This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer File: Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer (raw, json) Hash identifier: XUS76WomwwhsXQpij9qIf2I6oz5TDj0D2xa22Z49rlA= Subject key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11DAB9C3A4CB0EC788CD888A9DEF19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212257 IP: 185.160.96.0/22 IP: 2a07:bc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:da:b9:c3:a4:cb:0e:c7:88:cd:88:8a:9d:ef:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:b1:ac:93:2c:6a:dd:2b:e1:6d:6e:ba:8a: 6d:9c:a8:a6:28:8e:07:91:00:4b:e7:e3:25:00:b1: 34:44:22:e5:7c:b2:35:19:7c:59:02:2d:67:e2:54: a4:b3:ac:f1:ce:7a:6e:17:1c:a0:50:d5:40:bf:5d: ac:02:61:e4:ed:65:ee:a3:df:ed:95:ad:87:31:17: 3e:f0:5f:32:0d:49:d4:0b:b8:0e:95:12:74:da:54: 61:fa:60:8a:33:8f:1b:c5:4f:e4:de:7b:c6:fc:43: e5:4d:55:48:c2:4a:5d:03:2b:dd:b7:fd:8f:e2:dd: a0:dd:bd:36:d6:83:ea:be:3f:d2:47:03:1a:21:73: ed:64:e9:1f:16:07:79:a3:f1:ad:e9:c9:7d:78:36: bb:11:cf:b4:09:92:eb:2f:66:17:54:c5:a9:b3:b2: f4:c0:ae:e0:19:42:93:da:9a:da:2d:06:93:a3:51: 77:81:42:55:03:54:8e:ed:18:ba:dd:54:bf:ca:e7: dc:92:dd:0c:2c:e0:c6:01:da:28:07:c9:41:0b:a5: f3:2b:18:28:99:19:9e:78:20:06:eb:e7:fd:65:03: 0c:90:fe:8a:e4:76:2c:87:65:2c:66:e2:e0:e0:db: 61:79:a3:4f:08:62:31:ba:dd:d1:68:af:c6:5f:e9: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.96.0/22 IPv6: 2a07:bc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212257 Signature Algorithm: sha256WithRSAEncryption 64:2e:63:fd:4a:2c:3c:2e:63:9c:75:f3:b7:ff:63:24:62:40: 36:3d:69:a3:2e:8b:c7:0d:79:73:db:b3:63:19:ce:79:e0:6c: 93:d5:b2:c1:4c:73:31:47:d1:6a:00:99:5c:db:6b:da:4e:87: 65:2b:ce:e9:28:20:23:b8:f4:97:0e:f7:3f:8a:82:e6:7f:dd: 7e:ae:e5:9b:b9:ef:95:f0:49:d9:71:30:98:fb:28:66:98:ca: c9:25:4e:4f:01:3c:56:13:66:d2:ff:9e:9c:74:ba:cb:18:67: f7:ce:03:40:23:6b:ff:69:cd:b2:df:60:f2:1e:9b:ca:32:8c: 0e:4f:13:d5:1e:7c:94:5d:1d:3b:9c:38:17:04:5d:16:74:a1: a5:94:42:f6:b2:fa:ae:3d:41:f4:be:4d:3c:50:ce:2c:d6:b8: 12:27:b1:ea:90:29:7c:72:db:e4:67:65:d3:51:d4:12:f9:10: f6:5e:29:ca:39:39:42:87:5d:5f:28:8c:32:eb:64:b5:5a:9e: b1:e4:cb:39:37:22:10:10:bd:a7:77:0e:6a:8d:52:b8:6e:bf: ea:87:0d:b6:e5:41:82:9b:ee:e7:18:a1:26:d5:f7:33:d9:c8: 76:4f:e5:07:c5:61:a5:f8:67:b4:16:73:75:cf:a3:9e:c2:64: aa:a9:ed:6d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Edq5w6TLDseIzYiKne8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTJiYmYzNDZlYmQ0YWEwYjc2ZTEwYzU4MzIxYWQzM2Q3MmQ1MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOyxrJMsat0r4W1uuoptnKimKI4H kQBL5+MlALE0RCLlfLI1GXxZAi1n4lSks6zxznpuFxygUNVAv12sAmHk7WXuo9/t la2HMRc+8F8yDUnUC7gOlRJ02lRh+mCKM48bxU/k3nvG/EPlTVVIwkpdAyvdt/2P 4t2g3b021oPqvj/SRwMaIXPtZOkfFgd5o/Gt6cl9eDa7Ec+0CZLrL2YXVMWps7L0 wK7gGUKT2praLQaTo1F3gUJVA1SO7Ri63VS/yufckt0MLODGAdooB8lBC6XzKxgo mRmeeCAG6+f9ZQMMkP6K5HYsh2UsZuLg4NtheaNPCGIxut3RaK/GX+nI6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD4rvzRuvUqgt24QxYMhrTPXLVGfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2JjNTFj Yi1kZTBjLTQ4ODEtYjBiMS0xYWEyNzdkZjM3NjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYmM1MWNi LWRlMGMtNDg4MS1iMGIxLTFhYTI3N2RmMzc2OS8xL1BpdV9ORzY5U3FDM2JoREZn eUd0TTljdFVaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaBgMA0EAgACMAcDBQMqB7wAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9ITANBgkqhkiG9w0BAQsFAAOCAQEAZC5j/UosPC5j nHXzt/9jJGJANj1poy6Lxw15c9uzYxnOeeBsk9WywUxzMUfRagCZXNtr2k6HZSvO 6SggI7j0lw73P4qC5n/dfq7lm7nvlfBJ2XEwmPsoZpjKySVOTwE8VhNm0v+enHS6 yxhn984DQCNr/2nNst9g8h6byjKMDk8T1R58lF0dO5w4FwRdFnShpZRC9rL6rj1B 9L5NPFDOLNa4Eiex6pApfHLb5Gdl01HUEvkQ9l4pyjk5QoddXyiMMutktVqeseTL OTciEBC9p3cOao1SuG6/6ocNtuVBgpvu5xihJtX3M9nIdk/lB8VhpfhntBZzdc+j nsJkqqntbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:30 2026 by rpki-client