This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pxrCOk0-z8vKRROJaxeuToloKng.cer File: pxrCOk0-z8vKRROJaxeuToloKng.cer (raw, json) Hash identifier: ioZJxwAGMrQAeGXZIidGAb4mDsG6adz8mDO3yxNU9vU= Subject key identifier: A7:1A:C2:3A:4D:3E:CF:CB:CA:45:13:89:6B:17:AE:4E:89:68:2A:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E94546E0C80017470E597599C3EF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/pxrCOk0-z8vKRROJaxeuToloKng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204319 IP: 185.228.208.0/22 IP: 2a0d:4600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:94:54:6e:0c:80:01:74:70:e5:97:59:9c:3e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a71ac23a4d3ecfcbca4513896b17ae4e89682a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:73:e9:44:66:2e:a2:a9:b7:70:99:e1:c0: 9f:c9:da:79:38:3a:a7:7c:91:e2:7c:16:fc:20:03: ac:f3:db:c1:1d:d6:d6:be:44:6f:b5:42:a9:c0:0f: 83:51:91:67:db:b5:15:08:30:9a:93:d0:db:f0:22: c6:b6:0c:d7:6e:9e:62:00:29:f8:1f:5b:3d:93:99: 65:64:04:9e:bf:0d:71:a6:82:74:2a:57:d8:df:dd: a2:fa:4d:b8:06:48:c9:05:f4:80:56:f9:18:34:41: 18:26:ab:81:e1:46:1d:37:29:22:a6:6c:b8:fd:17: 53:02:06:91:a1:08:37:ff:1e:f9:fe:06:cf:52:1d: 5e:36:c6:3c:1d:89:be:93:ff:e8:6b:86:40:81:fa: fd:4a:56:90:36:d8:a6:26:4e:5c:6d:ce:3f:81:bf: 50:f4:71:95:7b:65:16:d5:86:27:da:8e:77:e0:e1: 2c:29:dd:72:e3:43:ee:3d:8e:0a:e3:3c:98:71:bc: 08:20:58:7b:ac:68:29:7e:9b:3f:9b:e8:fb:5a:56: 33:78:c8:de:f0:6d:fc:d1:78:9b:a1:de:49:90:c6: 9f:e6:2e:17:46:cc:97:eb:5f:5c:06:73:0c:c6:bd: f4:c7:c7:66:14:88:35:5a:91:a1:8f:c6:4d:bf:0f: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:C2:3A:4D:3E:CF:CB:CA:45:13:89:6B:17:AE:4E:89:68:2A:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/pxrCOk0-z8vKRROJaxeuToloKng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.208.0/22 IPv6: 2a0d:4600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204319 Signature Algorithm: sha256WithRSAEncryption 2d:ac:dc:2d:34:a0:97:a4:6d:71:60:6f:35:d2:88:f3:df:e6: ce:fa:ac:71:c3:7e:3a:de:8c:00:95:e3:e2:57:09:52:ed:cd: da:17:8e:97:c6:d1:30:8b:e4:be:7e:7d:ca:0f:90:9d:4f:bc: 19:b1:56:cd:f0:b6:36:3d:d1:23:a3:db:5b:15:e0:ce:fb:18: f1:18:e9:2e:04:1a:7b:26:b0:18:38:91:00:ce:9d:04:1e:73: b2:e2:96:c8:43:15:8b:08:ff:e4:22:ae:a6:54:90:60:14:a3: 69:df:c9:bc:6b:10:bc:10:16:a5:3f:29:c0:b0:ed:f7:83:8c: fb:55:4d:d2:c8:c4:6b:10:df:90:1a:f0:65:0b:22:ac:6a:60: 48:54:b0:73:bd:c6:d1:4b:76:07:07:47:f2:63:ca:26:b7:81: 17:5f:d0:47:cc:b9:2f:96:c5:fa:96:09:6c:a7:53:e2:ef:3a: 65:e3:df:4c:2c:10:50:85:a7:22:52:ac:f8:4a:b2:28:49:7f: e3:9d:f5:0c:2d:7f:99:cb:12:d6:b8:65:1f:2d:88:18:90:20: 09:d8:6e:8e:85:d8:3c:e4:1c:85:e2:5d:b5:1d:8b:6b:47:a9: 8d:bf:a5:82:e3:71:88:45:97:de:2d:6b:9a:04:ea:17:ce:07: 3d:f0:c4:94 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fpRUbgyAAXRw5ZdZnD70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzFhYzIzYTRkM2VjZmNiY2E0NTEzODk2YjE3YWU0ZTg5NjgyYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z5z6URmLqKpt3CZ4cCfydp5ODqn fJHifBb8IAOs89vBHdbWvkRvtUKpwA+DUZFn27UVCDCak9Db8CLGtgzXbp5iACn4 H1s9k5llZASevw1xpoJ0KlfY392i+k24BkjJBfSAVvkYNEEYJquB4UYdNykipmy4 /RdTAgaRoQg3/x75/gbPUh1eNsY8HYm+k//oa4ZAgfr9SlaQNtimJk5cbc4/gb9Q 9HGVe2UW1YYn2o534OEsKd1y40PuPY4K4zyYcbwIIFh7rGgpfps/m+j7WlYzeMje 8G380Xibod5JkMaf5i4XRsyX619cBnMMxr30x8dmFIg1WpGhj8ZNvw8mvwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKcawjpNPs/LykUTiWsXrk6JaCp4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzgzMWNl Yy1kOTY1LTQwMGEtOTg5OS1mZGJjNWM2YWU1YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvODMxY2Vj LWQ5NjUtNDAwYS05ODk5LWZkYmM1YzZhZTVhYS8xL3B4ckNPazAtejh2S1JST0ph eGV1VG9sb0tuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueTQMA0EAgACMAcDBQMqDUYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeHzANBgkqhkiG9w0BAQsFAAOCAQEALazcLTSgl6Rt cWBvNdKI89/mzvqsccN+Ot6MAJXj4lcJUu3N2heOl8bRMIvkvn59yg+QnU+8GbFW zfC2Nj3RI6PbWxXgzvsY8RjpLgQaeyawGDiRAM6dBB5zsuKWyEMViwj/5CKuplSQ YBSjad/JvGsQvBAWpT8pwLDt94OM+1VN0sjEaxDfkBrwZQsirGpgSFSwc73G0Ut2 BwdH8mPKJreBF1/QR8y5L5bF+pYJbKdT4u86ZePfTCwQUIWnIlKs+EqyKEl/4531 DC1/mcsS1rhlHy2IGJAgCdhujoXYPOQcheJdtR2La0epjb+lguNxiEWX3i1rmgTq F84HPfDElA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:34 2026 by rpki-client