This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer (raw, json) Hash identifier: CYNo+Q4WY34E+7vgVQMAfok89kf+u9hWHQVqRwHWd2k= Subject key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1FC117B837E3219CDC02652B4F762 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9121 IP: 62.248.0.0/17 IP: 78.160.0.0/11 IP: 81.212.0.0/14 IP: 85.96.0.0/12 IP: 88.224.0.0/11 IP: 95.0.0.0/12 IP: 176.52.176.0/22 IP: 194.54.32.0/19 IP: 195.174.0.0/15 IP: 212.156.0.0/16 IP: 212.174.0.0/15 IP: 2a01:358::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:fc:11:7b:83:7e:32:19:cd:c0:26:52:b4:f7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:03:b8:e4:02:81:49:4f:67:d7:0e:8e:30: b5:37:8b:34:74:2b:5e:f1:60:f5:9b:9d:2a:f2:f6: bf:90:45:da:57:f8:11:39:fc:be:99:84:e7:6b:86: 8a:db:8b:5e:c9:74:7b:94:7f:ea:b5:fa:64:e6:83: 4f:8e:59:bd:dd:55:57:38:91:c4:37:59:1c:0f:94: 16:7d:5e:b4:32:bc:f6:27:bd:e4:03:8e:38:be:30: bc:17:d5:6b:74:89:26:3f:f8:19:3d:16:fe:10:79: 8d:3e:08:89:89:1a:e3:97:27:d4:f4:ca:0a:02:46: 02:d7:4d:bc:1a:da:2b:8e:d0:c5:46:01:d3:ef:6d: a8:c1:ee:be:a3:2a:b1:58:06:79:53:00:d2:0b:3f: e6:53:07:89:50:39:ce:df:44:1a:f8:f1:9e:4f:3c: 83:b6:6f:19:46:b8:8a:ea:b1:b2:eb:ec:9e:90:43: 38:22:34:33:f9:49:0f:19:a0:f2:9e:50:11:80:72: ca:df:55:cf:25:77:9a:23:7d:0b:45:46:c2:e7:63: 10:f6:3a:bf:08:f5:6a:2f:c7:7c:48:d6:79:d2:65: e4:70:08:a8:3e:94:3e:0f:df:47:e5:45:5f:c7:c7: f2:35:5d:7f:38:1c:be:59:ce:18:0e:f6:fd:02:c3: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.248.0.0/17 78.160.0.0/11 81.212.0.0/14 85.96.0.0/12 88.224.0.0/11 95.0.0.0/12 176.52.176.0/22 194.54.32.0/19 195.174.0.0/15 212.156.0.0/16 212.174.0.0/15 IPv6: 2a01:358::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9121 Signature Algorithm: sha256WithRSAEncryption 14:03:d7:13:0c:7d:d9:bd:d7:a7:30:9e:02:05:3a:9e:04:1a: 35:fc:6e:e9:9a:7a:0e:ea:6e:f8:02:b7:d0:67:15:f8:05:f7: 66:01:46:0a:37:cf:4b:f7:7f:2b:0e:f7:8d:8f:89:0c:25:42: 73:54:4e:51:d6:68:6c:09:0c:fb:2c:3a:c5:17:c1:fc:fd:c5: 26:bd:6e:a4:09:7f:f7:a5:e4:6e:9d:dd:a6:c6:cb:a7:08:cc: 84:1d:74:d6:89:21:81:c9:77:c6:79:55:16:7b:07:10:2b:6c: 50:f5:66:de:9a:87:06:2d:3b:70:96:66:a2:ce:7e:bf:9d:97: 70:e3:86:14:36:23:15:40:29:79:3b:c1:15:1f:0a:2b:2d:91: 42:24:53:0d:64:34:c6:87:7d:33:49:c3:00:eb:96:40:28:e1: db:d0:f7:3c:99:28:b1:17:24:16:ac:ce:f7:09:34:d6:69:39: d4:ac:cf:27:1c:6b:db:11:50:bc:25:ec:13:88:87:8f:a2:44: 6c:94:6f:aa:a6:5e:ca:56:98:1b:0b:52:c2:85:2e:ed:66:d9: 69:8f:32:2d:30:dd:e1:b7:8c:45:72:02:86:ab:bc:e8:b2:c8: d0:42:6a:2a:20:a5:f8:56:45:86:49:0a:b7:12:3f:fe:3e:71: f3:01:4c:1c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt/8fwRe4N+MhnNwCZStPdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGVmMTFiYjhhOGQ0ODBhMDMxM2UxZjIxOGE2NmJkZjRlOTVmNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnUDuOQCgUlPZ9cOjjC1N4s0dCte 8WD1m50q8va/kEXaV/gROfy+mYTna4aK24teyXR7lH/qtfpk5oNPjlm93VVXOJHE N1kcD5QWfV60Mrz2J73kA444vjC8F9VrdIkmP/gZPRb+EHmNPgiJiRrjlyfU9MoK AkYC1028GtorjtDFRgHT722owe6+oyqxWAZ5UwDSCz/mUweJUDnO30Qa+PGeTzyD tm8ZRriK6rGy6+yekEM4IjQz+UkPGaDynlARgHLK31XPJXeaI30LRUbC52MQ9jq/ CPVqL8d8SNZ50mXkcAioPpQ+D99H5UVfx8fyNV1/OBy+Wc4YDvb9AsMw5wIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFD3vEbuKjUgKAxPh8hima99OlfYnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2QxZjE3 Mi0yZGVmLTQ3OTctODA1Zi1iNDk0NjY0NzI0YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZDFmMTcy LTJkZWYtNDc5Ny04MDVmLWI0OTQ2NjQ3MjRhZC8xL1BlOFJ1NHFOU0FvREUtSHlH S1pyMzA2VjlpYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTBABAIAATA6AwQHPvgAAwMFTqADAwJR1AMDBFVgAwMFWOADAwRf AAMEArA0sAMEBcI2IAMDAcOuAwMA1JwDAwHUrjANBAIAAjAHAwUDKgEDWDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgIjoTANBgkqhkiG9w0BAQsFAAOCAQEAFAPXEwx9 2b3XpzCeAgU6ngQaNfxu6Zp6Dupu+AK30GcV+AX3ZgFGCjfPS/d/Kw73jY+JDCVC c1ROUdZobAkM+yw6xRfB/P3FJr1upAl/96Xkbp3dpsbLpwjMhB101okhgcl3xnlV FnsHECtsUPVm3pqHBi07cJZmos5+v52XcOOGFDYjFUApeTvBFR8KKy2RQiRTDWQ0 xod9M0nDAOuWQCjh29D3PJkosRckFqzO9wk01mk51KzPJxxr2xFQvCXsE4iHj6JE bJRvqqZeylaYGwtSwoUu7WbZaY8yLTDd4beMRXIChqu86LLI0EJqKiCl+FZFhkkK txI//j5x8wFMHA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:21 2026 by rpki-client