This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer File: v_0PCtnHhAlsWg-56M9cLwRAQTs.cer (raw, json) Hash identifier: c2RQ45/QIQN+ayeCbTcJBOeJCipSw4r6vuIZbNSBan0= Subject key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1563E4CDA8AC2CA1C2D2D43731C8D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44692 IP: 78.31.144.0/21 IP: 85.202.96.0/20 IP: 109.125.192.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:63:e4:cd:a8:ac:2c:a1:c2:d2:d4:37:31:c8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:2f:ba:ef:74:bc:81:05:36:93:1e:e0:c2: 56:ba:ee:6f:84:cc:5b:4a:96:60:2e:88:0b:74:72: 87:ab:84:09:0b:16:2a:23:ed:bd:d5:3b:35:e6:0e: ad:8a:53:a8:3c:d3:98:34:9c:bb:9d:75:dc:65:4e: 79:0f:84:d0:3f:f9:c8:c4:f9:47:82:59:f6:c6:9e: 67:1c:98:a1:2f:5a:50:e6:d8:dd:f6:5a:21:a8:88: b9:1a:1d:da:0a:28:a9:1d:a4:5f:d9:fa:45:82:fc: 85:70:f2:e5:f7:af:7c:c1:e4:85:43:1e:00:01:fa: 65:74:4b:f8:62:74:12:48:03:c6:83:eb:7a:d1:5c: 1e:33:25:9d:9e:a0:bc:5c:a5:0d:f6:55:0f:51:19: d8:5a:38:ca:0c:51:41:2d:31:50:55:f3:c0:28:fd: 54:61:2d:c8:70:13:27:21:b3:fa:5a:a7:c3:b5:44: e8:c9:41:0f:47:90:19:f2:82:5b:e7:ab:ec:40:33: b0:fc:36:aa:cf:d7:57:cd:cb:2a:14:69:f1:56:7b: 22:91:ba:74:0a:7d:bd:80:00:4f:05:a2:6b:49:29: 37:67:88:9b:57:06:8e:bc:e0:e3:1b:6d:8f:75:a6: f9:f7:da:42:ee:da:db:c9:26:97:0b:a9:e2:cf:56: a6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.144.0/21 85.202.96.0/20 109.125.192.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44692 Signature Algorithm: sha256WithRSAEncryption 7e:f6:94:06:86:d3:9e:4e:32:1a:5e:e1:a0:1f:06:bd:20:0c: ca:46:e0:d9:34:a3:fc:75:81:3a:68:33:67:01:e9:fe:82:9e: 38:c0:4e:6b:ec:93:47:25:a3:09:90:99:b2:c4:91:27:c4:fa: f7:1b:a4:b3:07:a9:0e:d8:d8:44:c4:03:c2:62:7d:d4:1d:dc: 59:65:12:2c:d1:b2:58:d1:20:df:be:a6:f1:f8:65:7a:ef:9c: d9:07:3a:d8:8b:61:c4:ef:d9:55:90:9f:d5:a7:5e:01:1a:04: 42:66:dc:f3:ad:f7:dd:1a:f3:9a:d8:56:d1:75:77:72:e3:6b: 0a:8e:70:9b:38:fe:88:17:00:23:96:c4:57:2a:e1:3e:5a:f1: d6:64:67:e8:e8:71:05:05:8f:66:2c:3d:21:31:02:a7:65:d8: fe:0b:a5:88:9e:c1:4b:96:a8:05:d9:05:83:5e:5e:6a:fb:be: d3:ef:ad:28:56:b2:e8:2a:3b:0b:81:7b:7c:eb:7a:d7:61:14: 2e:e5:6f:58:9e:86:5c:2b:0f:37:c1:88:ba:c6:56:49:c5:fe: 53:b2:89:88:a5:3a:6f:34:ac:fd:95:df:84:c4:77:41:cc:ad: 78:5b:fe:8a:8e:23:a9:c6:b0:89:a9:54:2c:a0:bf:60:c8:5f: e1:27:3d:d3 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/FWPkzaisLKHC0tQ3McjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmZkMGYwYWQ5Yzc4NDA5NmM1YTBmYjllOGNmNWMyZjA0NDA0MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV4vuu90vIEFNpMe4MJWuu5vhMxb SpZgLogLdHKHq4QJCxYqI+291Ts15g6tilOoPNOYNJy7nXXcZU55D4TQP/nIxPlH gln2xp5nHJihL1pQ5tjd9lohqIi5Gh3aCiipHaRf2fpFgvyFcPLl9698weSFQx4A AfpldEv4YnQSSAPGg+t60VweMyWdnqC8XKUN9lUPURnYWjjKDFFBLTFQVfPAKP1U YS3IcBMnIbP6WqfDtUToyUEPR5AZ8oJb56vsQDOw/Daqz9dXzcsqFGnxVnsikbp0 Cn29gABPBaJrSSk3Z4ibVwaOvODjG22Pdab599pC7trbySaXC6niz1amuwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFL/9DwrZx4QJbFoPuejPXC8EQEE7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2VhZWE1 OS05MTlkLTQxMzUtOWJkZS02ZGNmMGM5M2NiZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZWFlYTU5 LTkxOWQtNDEzNS05YmRlLTZkY2YwYzkzY2JkYi8xL3ZfMFBDdG5IaEFsc1dnLTU2 TTljTHdSQVFUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDTh+QAwQEVcpgAwQGbX3AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCulDANBgkqhkiG9w0BAQsFAAOCAQEAfvaUBobTnk4yGl7h oB8GvSAMykbg2TSj/HWBOmgzZwHp/oKeOMBOa+yTRyWjCZCZssSRJ8T69xukswep DtjYRMQDwmJ91B3cWWUSLNGyWNEg376m8fhleu+c2Qc62IthxO/ZVZCf1adeARoE Qmbc86333RrzmthW0XV3cuNrCo5wmzj+iBcAI5bEVyrhPlrx1mRn6OhxBQWPZiw9 ITECp2XY/guliJ7BS5aoBdkFg15eavu+0++tKFay6Co7C4F7fOt612EULuVvWJ6G XCsPN8GIusZWScX+U7KJiKU6bzSs/ZXfhMR3QcyteFv+io4jqcawialULKC/YMhf 4Sc90w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:37 2026 by rpki-client