This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer File: peC5TwtOTIRu-c8nzciBEIdrHPM.cer (raw, json) Hash identifier: qB2ZfB0SyDJmt/vX13u8TYAybayBbAUDv0uO24QPv38= Subject key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14BB0BD1DCA1343D852D20313E467A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.117.244.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:bb:0b:d1:dc:a1:34:3d:85:2d:20:31:3e:46:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:5d:11:dd:61:5a:7a:17:2c:62:e2:0d:f8: 2d:0c:d1:27:12:a0:97:a2:9b:ad:cb:87:53:89:66: a2:ff:9c:96:40:23:0f:3a:fc:50:7d:df:5a:2f:01: c1:20:9f:98:2d:1e:6a:2b:93:df:7f:05:67:6e:45: c2:32:65:7b:19:0a:2e:fb:48:45:ff:ab:88:d1:35: b2:eb:e4:65:93:2c:c0:72:6a:a1:f8:11:42:d0:1e: f9:b3:b7:e0:c0:1f:6c:82:75:b0:4e:fa:97:c6:fa: f5:a8:b6:c8:44:e5:2b:b5:b7:f3:1e:6f:14:54:8d: 6f:36:5f:72:50:78:4c:dc:1f:a9:96:b6:13:b0:40: db:e0:69:54:38:00:a6:41:6f:ec:c6:a4:0a:30:b7: 19:25:9b:ca:2a:bd:e8:0d:ca:df:34:45:72:cc:4e: 6b:60:5d:26:85:23:3b:05:3a:5c:e0:3d:a8:da:5e: 8c:32:39:51:e2:3d:79:bb:03:41:2a:90:a4:02:f1: 4b:99:60:43:fb:fe:cd:24:58:ce:ce:df:55:be:36: de:a6:47:7b:26:d3:48:a7:17:e2:14:90:38:c5:5f: 65:e4:bf:63:c8:87:e4:6a:99:91:be:d3:cc:bc:cc: fc:18:f8:f3:1e:82:fd:61:e0:0c:62:09:26:07:53: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.244.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:87:46:c2:e6:88:1f:a2:7e:e8:2e:44:32:3d:1a:2f:5d:c0: 5e:21:49:20:d7:40:1c:7f:35:2e:af:c1:9f:04:b4:a5:7d:e1: 9e:7f:27:db:4f:44:4f:cc:0e:5b:da:dc:a5:6f:fe:b5:1c:ed: af:93:2f:81:96:37:21:f8:d5:a3:4d:93:81:5a:6e:13:3a:61: ab:d4:18:f7:8c:1e:96:d0:bb:85:b6:34:41:e3:b4:a8:b1:44: 6b:e8:19:e5:96:4f:5a:99:89:d7:78:a2:8d:70:10:c9:60:98: 37:26:a3:31:7b:f0:c2:ea:0d:5b:26:ed:ba:d3:77:eb:64:6a: 3a:36:ae:fa:2f:60:e5:46:76:53:ac:fa:34:5c:0f:c0:7c:ce: 63:c6:e1:aa:02:2a:f3:25:51:de:3f:30:9a:54:db:a9:71:02: c4:08:48:c4:ff:df:89:e1:2a:43:e7:39:94:9a:d8:bd:3d:08: b3:a6:cd:48:5a:6c:4d:26:7b:34:7e:82:dc:87:42:e1:b0:81: 9d:4b:fc:bd:b2:71:95:0a:43:53:74:45:63:c9:0b:b4:41:4c: b1:3a:d4:a2:e6:a5:ee:21:2d:7b:45:34:07:92:48:62:fe:a2: 76:97:10:60:ef:9c:6e:dc:8c:65:2b:ae:6d:ac:bf:7e:8d:77: b2:fd:a1:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FLsL0dyhND2FLSAxPkZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWUwYjk0ZjBiNGU0Yzg0NmVmOWNmMjdjZGM4ODExMDg3NmIxY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+RdEd1hWnoXLGLiDfgtDNEnEqCX oputy4dTiWai/5yWQCMPOvxQfd9aLwHBIJ+YLR5qK5PffwVnbkXCMmV7GQou+0hF /6uI0TWy6+RlkyzAcmqh+BFC0B75s7fgwB9sgnWwTvqXxvr1qLbIROUrtbfzHm8U VI1vNl9yUHhM3B+plrYTsEDb4GlUOACmQW/sxqQKMLcZJZvKKr3oDcrfNEVyzE5r YF0mhSM7BTpc4D2o2l6MMjlR4j15uwNBKpCkAvFLmWBD+/7NJFjOzt9Vvjbepkd7 JtNIpxfiFJA4xV9l5L9jyIfkapmRvtPMvMz8GPjzHoL9YeAMYgkmB1MQ3QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKXguU8LTkyEbvnPJ83IgRCHaxzzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzM4Nzcy MC01Nzg0LTRlMDMtODEzYy0xM2IyOTA3NTBmYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMzg3NzIw LTU3ODQtNGUwMy04MTNjLTEzYjI5MDc1MGZiOS8xL3BlQzVUd3RPVElSdS1jOG56 Y2lCRUlkckhQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwnX0MA0GCSqGSIb3DQEBCwUAA4IBAQA9h0bC 5ogfon7oLkQyPRovXcBeIUkg10AcfzUur8GfBLSlfeGefyfbT0RPzA5b2tylb/61 HO2vky+Bljch+NWjTZOBWm4TOmGr1Bj3jB6W0LuFtjRB47SosURr6Bnllk9amYnX eKKNcBDJYJg3JqMxe/DC6g1bJu2603frZGo6Nq76L2DlRnZTrPo0XA/AfM5jxuGq AirzJVHePzCaVNupcQLECEjE/9+J4SpD5zmUmti9PQizps1IWmxNJns0foLch0Lh sIGdS/y9snGVCkNTdEVjyQu0QUyxOtSi5qXuIS17RTQHkkhi/qJ2lxBg75xu3Ixl K65trL9+jXey/aEN -----END CERTIFICATE-----Generated at Mon Jan 26 14:47:45 2026 by rpki-client