSAEncryption 17:b0:c2:5a:49:16:9a:ce:8b:f0:ca:df:19:1f:de:81:61:ba: 83:15:8d:ca:97:72:1d:3b:4e:6d:ff:ab:1e:62:25:a5:7c:55: c1:be:5e:4f:d5:28:ba:8d:b4:8e:c6:f8:cc:1b:45:6c:af:fb: a0:8f:ef:13:bc:9b:45:a2:9f:66:6a:80:e7:4b:d0:ab:b3:6a: e7:5a:46:c4:3a:77:ac:4d:32:f9:0f:4e:a6:fa:d5:31:3c:59: 91:fd:ee:f8:2e:38:44:f2:63:66:6e:22:a0:73:15:d4:ad:ff: 15:ed:ee:51:47:ea:1e:20:e3:6c:07:89:11:04:1d:2d:96:19: 36:47:21:bb:57:dd:a9:b3:21:e8:4a:7b:0b:f2:70:40:69:06: fa:45:c7:e8:b1:0c:20:3e:f5:c4:2d:06:83:ce:28:31:f0:5d: a3:2d:c3:0c:9a:0a:d7:a6:fb:9f:c3:17:83:b3:cf:88:31:9a: bd:5e:5e:68:88:6b:4f:7b:47:28:66:ab:f1:53:1d:3e:ef:32: c2:26:6a:55:04:bd:7b:43:b3:f3:24:2c:0d:6e:0c:6f:e9:0e: f5:38:29:e0:e7:b0:54:4f:ef:fe:dc:4e:1d:f1:c2:e9:9d:08: 36:4f:da:4c:62:e6:1b:05:53:a2:9e:61:0f:c2:50:a2:31:de: a5:26:f0:c9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8VhwzKnb45rRo4iUB1QKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWMxMDYwMjNjNDk1OTA0YjA0MGFjYjk5NzhmNGZhM2IwYzVlMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcbo6k005EDwe68ZONrxnkwdoaZp iROD070vkuhS6d7CNtJehh0ITddBrS5b62zoAqyBSXRxa5JAFWhCm8vg4GnOgQO4 hAdOkG68BDvcSp9UgA2ueOOcENe0CkMJpxV4DhIi4i5jjODYH9/ymJGdzJgtGpGh EdkjVRzorY2MRJ2WVaAMKtBZa1rVWIWqj2WH1PCuAuSCd4kQRxeq/GEv2+keXwbE FqabtY7nfUdove2U27eoaVafxVxe2ttD04xEh93o8oNSxIwFzR4XtEouOnm3FzSF co/AqYZ4a3v5RPSJDcGBWXV7eck0Lfa+cgOPeFfSRS+lObV34yx2NcmQZwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKXBBgI8SVkEsECsuZePT6OwxeLcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzA3MDAz Mi0wYmIzLTQzNTItODllYi00OTEzYTBjYTc0MDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMDcwMDMy LTBiYjMtNDM1Mi04OWViLTQ5MTNhMGNhNzQwOS8xL3BjRUdBanhKV1FTd1FLeTVs NDlQbzdERjR0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSWZMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwChgTANBgkqhkiG9w0BAQsFAAOCAQEAF7DCWkkWms6L8MrfGR/egWG6gxWNypdy HTtObf+rHmIlpXxVwb5eT9Uouo20jsb4zBtFbK/7oI/vE7ybRaKfZmqA50vQq7Nq 51pGxDp3rE0y+Q9OpvrVMTxZkf3u+C44RPJjZm4ioHMV1K3/Fe3uUUfqHiDjbAeJ EQQdLZYZNkchu1fdqbMh6Ep7C/JwQGkG+kXH6LEMID71xC0Gg84oMfBdoy3DDJoK 16b7n8MXg7PPiDGavV5eaIhrT3tHKGar8VMdPu8ywiZqVQS9e0Oz8yQsDW4Mb+kO 9Tgp4OewVE/v/txOHfHC6Z0INk/aTGLmGwVTop5hD8JQojHepSbwyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:18 2026 by rpki-client