This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer File: po_5Ip79jRK0Jz80b4xkVOpYfsw.cer (raw, json) Hash identifier: rPaSdGygkBCX6+133bRHrHmbqdphKO5mtfM4cAsdnws= Subject key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F156D8279324D9C322038446F6E7EF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43584 IP: 46.16.160.0/23 IP: 46.16.164.0/24 IP: 46.16.166.0/24 IP: 91.197.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6d:82:79:32:4d:9c:32:20:38:44:6f:6e:7e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:93:ed:b2:fc:fb:ed:63:8a:db:76:d0:2f: b9:ce:98:5f:4d:a2:d1:39:b5:6d:36:a2:d9:16:cb: b9:63:99:d2:e9:79:14:08:98:f2:9f:da:77:21:f7: a9:7d:8f:1f:ac:62:9d:7c:f3:fa:fe:b1:b1:c4:a1: c7:bd:b3:de:2d:b8:20:71:d1:07:ed:98:9b:d2:bd: 58:fb:0b:22:ac:31:fd:46:9e:1c:a6:a9:00:25:70: 2c:61:e7:65:fc:05:de:35:4c:9f:2c:e7:3b:7a:2e: 00:63:c6:49:53:0f:72:86:a7:30:71:20:62:ba:2a: 00:fb:f3:9a:5d:09:81:d1:9c:f1:cb:88:1f:03:98: f0:93:47:80:ac:1f:a3:90:9a:a7:c7:64:a9:ff:3c: c9:44:f0:3a:65:6c:41:02:c4:bd:4b:f9:d9:21:56: 60:1c:30:65:0d:22:4f:c3:6f:60:42:10:f9:5a:35: 71:4d:4f:31:54:49:f7:8d:54:6e:e7:b8:77:6a:77: 8c:0d:6d:93:f8:df:1b:29:17:3c:3d:a6:5e:8e:23: 58:0e:21:06:d9:c2:6d:bc:5c:18:1d:4f:ad:ca:db: b8:0c:eb:0b:9d:e4:a5:f6:7c:c4:ac:e5:d9:d9:bb: 5b:a7:a3:d2:b9:72:d4:5d:45:c6:ff:46:c9:4c:84: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.160.0/23 46.16.164.0/24 46.16.166.0/24 91.197.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43584 Signature Algorithm: sha256WithRSAEncryption 02:fa:88:86:23:aa:ea:e9:f0:d5:6c:fb:95:4c:5b:22:3c:42: 65:e5:dc:d5:95:30:5e:bb:ba:e0:2e:e1:ec:8a:c3:d3:e1:52: 56:81:db:9b:7e:25:56:68:64:6e:e7:4f:0a:f7:39:da:4f:b3: c5:81:cd:0d:12:65:8a:ca:9a:65:88:e3:0a:d0:52:b3:40:d7: 41:3a:31:01:92:ca:d5:dc:d4:8e:9b:5e:e7:e3:9e:07:12:4f: f8:15:ab:97:aa:57:b6:1a:c1:14:83:6e:2b:20:3a:8b:96:16: 17:bd:6f:57:a5:30:7c:0d:46:e4:3b:17:f1:fe:51:1a:8e:18: 81:86:96:da:08:6e:2d:38:89:7a:98:fe:20:d5:44:b6:9f:9b: e7:75:a8:05:4a:6b:de:bc:77:20:ab:ea:38:79:2e:61:bc:08: c0:0a:a8:35:3b:96:fd:fa:9e:91:49:70:5a:f3:27:67:af:fe: 45:73:70:fc:d2:e6:db:93:bd:3e:31:14:c6:77:f2:6d:8b:6b: 6d:ae:11:65:81:56:cb:f4:68:e3:9c:61:29:d1:9e:84:69:29: 6b:c2:0e:d8:a7:e5:f4:99:63:73:e6:d1:a6:81:72:d7:da:d0: ed:14:eb:37:9f:f1:ab:d7:f5:1f:cc:05:ff:41:15:0d:1b:ca: 4b:22:42:d5 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt/FW2CeTJNnDIgOERvbn72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjhmZjkyMjllZmQ4ZDEyYjQyNzNmMzQ2ZjhjNjQ1NGVhNTg3ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcmT7bL8++1jitt20C+5zphfTaLR ObVtNqLZFsu5Y5nS6XkUCJjyn9p3IfepfY8frGKdfPP6/rGxxKHHvbPeLbggcdEH 7Zib0r1Y+wsirDH9Rp4cpqkAJXAsYedl/AXeNUyfLOc7ei4AY8ZJUw9yhqcwcSBi uioA+/OaXQmB0Zzxy4gfA5jwk0eArB+jkJqnx2Sp/zzJRPA6ZWxBAsS9S/nZIVZg HDBlDSJPw29gQhD5WjVxTU8xVEn3jVRu57h3aneMDW2T+N8bKRc8PaZejiNYDiEG 2cJtvFwYHU+tytu4DOsLneSl9nzErOXZ2btbp6PSuXLUXUXG/0bJTISWkwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFKaP+SKe/Y0StCc/NG+MZFTqWH7MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzJmZjk4 ZS02ZmY5LTQyMzMtYjlmMS0yMjdlMjFlNjkxZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMmZmOThl LTZmZjktNDIzMy1iOWYxLTIyN2UyMWU2OTFlNy8xL3BvXzVJcDc5alJLMEp6ODBi NHhrVk9wWWZzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQBLhCgAwQALhCkAwQALhCmAwQCW8WMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwCqQDANBgkqhkiG9w0BAQsFAAOCAQEAAvqIhiOq 6unw1Wz7lUxbIjxCZeXc1ZUwXru64C7h7IrD0+FSVoHbm34lVmhkbudPCvc52k+z xYHNDRJlisqaZYjjCtBSs0DXQToxAZLK1dzUjpte5+OeBxJP+BWrl6pXthrBFINu KyA6i5YWF71vV6UwfA1G5DsX8f5RGo4YgYaW2ghuLTiJepj+INVEtp+b53WoBUpr 3rx3IKvqOHkuYbwIwAqoNTuW/fqekUlwWvMnZ6/+RXNw/NLm25O9PjEUxnfybYtr ba4RZYFWy/Ro45xhKdGehGkpa8IO2Kfl9Jljc+bRpoFy19rQ7RTrN5/xq9f1H8wF /0EVDRvKSyJC1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:38 2026 by rpki-client