This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer File: pcY3PqsZz0PdL0MRE5g4PuK60DA.cer (raw, json) Hash identifier: i6hDy/Ay4JwS58PLzEcd4HHtukaYSu5kDzDtnhG9v10= Subject key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA51FC949B6F20BC27F11647996B92C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212017 IP: 185.142.200.0/22 IP: 185.228.0.0/22 IP: 2a07:3000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1f:c9:49:b6:f2:0b:c2:7f:11:64:79:96:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:7c:5f:56:61:26:3f:35:9e:19:2e:33:3a: 82:ad:35:8a:5b:dd:73:c3:e1:26:48:1d:5a:97:c9: d8:21:f3:32:65:9c:5c:06:7a:6b:a1:05:4e:be:a9: 51:09:aa:23:d0:87:f5:c6:25:2e:a4:eb:a8:23:6b: cc:e5:bb:db:97:44:a1:54:20:38:fa:50:84:09:a5: 0a:a0:5a:fc:65:3d:62:27:4c:db:3b:e2:ab:4e:97: 86:f4:ee:88:92:c0:1c:1e:8b:c9:ba:a0:1c:79:1f: 19:77:fd:a6:14:90:da:10:38:9a:9e:0b:86:15:f5: 72:ac:de:24:b9:49:ee:e7:78:37:2c:a7:f6:22:f9: 37:01:c4:51:1e:74:b3:f9:f8:7d:e8:de:05:30:9d: 75:cb:63:73:3c:81:24:95:5e:f5:48:4f:bf:37:27: 1e:9c:93:3f:04:27:26:d9:af:36:5f:d8:00:24:c8: f3:04:84:01:47:e3:26:27:d6:59:ca:32:2c:a9:c3: 00:c9:96:f8:e4:43:c6:84:dd:b9:3a:56:d8:bb:be: dc:64:4c:93:e6:f7:28:61:95:ec:68:00:85:02:92: ce:36:de:e2:6c:10:07:3e:54:57:5c:51:29:78:87: 42:ef:69:78:9d:e5:fc:47:2c:52:a7:5e:c4:aa:d6: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.200.0/22 185.228.0.0/22 IPv6: 2a07:3000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212017 Signature Algorithm: sha256WithRSAEncryption 32:2a:da:06:71:1d:76:bc:d1:4e:d1:c4:5a:83:cb:a9:89:42: ba:12:ec:dd:a3:07:da:59:61:d6:2f:e8:f9:b7:93:23:be:4d: 76:f5:8f:fe:e3:1d:a4:ed:1a:61:11:12:38:6b:74:5f:14:fe: e9:30:d8:8a:b3:ae:ef:e9:b5:5b:e4:1e:4f:ad:32:9e:c7:0a: 59:0a:57:e5:cb:3b:92:45:6e:15:e2:ab:f0:b9:44:ee:c7:25: f9:c6:6d:a5:c9:6c:e3:8a:b4:09:c3:36:06:51:a3:e0:07:a9: c0:5b:3b:fd:a7:83:64:84:ce:02:29:c5:55:61:9e:78:0a:fc: a4:49:ad:62:df:87:12:0a:f7:d5:56:ed:0f:2d:8d:0a:95:12: 35:66:2d:ef:73:01:16:6e:6c:b2:eb:9c:e6:ab:38:61:d1:fa: 3e:23:14:fb:28:e3:d8:3f:5e:62:f9:21:69:8c:74:6a:ee:fc: 25:f4:09:27:6f:47:c4:1a:fb:fd:de:75:ac:09:a2:7e:39:07: 15:ab:6f:3b:3c:60:86:ef:60:a6:46:fb:ea:64:41:68:40:ea: d5:a3:e0:47:11:55:8b:99:da:6f:9d:61:69:a6:24:53:c8:3b: 73:82:cd:05:6c:db:22:96:fc:1b:29:c7:95:3e:b6:1e:0a:cf: d2:1e:15:ab -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pR/JSbbyC8J/EWR5lrksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWM2MzczZWFiMTljZjQzZGQyZjQzMTExMzk4MzgzZWUyYmFkMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPR8X1ZhJj81nhkuMzqCrTWKW91z w+EmSB1al8nYIfMyZZxcBnproQVOvqlRCaoj0If1xiUupOuoI2vM5bvbl0ShVCA4 +lCECaUKoFr8ZT1iJ0zbO+KrTpeG9O6IksAcHovJuqAceR8Zd/2mFJDaEDianguG FfVyrN4kuUnu53g3LKf2Ivk3AcRRHnSz+fh96N4FMJ11y2NzPIEklV71SE+/Nyce nJM/BCcm2a82X9gAJMjzBIQBR+MmJ9ZZyjIsqcMAyZb45EPGhN25OlbYu77cZEyT 5vcoYZXsaACFApLONt7ibBAHPlRXXFEpeIdC72l4neX8RyxSp17EqtZrvwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKXGNz6rGc9D3S9DEROYOD7iutAwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2YwZjVl My02MDUwLTRlMmQtYTRlYS1hNGVhMGE2M2Y3NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvZjBmNWUz LTYwNTAtNGUyZC1hNGVhLWE0ZWEwYTYzZjc2Ni8xL3BjWTNQcXNaejBQZEwwTVJF NWc0UHVLNjBEQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuY7IAwQCueQAMA0EAgACMAcDBQMqBzAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8MTANBgkqhkiG9w0BAQsFAAOCAQEAMira BnEddrzRTtHEWoPLqYlCuhLs3aMH2llh1i/o+beTI75NdvWP/uMdpO0aYRESOGt0 XxT+6TDYirOu7+m1W+QeT60ynscKWQpX5cs7kkVuFeKr8LlE7scl+cZtpcls44q0 CcM2BlGj4AepwFs7/aeDZITOAinFVWGeeAr8pEmtYt+HEgr31VbtDy2NCpUSNWYt 73MBFm5ssuuc5qs4YdH6PiMU+yjj2D9eYvkhaYx0au78JfQJJ29HxBr7/d51rAmi fjkHFatvOzxghu9gpkb76mRBaEDq1aPgRxFVi5nab51haaYkU8g7c4LNBWzbIpb8 GynHlT62HgrP0h4Vqw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:36 2026 by rpki-client