This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer File: phvll6k-axrZQXjQPo6MFVcmeMc.cer (raw, json) Hash identifier: SFEy0msrqyVdWTJ1NDo+YTis2n0qVrMM5s5QYtneDQI= Subject key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1356F1C6301386852F33EC4642F020 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42405 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:56:f1:c6:30:13:86:85:2f:33:ec:46:42:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:e9:b2:b6:ca:ef:0f:18:4d:2d:21:a2:cd: 31:56:81:f6:3e:22:a5:ac:cd:8d:9b:db:4a:67:9e: c6:cd:e2:f4:1c:92:7e:1a:74:fa:ac:88:1a:39:0e: 02:20:ac:79:ab:1b:e7:12:17:a5:2c:65:b3:f9:77: e0:4a:09:94:7f:f0:78:53:1e:48:98:4f:96:b3:f6: cf:8f:52:b2:25:b5:e2:1e:58:e2:87:42:e0:a9:47: 4a:08:8f:54:b6:db:a4:e8:34:52:5d:da:49:9e:2c: 14:de:08:6c:70:65:46:df:ca:a7:c3:ba:42:6c:46: a2:c4:e3:8a:17:59:fe:6e:61:7b:67:c5:88:db:b4: 1b:67:01:5b:c5:ce:f5:f2:43:54:9f:c5:5d:67:70: 9c:ec:67:8b:bc:c7:cb:fb:80:01:77:8a:23:5d:f1: d6:57:3e:b0:59:ac:d3:52:6b:a8:e3:e6:65:74:c4: 71:71:51:b5:1e:bd:2f:d7:b8:24:43:49:b1:cf:45: 68:65:00:57:6c:88:d8:4e:57:9e:bc:73:ed:f1:ae: 34:4f:01:c9:17:95:95:02:01:e0:dc:f6:8f:fd:26: 96:46:4a:06:66:af:a7:1b:31:13:32:c3:d3:3e:36: 62:35:b6:32:99:6b:8c:7c:be:3f:2a:c1:e7:3d:0f: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 42405 Signature Algorithm: sha256WithRSAEncryption 18:7f:ba:52:3d:17:5b:22:01:65:2c:9a:4e:eb:4a:96:17:04: 3d:4c:70:12:1a:b1:c1:4a:83:1f:a4:90:e3:4a:fb:c0:2a:cc: 54:cb:d4:88:f3:f8:89:a0:ab:2a:ee:32:bc:5b:1b:46:59:63: 41:45:e7:ca:b0:5c:58:07:ce:d0:c7:72:73:11:dd:2a:ce:b7: 0b:8f:6f:57:50:32:99:e8:86:d0:fa:ba:d9:b4:9d:4e:ab:4f: 74:70:54:3a:6b:1c:3e:65:17:9b:49:fb:91:20:2f:9b:3f:1f: 3b:23:87:c5:73:6d:f0:0d:1e:b6:f0:0d:e2:c4:64:33:dd:13: 6e:5f:08:6e:2e:ef:8c:81:3d:ef:fc:f0:ec:55:f2:ba:1d:06: a9:00:43:e6:23:49:a7:6b:1d:6b:2c:cf:82:34:e5:0a:31:a8: 12:ba:93:ec:a3:05:90:da:8a:a3:f5:c0:85:62:4a:b3:7c:6c: 32:cb:c4:29:b9:10:c1:8a:97:b8:31:eb:56:21:15:2b:27:d8: d3:9e:27:09:4c:cc:f9:3f:e0:f2:f0:70:9c:c9:5c:62:b5:32: be:ba:70:b1:5a:e2:62:0b:b8:3c:4b:63:cf:ea:6a:5b:20:f1: 90:cc:a2:37:5a:8e:9c:e5:0f:bb:7c:3f:59:0c:c0:7a:10:cd: e1:1a:a8:95 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/E1bxxjAThoUvM+xGQvAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjFiZTU5N2E5M2U2YjFhZDk0MTc4ZDAzZThlOGMxNTU3MjY3OGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMHpsrbK7w8YTS0hos0xVoH2PiKl rM2Nm9tKZ57GzeL0HJJ+GnT6rIgaOQ4CIKx5qxvnEhelLGWz+XfgSgmUf/B4Ux5I mE+Ws/bPj1KyJbXiHljih0LgqUdKCI9Uttuk6DRSXdpJniwU3ghscGVG38qnw7pC bEaixOOKF1n+bmF7Z8WI27QbZwFbxc718kNUn8VdZ3Cc7GeLvMfL+4ABd4ojXfHW Vz6wWazTUmuo4+ZldMRxcVG1Hr0v17gkQ0mxz0VoZQBXbIjYTleevHPt8a40TwHJ F5WVAgHg3PaP/SaWRkoGZq+nGzETMsPTPjZiNbYymWuMfL4/KsHnPQ81AwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKYb5ZepPmsa2UF40D6OjBVXJnjHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzU2YTBl Zi1mNmI5LTQyNDAtOWNkYy1jMWU0Y2NiMTU2ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNTZhMGVm LWY2YjktNDI0MC05Y2RjLWMxZTRjY2IxNTZlZS8xL3BodmxsNmstYXhyWlFYalFQ bzZNRlZjbWVNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwClpTANBgkqhkiG9w0BAQsFAAOCAQEAGH+6Uj0XWyIB ZSyaTutKlhcEPUxwEhqxwUqDH6SQ40r7wCrMVMvUiPP4iaCrKu4yvFsbRlljQUXn yrBcWAfO0MdycxHdKs63C49vV1AymeiG0Pq62bSdTqtPdHBUOmscPmUXm0n7kSAv mz8fOyOHxXNt8A0etvAN4sRkM90Tbl8Ibi7vjIE97/zw7FXyuh0GqQBD5iNJp2sd ayzPgjTlCjGoErqT7KMFkNqKo/XAhWJKs3xsMsvEKbkQwYqXuDHrViEVKyfY054n CUzM+T/g8vBwnMlcYrUyvrpwsVriYgu4PEtjz+pqWyDxkMyiN1qOnOUPu3w/WQzA ehDN4RqolQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:34 2026 by rpki-client