This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer (raw, json) Hash identifier: 46hKJMlhdXxjPUbWV4rlutqv/oJ7bXWMkvGpKjWM5FY= Subject key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348470D3AFA16A8EB29FF36437D41C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49877 IP: 185.153.196.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:70:d3:af:a1:6a:8e:b2:9f:f3:64:37:d4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:a9:eb:98:0a:2a:b5:e4:de:91:a9:d7:0a: 88:e2:dd:bd:b8:26:00:87:9b:99:b6:c6:4f:d8:e2: 86:69:68:67:08:f4:63:ac:10:55:1c:a1:d1:a5:91: 7f:73:a9:f5:c4:fc:ec:03:65:d0:f7:f2:86:7e:bf: 2a:92:63:5d:8d:14:b1:1f:ef:fc:88:62:f4:21:f4: ae:31:2c:68:4a:b8:ac:c8:9c:47:a0:05:9b:f7:b4: bd:f8:ac:93:35:04:62:e8:ba:9b:ed:1c:64:6d:b1: f4:e5:92:d9:94:cb:2c:a7:83:b9:7e:fd:66:99:11: 1c:42:10:59:1b:c3:1b:2f:4a:3a:68:97:c5:f1:35: 65:c5:94:4e:5e:01:b6:b6:96:32:47:e3:a6:c5:66: a8:20:13:03:cc:5e:1b:c6:bc:9c:c8:6c:a0:5e:7b: 4e:1a:3c:1c:4d:fc:6e:2c:2e:ad:1c:59:4c:b5:1d: 7d:16:14:0b:45:05:e4:b6:96:4d:79:45:5c:0e:24: bc:9f:a2:e1:2f:f7:86:69:7d:8f:72:66:f6:5d:ee: 40:26:a0:6b:ef:53:3c:e5:72:3b:ed:ae:33:10:b9: 94:b3:5e:66:9b:91:04:94:d3:da:af:b9:f1:68:0a: f9:25:83:f4:94:87:a3:6b:c9:e1:94:26:f6:cd:4b: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.196.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49877 Signature Algorithm: sha256WithRSAEncryption 4a:a1:03:40:30:aa:a9:98:e6:3e:cf:bd:9e:d0:17:e2:91:ea: 34:e3:57:e9:9d:0e:92:a7:96:d9:59:22:a9:39:65:83:9e:97: 72:f0:ac:78:21:3d:fb:cc:f3:84:86:2f:c7:05:9d:f9:8f:62: 86:a6:38:4f:fe:71:31:49:18:a8:da:6a:c3:5a:4e:a3:cd:bb: 27:63:16:e0:0a:7a:5e:63:a1:d5:9d:fe:38:cd:9d:c2:44:34: ba:73:84:09:4f:84:2b:b7:d3:06:e0:e1:6a:8a:db:23:27:b7: a3:d6:d0:cf:99:31:f4:d2:ee:d4:55:ab:1d:87:59:5f:36:4b: 47:51:36:3c:fe:a3:84:db:23:ba:2e:76:a9:51:a6:ef:78:49: 1c:89:a5:8e:69:55:62:69:16:c0:69:e4:11:b0:f5:0b:c8:2e: de:07:9f:29:aa:c0:48:40:30:d4:4b:a0:cb:52:65:aa:79:4f: db:66:6c:91:a5:f6:db:da:07:59:c9:3f:db:9f:82:43:2e:81: 08:b5:19:dd:14:fe:f1:2e:41:b0:c7:af:4c:95:47:52:84:a4: cc:04:dc:74:d0:38:ba:df:e6:d8:07:c2:8d:64:b3:2e:d1:aa: da:6e:ac:37:82:4a:cd:fc:cb:97:cf:40:84:68:1f:99:ab:ff: 0d:12:0f:dd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NIRw06+hao6yn/NkN9QcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2ZlZTJlYTNjZGUwODczYTE5MWJkZDc5NTIyNzM5OWI1NmE0M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo42p65gKKrXk3pGp1wqI4t29uCYA h5uZtsZP2OKGaWhnCPRjrBBVHKHRpZF/c6n1xPzsA2XQ9/KGfr8qkmNdjRSxH+/8 iGL0IfSuMSxoSrisyJxHoAWb97S9+KyTNQRi6Lqb7RxkbbH05ZLZlMssp4O5fv1m mREcQhBZG8MbL0o6aJfF8TVlxZROXgG2tpYyR+OmxWaoIBMDzF4bxrycyGygXntO GjwcTfxuLC6tHFlMtR19FhQLRQXktpZNeUVcDiS8n6LhL/eGaX2Pcmb2Xe5AJqBr 71M85XI77a4zELmUs15mm5EElNPar7nxaAr5JYP0lIeja8nhlCb2zUvAFwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDz+4uo83ghzoZG915Uic5m1akO6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2Y2Njhl MC1mYjM2LTQ1YTAtOTcxZi02YjJmOWQxNTE1MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvZjY2OGUw LWZiMzYtNDVhMC05NzFmLTZiMmY5ZDE1MTUxOS8xL1BQN2k2anplQ0hPaGtiM1hs U0p6bWJWcVE3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZnEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDC1TANBgkqhkiG9w0BAQsFAAOCAQEASqEDQDCqqZjmPs+9ntAX4pHqNONX6Z0O kqeW2VkiqTllg56XcvCseCE9+8zzhIYvxwWd+Y9ihqY4T/5xMUkYqNpqw1pOo827 J2MW4Ap6XmOh1Z3+OM2dwkQ0unOECU+EK7fTBuDhaorbIye3o9bQz5kx9NLu1FWr HYdZXzZLR1E2PP6jhNsjui52qVGm73hJHImljmlVYmkWwGnkEbD1C8gu3gefKarA SEAw1Eugy1JlqnlP22ZskaX229oHWck/25+CQy6BCLUZ3RT+8S5BsMevTJVHUoSk zATcdNA4ut/m2AfCjWSzLtGq2m6sN4JKzfzLl89AhGgfmav/DRIP3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:08 2026 by rpki-client