This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer File: P98IRZEZlp1LnBf1qF6ScyxVF9E.cer (raw, json) Hash identifier: 9LaUQc9R9fzCXkLMIjYXo/thM/8VQkBc60f/jsRaBn8= Subject key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E5D1F659A2F71910FFF506F63BDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.178.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e5:d1:f6:59:a2:f7:19:10:ff:f5:06:f6:3b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:df:d8:eb:2a:8a:fd:52:0d:a1:77:53:2d: 95:19:aa:b0:ef:34:79:70:c7:b2:32:4d:ed:00:4a: 51:d2:98:6b:21:0c:05:f8:b6:c8:78:bb:69:f8:f9: b8:a0:e4:56:6d:9a:1a:1b:de:3e:ae:11:21:f6:a1: 7d:f2:21:49:92:d7:1c:54:49:6c:ef:9b:cb:81:4c: 9a:ad:2e:09:a2:54:38:cf:5a:27:85:93:74:b4:3f: 32:10:3e:12:5a:fa:05:18:7d:40:59:31:40:c4:28: a9:95:d5:ed:0c:f9:6d:cd:cd:d4:a7:75:9d:0f:d0: 45:4c:4d:b1:35:c7:3d:5f:59:21:bf:b9:2e:8e:6a: c7:fa:ce:78:79:0b:ab:bd:4d:cf:7a:ac:d9:c5:d3: bd:0c:74:b0:7d:56:9a:cb:03:b3:17:62:9d:f9:84: ec:97:58:94:53:74:5c:cc:fa:eb:12:7d:49:a0:7c: 55:7d:17:f2:02:05:ab:8e:f4:c3:cc:06:03:e6:d9: 08:be:aa:0e:ff:5b:d1:f4:bb:53:f9:47:5c:eb:29: 98:99:2b:79:51:1d:78:8d:d6:f1:66:00:9d:09:e6: 1c:28:b2:ce:2b:f3:59:ca:74:5a:0e:87:29:62:a6: 72:3f:3d:3a:82:82:5d:91:39:65:50:2b:87:35:57: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.192.0/22 Signature Algorithm: sha256WithRSAEncryption 13:57:90:f8:46:b3:2f:f5:d4:33:9a:6d:55:3e:a6:70:05:6a: 5d:f1:e9:62:88:75:85:0d:6a:cf:aa:af:d7:bc:46:8d:3a:65: f5:b9:58:a7:a5:39:82:66:34:f0:f0:5e:5a:d5:7f:e5:08:4d: 06:d5:8a:3c:59:fc:c6:e2:76:37:2e:6e:99:3e:d5:e3:8e:a8: 13:c1:b5:e4:15:6f:09:74:4a:fe:0e:c8:65:f4:18:15:8b:1d: 79:53:ee:95:9d:49:6d:71:09:73:b2:95:ef:a3:8d:31:b3:83: 71:8a:bc:d3:40:94:4b:d4:c1:44:21:be:13:21:92:90:87:7c: 7f:49:be:34:cb:5a:b4:b8:b1:56:13:b3:11:43:11:8c:dd:7e: 18:43:a8:d8:46:d6:62:3e:22:cf:36:d0:27:02:9e:63:a9:e0: ac:78:69:9e:1d:c8:1b:60:e3:e3:98:9b:16:ad:61:53:e6:16: 0d:71:83:4f:53:87:04:af:0a:8d:1e:b8:6e:94:23:1d:1a:c0: b9:4e:4d:da:3f:bb:fa:9a:c5:51:33:9c:77:da:22:27:bb:70: 19:4e:cb:68:5f:89:4d:c3:45:2c:9f:59:9a:51:cd:e0:b7:43: a0:ae:18:f4:13:eb:a9:34:ec:9f:e7:3f:7b:d1:da:78:61:6e: b2:51:79:0a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NeXR9lmi9xkQ//UG9jvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmRmMDg0NTkxMTk5NjlkNGI5YzE3ZjVhODVlOTI3MzJjNTUxN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJjf2Osqiv1SDaF3Uy2VGaqw7zR5 cMeyMk3tAEpR0phrIQwF+LbIeLtp+Pm4oORWbZoaG94+rhEh9qF98iFJktccVEls 75vLgUyarS4JolQ4z1onhZN0tD8yED4SWvoFGH1AWTFAxCipldXtDPltzc3Up3Wd D9BFTE2xNcc9X1khv7kujmrH+s54eQurvU3PeqzZxdO9DHSwfVaaywOzF2Kd+YTs l1iUU3RczPrrEn1JoHxVfRfyAgWrjvTDzAYD5tkIvqoO/1vR9LtT+Udc6ymYmSt5 UR14jdbxZgCdCeYcKLLOK/NZynRaDocpYqZyPz06goJdkTllUCuHNVcwOQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFD/fCEWRGZadS5wX9aheknMsVRfRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzU2NDVj Yi1mMGJhLTQ0ZmMtYmE5My03MzY5ZjJjYTViM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNTY0NWNi LWYwYmEtNDRmYy1iYTkzLTczNjlmMmNhNWIzYi8xL1A5OElSWkVabHAxTG5CZjFx RjZTY3l4VkY5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubLAMA0GCSqGSIb3DQEBCwUAA4IBAQATV5D4 RrMv9dQzmm1VPqZwBWpd8eliiHWFDWrPqq/XvEaNOmX1uVinpTmCZjTw8F5a1X/l CE0G1Yo8WfzG4nY3Lm6ZPtXjjqgTwbXkFW8JdEr+Dshl9BgVix15U+6VnUltcQlz spXvo40xs4NxirzTQJRL1MFEIb4TIZKQh3x/Sb40y1q0uLFWE7MRQxGM3X4YQ6jY RtZiPiLPNtAnAp5jqeCseGmeHcgbYOPjmJsWrWFT5hYNcYNPU4cErwqNHrhulCMd GsC5Tk3aP7v6msVRM5x32iInu3AZTstoX4lNw0Usn1maUc3gt0Ogrhj0E+upNOyf 5z970dp4YW6yUXkK -----END CERTIFICATE-----Generated at Mon Jan 26 08:23:43 2026 by rpki-client