This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer File: P2U3Wk029crhof4kWKOAUmz-22o.cer (raw, json) Hash identifier: Vdm8h9OSCjKr/GILtd3ickmgEvQ7LXGC7ld55zsr3iU= Subject key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5BCD0226DBE4A909E8D4B7367785 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.155.64.0/19 IP: 79.141.224.0/20 IP: 178.169.0.0/19 IP: 185.196.144.0/22 IP: 185.209.200.0/22 IP: 185.225.40.0/22 IP: 193.43.140.0/24 IP: 193.43.145.0/24 IP: 193.43.149.0/24 IP: 193.43.159.0/24 IP: 213.217.32.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5b:cd:02:26:db:e4:a9:09:e8:d4:b7:36:77:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:30:1c:1d:22:0e:7b:4e:1a:57:ce:61:81: d6:ae:7c:52:8d:fe:5e:c5:9d:f7:7c:48:58:6a:20: cc:ab:2c:5e:34:0f:60:77:9e:a2:79:fe:57:c7:e4: 79:da:75:05:6e:48:4e:fd:0e:b1:f8:cc:7c:68:ed: 26:37:f1:df:21:07:a1:ac:b9:84:96:c2:00:34:06: 17:e6:d4:fb:86:bd:9f:89:65:0f:50:df:50:0b:b1: df:1c:cf:aa:bb:62:61:8d:36:94:a4:59:9b:b4:99: 24:3e:1b:eb:11:ea:7b:0b:fb:31:fa:16:b2:00:3f: 9e:7e:5c:f6:14:d1:45:9e:ce:20:10:d9:14:a6:a4: 14:9b:16:b2:18:e0:4b:6d:c7:1f:58:74:c8:9d:b6: db:0b:24:94:21:a5:26:c3:0a:f8:24:a3:60:34:7a: 46:73:f3:07:56:47:ef:f9:a0:0a:7c:96:23:26:1a: c6:a2:7f:7f:d5:55:9c:ce:98:be:6e:1a:08:c7:12: 82:c6:a6:83:ea:fc:a9:37:2b:4a:30:74:05:3f:8e: 07:69:5f:3d:16:82:b1:99:12:8c:c5:62:f7:2e:42: fc:99:2a:67:ee:6f:38:e7:d6:92:82:d4:a1:48:db: e2:15:7d:78:02:fa:a9:df:a0:39:f1:21:95:0a:70: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.155.64.0/19 79.141.224.0/20 178.169.0.0/19 185.196.144.0/22 185.209.200.0/22 185.225.40.0/22 193.43.140.0/24 193.43.145.0/24 193.43.149.0/24 193.43.159.0/24 213.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption 13:b5:1d:6c:6c:b7:a4:7c:a7:13:75:fe:0c:1f:55:e1:d1:3f: 5d:78:99:ba:55:bf:83:c8:87:47:ed:48:17:07:67:9a:65:37: 6a:8e:86:34:b4:7d:1e:61:0a:66:22:5b:bd:7d:23:51:da:b7: dd:34:c4:78:50:73:2a:90:e5:53:5d:59:3a:11:ab:8b:a9:12: af:18:ae:2d:a9:40:a3:22:c7:ac:fc:7c:5c:ef:70:77:90:4d: 31:9b:e6:a7:67:8e:3a:9b:90:56:e3:7c:8b:30:c1:ec:39:e8: 88:f8:dd:e5:16:c5:5d:c7:81:31:4e:71:16:12:6c:87:a5:7d: a1:65:34:b6:41:a5:43:02:f9:17:20:04:e2:f8:65:0d:62:53: 20:90:a9:f4:eb:3c:99:02:77:93:cc:f3:6c:00:c1:6f:99:e7: 78:5a:e5:ef:2d:b5:bf:67:36:ce:13:8a:e1:3c:70:84:e4:70: e0:83:21:c5:ca:2f:94:20:f3:d2:9c:ee:c6:5a:b6:a7:61:66: e0:ba:21:f8:30:70:38:50:40:d8:1c:54:58:c6:a1:3a:90:4f: ad:40:31:8c:53:f1:01:cd:67:95:a1:cd:90:93:0f:92:27:f7: 87:aa:a9:14:8c:ec:ef:c6:40:29:e3:c0:b8:39:0b:c2:ab:72: 2d:31:c0:f6 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt9y1vNAibb5KkJ6NS3NneFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjY1Mzc1YTRkMzZmNWNhZTFhMWZlMjQ1OGEzODA1MjZjZmVkYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EgwHB0iDntOGlfOYYHWrnxSjf5e xZ33fEhYaiDMqyxeNA9gd56ief5Xx+R52nUFbkhO/Q6x+Mx8aO0mN/HfIQehrLmE lsIANAYX5tT7hr2fiWUPUN9QC7HfHM+qu2JhjTaUpFmbtJkkPhvrEep7C/sx+hay AD+eflz2FNFFns4gENkUpqQUmxayGOBLbccfWHTInbbbCySUIaUmwwr4JKNgNHpG c/MHVkfv+aAKfJYjJhrGon9/1VWczpi+bhoIxxKCxqaD6vypNytKMHQFP44HaV89 FoKxmRKMxWL3LkL8mSpn7m8459aSgtShSNviFX14Avqp36A58SGVCnD8RQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFD9lN1pNNvXK4aH+JFijgFJs/ttqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzZkMTkz MC02ODE1LTQ4N2YtYWJlOS1lMjgxNmVlNmJhNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvNmQxOTMw LTY4MTUtNDg3Zi1hYmU5LWUyODE2ZWU2YmE1Ni8xL1AyVTNXazAyOWNyaG9mNGtX S09BVW16LTIyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjBIBAIAATBCAwQFTptAAwQET43gAwQFsqkAAwQCucSQAwQCudHI AwQCueEoAwQAwSuMAwQAwSuRAwQAwSuVAwQAwSufAwQF1dkgMA0GCSqGSIb3DQEB CwUAA4IBAQATtR1sbLekfKcTdf4MH1Xh0T9deJm6Vb+DyIdH7UgXB2eaZTdqjoY0 tH0eYQpmIlu9fSNR2rfdNMR4UHMqkOVTXVk6EauLqRKvGK4tqUCjIses/Hxc73B3 kE0xm+anZ446m5BW43yLMMHsOeiI+N3lFsVdx4ExTnEWEmyHpX2hZTS2QaVDAvkX IATi+GUNYlMgkKn06zyZAneTzPNsAMFvmed4WuXvLbW/ZzbOE4rhPHCE5HDggyHF yi+UIPPSnO7GWranYWbguiH4MHA4UEDYHFRYxqE6kE+tQDGMU/EBzWeVoc2Qkw+S J/eHqqkUjOzvxkAp48C4OQvCq3ItMcD2 -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:31 2026 by rpki-client