This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer File: pnYhghhEiOf3hxIqcYCZfOjpDUw.cer (raw, json) Hash identifier: YvaGXyTJVHlRkIqJTANdoT1nyeFOVjSAxTLnpMLQGbU= Subject key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6CF214A89E993B9EA3F926DC8932F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213932 IP: 96.9.127.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cf:21:4a:89:e9:93:b9:ea:3f:92:6d:c8:93:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6762182184488e7f787122a7180997ce8e90d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:cb:c2:a1:89:86:31:d4:52:3f:93:bb:e1: 99:d5:8d:2f:42:af:1b:be:7d:24:5c:a5:b8:36:ab: 98:90:d1:6b:13:50:9d:80:b7:af:b4:93:e4:3c:fe: a6:9b:9a:fd:e9:bc:cc:7e:71:18:d1:1b:81:e6:b4: 48:d3:2a:8e:ae:52:01:03:55:c0:54:31:75:0d:c6: 9e:1a:29:ba:bd:9a:01:1f:b2:af:c3:7d:ae:67:6a: ff:9a:1f:f6:48:3d:ee:57:1b:41:79:0c:cf:63:79: c5:c9:05:8d:c1:77:88:84:26:70:96:3f:3b:97:a3: 78:57:5f:32:69:ff:e7:8f:3c:d6:34:e1:05:12:c1: b7:3f:15:fe:9c:d1:bb:1a:58:06:89:07:93:56:9b: 79:58:40:04:84:d8:6b:4b:ee:e5:03:37:ee:f5:12: ba:3d:1e:be:88:f7:49:37:41:e9:0f:20:b3:20:c6: 20:c5:2f:ba:6e:4a:87:76:b3:47:ed:ca:eb:0a:75: 44:aa:3d:46:5a:64:ca:1f:32:bd:31:ee:01:40:8d: e1:09:ea:8e:ca:01:71:1f:55:62:99:0d:82:9c:c8: 71:a9:ec:06:e9:6a:46:30:e2:a1:65:ec:e6:e1:07: 64:ce:f6:ce:6f:ed:33:ed:99:6f:66:c7:18:a6:91: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.9.127.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213932 Signature Algorithm: sha256WithRSAEncryption 00:46:6f:89:ce:82:9c:8c:b4:98:96:64:eb:da:68:48:94:6b: fb:11:53:65:32:71:35:c7:cc:15:e7:9a:6c:cb:54:2e:e3:57: 89:cf:30:98:92:ae:2f:b4:72:39:e6:51:58:53:a1:4a:f1:b4: 7c:92:4c:49:8b:6f:ff:ba:d2:1a:6c:7e:1f:8e:1b:7e:06:7c: 1b:94:9e:de:b0:f5:46:7f:4e:5e:50:2e:78:f1:3b:29:2f:af: f6:81:0e:4f:e5:30:01:d3:d8:5f:82:75:e0:3e:9c:29:ed:aa: 88:77:d2:5c:17:3d:41:7e:05:7f:a7:aa:e0:77:ef:54:79:27: b9:40:f6:12:01:67:d2:49:02:39:b5:5d:a3:71:b4:9f:81:4c: 0b:ba:59:6d:af:c4:bc:10:fd:04:97:8a:44:28:48:6c:f5:da: 4e:90:f3:81:36:56:52:6c:99:92:55:e8:40:1f:42:7f:4a:2c: 11:7b:ee:c8:4b:e7:93:64:3c:1e:a3:1a:7a:72:3c:b2:42:ba: dd:a9:cc:ec:aa:78:24:dd:5e:2c:e9:41:91:86:db:11:61:47: 22:78:cf:a7:57:ff:84:69:6e:cd:7a:53:64:bb:d4:5b:d0:ed: 54:d4:f7:17:d2:3e:be:45:98:1d:d6:77:e9:f3:a5:e7:99:7e: d4:03:ad:73 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xs8hSonpk7nqP5JtyJMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjc2MjE4MjE4NDQ4OGU3Zjc4NzEyMmE3MTgwOTk3Y2U4ZTkwZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IbLwqGJhjHUUj+Tu+GZ1Y0vQq8b vn0kXKW4NquYkNFrE1CdgLevtJPkPP6mm5r96bzMfnEY0RuB5rRI0yqOrlIBA1XA VDF1DcaeGim6vZoBH7Kvw32uZ2r/mh/2SD3uVxtBeQzPY3nFyQWNwXeIhCZwlj87 l6N4V18yaf/njzzWNOEFEsG3PxX+nNG7GlgGiQeTVpt5WEAEhNhrS+7lAzfu9RK6 PR6+iPdJN0HpDyCzIMYgxS+6bkqHdrNH7crrCnVEqj1GWmTKHzK9Me4BQI3hCeqO ygFxH1VimQ2CnMhxqewG6WpGMOKhZezm4QdkzvbOb+0z7ZlvZscYppEIUwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKZ2IYIYRIjn94cSKnGAmXzo6Q1MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzJmMzE5 ZS0yNjg1LTQ0MjctYWVjMC1lZDYwYmFiNzU3MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMmYzMTll LTI2ODUtNDQyNy1hZWMwLWVkNjBiYWI3NTcyZi8xL3BuWWhnaGhFaU9mM2h4SXFj WUNaZk9qcERVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAYAl/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNDrDANBgkqhkiG9w0BAQsFAAOCAQEAAEZvic6CnIy0mJZk69poSJRr+xFTZTJx NcfMFeeabMtULuNXic8wmJKuL7RyOeZRWFOhSvG0fJJMSYtv/7rSGmx+H44bfgZ8 G5Se3rD1Rn9OXlAuePE7KS+v9oEOT+UwAdPYX4J14D6cKe2qiHfSXBc9QX4Ff6eq 4HfvVHknuUD2EgFn0kkCObVdo3G0n4FMC7pZba/EvBD9BJeKRChIbPXaTpDzgTZW UmyZklXoQB9Cf0osEXvuyEvnk2Q8HqMaenI8skK63anM7Kp4JN1eLOlBkYbbEWFH InjPp1f/hGluzXpTZLvUW9DtVNT3F9I+vkWYHdZ36fOl55l+1AOtcw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:09 2026 by rpki-client