This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer File: praJ3e9Y8KM4Pi71qjonxP5FMY4.cer (raw, json) Hash identifier: uck+YVFzjFtX342Za7snspYK0S1BvvfIs/dFb1qAcrg= Subject key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C67F344578CB30A8FE5D107CF21F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43125 IP: 91.194.82.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:67:f3:44:57:8c:b3:0a:8f:e5:d1:07:cf:21:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:c5:03:5b:f2:f9:2e:24:8c:fd:3e:22:28: 14:f5:b5:e4:2d:44:7b:95:8d:34:b4:97:0e:42:f5: c9:8e:6c:2b:fa:10:0a:bc:04:92:5a:ec:1f:46:e2: f1:00:66:5c:de:e4:aa:6c:a3:01:87:9b:ee:2c:69: b2:cc:ca:d6:43:d3:db:b4:0b:99:02:53:55:26:03: 70:32:2e:d6:17:8b:dd:75:a7:dc:31:21:9f:c7:20: ef:24:b0:24:9b:21:17:77:9d:81:6f:c7:dc:9f:60: 80:d5:83:8b:50:4f:74:ce:28:08:85:29:6d:d1:d2: 61:ea:c3:93:c2:a6:29:6b:d1:67:9b:f7:6e:6c:5b: 63:a8:04:72:6c:d8:b3:a7:53:dc:95:6a:01:c3:be: 18:64:da:06:04:4a:31:fc:14:5e:a4:fe:96:7d:ca: 2d:50:97:e2:5e:9a:b0:30:5b:7f:b9:21:f1:04:55: cd:38:71:20:61:e9:43:1e:1c:c1:ef:12:e4:a0:d5: a8:58:41:2f:3d:94:3c:35:70:fc:65:bb:9f:e3:6b: e6:69:d8:1c:b8:c3:8c:e3:4c:32:28:2f:ee:33:9d: 82:8b:33:04:2f:61:49:24:a4:92:f9:11:b7:9f:f9: fd:0a:ed:2a:42:92:cd:1e:49:44:92:99:f5:e3:5e: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.82.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43125 Signature Algorithm: sha256WithRSAEncryption 9c:07:3c:59:4d:e1:47:4f:96:31:aa:d7:ac:64:c3:53:b8:8f: a0:0c:54:8a:40:1a:61:6f:59:e9:35:1c:c1:ad:88:dd:2d:09: 12:0d:83:81:8d:04:b8:0e:80:3a:13:d2:de:38:c0:1d:ec:3d: d0:f1:fb:b1:33:b6:67:12:1d:79:6b:0e:5f:37:20:fc:99:42: d4:d5:b0:2f:68:38:2e:ff:08:3c:d5:4e:c8:b5:90:4e:8a:88: 03:87:63:26:fb:ff:38:82:d9:e5:28:00:6a:31:51:3f:1e:47: a8:67:65:1c:92:ab:19:1c:3a:a8:eb:1e:8f:fd:8e:fd:7b:a5: 4e:13:8b:d3:27:87:40:6e:02:04:c9:04:20:27:cf:f4:25:e7: 17:c3:8f:2a:7a:73:5f:e8:08:e0:cd:b3:5a:55:67:a7:4b:66: f3:86:cc:65:b3:1c:04:f3:0d:89:0b:54:8b:c7:d4:4e:1e:ec: 41:03:49:22:39:bd:e3:bf:dc:c7:a2:ea:b3:40:e2:2f:8b:3c: 40:b6:a1:50:65:e9:3b:3a:d3:f0:78:c1:47:99:90:38:18:35: 36:e0:81:63:69:07:00:59:af:f3:bb:8b:11:dc:c0:0f:93:ce: 97:6c:ff:54:a6:4e:d9:a8:2c:9f:48:57:1a:fa:7a:d5:df:93: be:8a:08:bd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XGfzRFeMswqP5dEHzyH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmI2ODlkZGVmNThmMGEzMzgzZTJlZjVhYTNhMjdjNGZlNDUzMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QnFA1vy+S4kjP0+IigU9bXkLUR7 lY00tJcOQvXJjmwr+hAKvASSWuwfRuLxAGZc3uSqbKMBh5vuLGmyzMrWQ9PbtAuZ AlNVJgNwMi7WF4vddafcMSGfxyDvJLAkmyEXd52Bb8fcn2CA1YOLUE90zigIhSlt 0dJh6sOTwqYpa9Fnm/dubFtjqARybNizp1PclWoBw74YZNoGBEox/BRepP6Wfcot UJfiXpqwMFt/uSHxBFXNOHEgYelDHhzB7xLkoNWoWEEvPZQ8NXD8Zbuf42vmadgc uMOM40wyKC/uM52CizMEL2FJJKSS+RG3n/n9Cu0qQpLNHklEkpn1415JwwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKa2id3vWPCjOD4u9ao6J8T+RTGOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzhmZWY3 Zi1kMDExLTRjZGItYWMwYS0zMTcwMGYwZTFhNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvOGZlZjdm LWQwMTEtNGNkYi1hYzBhLTMxNzAwZjBlMWE2MS8xL3ByYUozZTlZOEtNNFBpNzFx am9ueFA1Rk1ZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8JSMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCodTANBgkqhkiG9w0BAQsFAAOCAQEAnAc8WU3hR0+WMarXrGTDU7iPoAxUikAa YW9Z6TUcwa2I3S0JEg2DgY0EuA6AOhPS3jjAHew90PH7sTO2ZxIdeWsOXzcg/JlC 1NWwL2g4Lv8IPNVOyLWQToqIA4djJvv/OILZ5SgAajFRPx5HqGdlHJKrGRw6qOse j/2O/XulThOL0yeHQG4CBMkEICfP9CXnF8OPKnpzX+gI4M2zWlVnp0tm84bMZbMc BPMNiQtUi8fUTh7sQQNJIjm947/cx6Lqs0DiL4s8QLahUGXpOzrT8HjBR5mQOBg1 NuCBY2kHAFmv87uLEdzAD5POl2z/VKZO2agsn0hXGvp61d+TvooIvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:32 2026 by rpki-client