This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer (raw, json) Hash identifier: YdIjHySxKkjCxtJ7wRlBkGpRbesCj3PDusRkbMlJwN8= Subject key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF31F015828DBBE8E9C1EF21E5A81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51070 IP: 176.116.48.0/20 IP: 192.162.20.0/22 IP: 195.254.188.0/23 IP: 2001:67c:76c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f3:1f:01:58:28:db:be:8e:9c:1e:f2:1e:5a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c22864e3920e160ad9b84ff01da866aa409785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:e8:6b:96:59:82:16:20:57:3d:62:a2:b6: 98:b5:9b:7d:5b:f2:48:b2:55:05:ea:a7:03:b6:3d: 65:e5:d4:06:2b:10:f5:77:91:49:4b:96:19:55:d5: 74:8a:37:08:f0:67:a6:27:a3:7b:3c:68:b2:32:32: 05:a1:00:de:35:d5:26:5d:a1:a3:68:f7:52:29:28: 23:db:f8:57:8f:31:d6:89:39:1d:8a:8c:b9:a4:d9: a4:15:8e:1d:4b:63:f1:69:0d:b8:f0:4f:16:04:a0: 1c:18:40:29:06:23:79:7a:fc:4c:51:b3:0c:8c:8f: 85:69:2a:f1:4a:52:e2:25:a3:67:ee:fb:ff:10:e3: 0d:f7:1b:5f:fe:94:e7:2c:d4:0d:5f:2b:1b:e8:86: 60:36:b6:20:a0:e6:1c:20:e1:99:9a:09:34:c4:92: f2:bb:c5:1d:2c:ba:3e:43:52:4d:06:f2:b7:a4:65: e3:c3:05:a9:e3:bd:75:49:44:6a:17:28:5f:3c:63: fe:70:21:ec:12:06:7e:b5:18:13:69:f2:bf:76:62: 80:07:46:84:65:65:f9:79:35:4a:b4:e2:88:3a:8a: 16:53:2f:b0:92:13:44:50:6b:b4:60:12:cd:2c:f9: 7a:1e:a4:13:e0:ae:55:08:83:65:2f:ff:14:95:bc: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.48.0/20 192.162.20.0/22 195.254.188.0/23 IPv6: 2001:67c:76c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51070 Signature Algorithm: sha256WithRSAEncryption 7d:ea:b6:94:84:6b:3c:f6:80:2c:af:d7:75:b9:f8:ba:05:7a: 71:3d:b5:0a:63:28:4b:6f:7b:4e:37:ff:d0:95:fc:fe:19:d8: 26:d0:3a:dc:e9:0f:0e:3f:a6:4b:02:2e:49:66:5a:c6:b4:86: 04:e1:27:f8:85:0d:44:00:26:ff:66:fa:7c:de:16:fa:be:e5: ec:db:9e:c0:a7:ba:74:15:24:4c:77:4c:c2:ba:cc:78:78:b0: b3:0a:ff:3b:d9:be:bc:03:d3:cf:b3:f6:41:17:cb:0d:71:f5: d8:f1:38:9f:1f:65:11:59:98:0d:3b:7d:33:17:4f:17:18:94: a1:9e:af:d3:37:5c:91:8b:33:e0:d6:ea:5d:7a:a8:cf:4e:38: e7:03:28:d7:80:43:4f:1b:dc:ed:a0:f3:a1:7c:91:2c:06:6b: 29:6f:fd:aa:79:38:9e:c0:3c:f6:f3:58:00:cc:06:6b:1c:d5: a4:cb:12:67:05:af:30:d2:45:43:a3:b3:b3:15:2e:40:f1:ed: 74:e4:5b:78:b6:ae:6d:b9:0b:a1:d1:4d:98:e3:22:4e:fa:fe: 71:b7:ce:ab:cc:fb:87:b1:ec:be:88:4a:68:bd:20:44:4f:a4: 2d:1a:57:2e:66:72:d8:d0:a9:5d:2a:fc:28:88:1f:1c:2d:26: 46:f6:76:48 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt8f/MfAVgo276OnB7yHlqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWMyMjg2NGUzOTIwZTE2MGFkOWI4NGZmMDFkYTg2NmFhNDA5Nzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnoa5ZZghYgVz1ioraYtZt9W/JI slUF6qcDtj1l5dQGKxD1d5FJS5YZVdV0ijcI8GemJ6N7PGiyMjIFoQDeNdUmXaGj aPdSKSgj2/hXjzHWiTkdioy5pNmkFY4dS2PxaQ248E8WBKAcGEApBiN5evxMUbMM jI+FaSrxSlLiJaNn7vv/EOMN9xtf/pTnLNQNXysb6IZgNrYgoOYcIOGZmgk0xJLy u8UdLLo+Q1JNBvK3pGXjwwWp4711SURqFyhfPGP+cCHsEgZ+tRgTafK/dmKAB0aE ZWX5eTVKtOKIOooWUy+wkhNEUGu0YBLNLPl6HqQT4K5VCINlL/8UlbxnZwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFKXCKGTjkg4WCtm4T/AdqGaqQJeFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2FkOTg0 YS05OWFjLTQxM2EtYmRkZS01NGM4ODkwZGZmMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvYWQ5ODRh LTk5YWMtNDEzYS1iZGRlLTU0Yzg4OTBkZmYyZC8xL3BjSW9aT09TRGhZSzJiaFA4 QjJvWnFwQWw0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQEsHQwAwQCwKIUAwQBw/68MA8EAgACMAkDBwAg AQZ8B2wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMd+MA0GCSqGSIb3DQEBCwUA A4IBAQB96raUhGs89oAsr9d1ufi6BXpxPbUKYyhLb3tON//Qlfz+Gdgm0Drc6Q8O P6ZLAi5JZlrGtIYE4Sf4hQ1EACb/Zvp83hb6vuXs257Ap7p0FSRMd0zCusx4eLCz Cv872b68A9PPs/ZBF8sNcfXY8TifH2URWZgNO30zF08XGJShnq/TN1yRizPg1upd eqjPTjjnAyjXgENPG9ztoPOhfJEsBmspb/2qeTiewDz281gAzAZrHNWkyxJnBa8w 0kVDo7OzFS5A8e105Ft4tq5tuQuh0U2Y4yJO+v5xt86rzPuHsey+iEpovSBET6Qt GlcuZnLY0KldKvwoiB8cLSZG9nZI -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:19 2026 by rpki-client