This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer File: PIbsMh5y_UbJjcwM18cLytVX1Zw.cer (raw, json) Hash identifier: YKzG82SE4BhHMrGsAoHyCpFn+ZaRLvjALB0uZQP9IWI= Subject key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC928F4A50BD627A526540FACA42CE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207607 AS: 209097 IP: 5.182.144.0/22 IP: 45.149.56.0/22 IP: 185.115.204.0/24 IP: 2a0e:5c00::/29 IP: 2a12:f280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:28:f4:a5:0b:d6:27:a5:26:54:0f:ac:a4:2c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:10:92:54:9e:9c:41:b3:d1:cf:6a:86:e2: 13:fa:ba:16:a7:d5:07:78:55:cf:7f:9f:c3:83:8c: eb:2d:e0:b4:c5:fd:a7:0f:2c:9c:27:66:85:13:4b: dc:5a:3a:7e:40:e4:f0:71:87:d4:81:a6:db:2b:b1: c8:63:51:e6:e8:79:4d:d7:1d:0b:a3:a4:e4:ba:50: 15:bc:3b:68:59:fb:7b:e3:f8:85:b5:82:a1:4a:48: 5f:a6:0f:ef:c7:33:b8:44:e6:51:42:ce:18:22:1f: 96:02:5e:e5:cb:f0:94:c5:5a:58:35:e3:d6:dd:86: d5:9f:1c:ce:41:59:f3:93:bf:75:a4:d4:ad:5d:3d: 62:ca:c1:86:00:45:68:87:0c:fc:d0:ae:11:5c:ef: 33:b9:3e:a2:e3:30:e6:d4:81:2b:e0:b3:43:02:0e: eb:ed:9d:61:81:b6:b5:0a:79:b4:66:f7:70:6c:e8: 1c:d6:96:2d:16:d7:b8:2c:7c:92:83:23:c7:4c:1c: 6b:05:1c:78:78:29:51:7c:db:25:f9:67:41:ad:a7: 84:57:19:ec:56:cb:f3:e8:86:b5:04:c8:23:c3:6d: 7d:9b:58:0e:32:ac:a6:bf:af:ae:00:c8:4e:e5:cd: 7f:53:63:d0:9d:59:36:40:16:a0:a1:37:f6:9a:55: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.144.0/22 45.149.56.0/22 185.115.204.0/24 IPv6: 2a0e:5c00::/29 2a12:f280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207607 209097 Signature Algorithm: sha256WithRSAEncryption 6d:7f:49:80:59:92:68:c5:d7:7a:86:42:2b:30:04:6d:3b:55: 8e:29:97:23:11:fb:1c:9c:90:75:32:ef:b8:f8:78:8a:1e:72: 2c:f4:1a:73:e9:e6:12:1e:d5:0b:d8:53:93:87:7c:5c:3c:e5: a0:01:d0:28:d6:56:c2:9c:34:0a:50:0f:0f:48:3b:14:46:7c: 6a:38:93:22:a9:90:33:65:1d:2b:00:3f:75:99:e2:23:f4:19: f9:f9:1a:a4:a4:3c:a3:3e:bb:9e:59:ae:e7:f3:c3:29:e7:dd: 29:24:43:88:17:4a:d3:fd:ea:c2:48:fb:d7:14:e2:32:18:d0: 94:53:5b:f0:80:5d:9f:c4:a1:6b:b3:be:8e:ad:e0:cb:38:8a: e6:06:3e:25:13:61:96:05:5c:f0:88:1e:4d:e0:ca:96:b7:e2: 1d:f9:db:10:e1:7a:c8:37:38:38:97:b4:46:92:05:b3:14:5a: 97:f1:30:87:1b:a7:6a:04:16:a0:7c:c8:ea:a7:c3:c7:84:1b: c9:66:51:d5:09:c1:e0:78:33:1e:81:c9:7c:03:7b:07:d1:f9: a0:a2:9b:3f:c0:a4:3b:1d:21:de:11:a7:91:2a:d7:7d:ad:67: e7:ec:f7:98:aa:80:f9:a7:91:73:11:0c:8d:0c:12:fb:d8:27: 13:eb:19:b7 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt6ySj0pQvWJ6UmVA+spCzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzg2ZWMzMjFlNzJmZDQ2Yzk4ZGNjMGNkN2M3MGJjYWQ1NTdkNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaUQklSenEGz0c9qhuIT+roWp9UH eFXPf5/Dg4zrLeC0xf2nDyycJ2aFE0vcWjp+QOTwcYfUgabbK7HIY1Hm6HlN1x0L o6TkulAVvDtoWft74/iFtYKhSkhfpg/vxzO4ROZRQs4YIh+WAl7ly/CUxVpYNePW 3YbVnxzOQVnzk791pNStXT1iysGGAEVohwz80K4RXO8zuT6i4zDm1IEr4LNDAg7r 7Z1hgba1Cnm0ZvdwbOgc1pYtFte4LHySgyPHTBxrBRx4eClRfNsl+WdBraeEVxns Vsvz6Ia1BMgjw219m1gOMqymv6+uAMhO5c1/U2PQnVk2QBagoTf2mlV2NQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFDyG7DIecv1GyY3MDNfHC8rVV9WcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzVjMGZk Mi02NzQzLTQ2ODItOTY3Yi01ZjE1YmVhZmE5YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNWMwZmQy LTY3NDMtNDY4Mi05NjdiLTVmMTViZWFmYTliMS8xL1BJYnNNaDV5X1ViSmpjd00x OGNMeXRWWDFady5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCBbaQAwQCLZU4AwQAuXPMMBQEAgACMA4DBQMq DlwAAwUDKhLygDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDKvcCAwMwyTANBgkq hkiG9w0BAQsFAAOCAQEAbX9JgFmSaMXXeoZCKzAEbTtVjimXIxH7HJyQdTLvuPh4 ih5yLPQac+nmEh7VC9hTk4d8XDzloAHQKNZWwpw0ClAPD0g7FEZ8ajiTIqmQM2Ud KwA/dZniI/QZ+fkapKQ8oz67nlmu5/PDKefdKSRDiBdK0/3qwkj71xTiMhjQlFNb 8IBdn8Sha7O+jq3gyziK5gY+JRNhlgVc8IgeTeDKlrfiHfnbEOF6yDc4OJe0RpIF sxRal/EwhxunagQWoHzI6qfDx4QbyWZR1QnB4HgzHoHJfAN7B9H5oKKbP8CkOx0h 3hGnkSrXfa1n5+z3mKqA+aeRcxEMjQwS+9gnE+sZtw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:31 2026 by rpki-client