This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer File: PocLmnADxP2cUb01Sp3vo_t3tKk.cer (raw, json) Hash identifier: HSjdYLmPeRArxs0oqU4nSSuogTOkQnWtRSj21QMVCpc= Subject key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE84CE9CAAD3F5885AFF6201D32BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207895 IP: 36.255.92.0/22 IP: 91.132.227.0/24 IP: 185.111.188.0/24 IP: 185.130.60.0/22 IP: 185.213.240.0/22 IP: 185.229.200.0/22 IP: 185.244.94.0/23 IP: 2a06:5ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e8:4c:e9:ca:ad:3f:58:85:af:f6:20:1d:32:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:fe:b6:98:f6:d6:da:11:ff:03:ba:43:0f: b0:45:a0:f0:04:2e:53:0d:e1:e1:34:ea:74:8a:17: 87:23:54:37:f0:d2:8f:61:cd:ca:0e:9d:e0:14:1d: e3:86:cc:64:39:c4:36:91:bf:69:fa:76:c3:39:c2: 16:db:7e:9b:60:b6:75:be:fd:d8:12:67:5d:e9:0c: 2e:59:18:26:57:88:96:3f:0f:c2:96:3f:9c:5b:a7: 9b:39:56:56:36:4f:7d:b8:33:70:58:97:b6:d8:72: 1e:a5:bd:12:84:9a:d9:a2:51:9c:f6:cf:f3:32:11: 3e:9c:bd:5a:6a:73:b2:17:9d:4e:b2:ab:06:bf:10: 5c:e0:37:30:89:d4:08:b3:27:0e:56:0f:36:5c:81: f1:56:07:6c:ed:33:bf:31:98:a3:87:f1:bc:23:91: 4e:b6:fb:74:81:ff:56:34:88:3a:ed:49:cc:d5:36: c8:2d:30:47:e9:16:3d:41:3b:55:2b:b6:2d:b3:73: 13:7c:2e:56:92:9e:d7:96:07:08:bc:23:6d:0a:3a: 81:0d:3e:ab:50:d1:1b:f5:1f:3b:e1:e6:2e:4c:17: 20:59:be:57:04:10:a2:9a:57:4a:ea:48:ba:a5:17: aa:e0:0f:a6:73:81:f0:dd:4a:11:4c:74:11:12:2a: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.255.92.0/22 91.132.227.0/24 185.111.188.0/24 185.130.60.0/22 185.213.240.0/22 185.229.200.0/22 185.244.94.0/23 IPv6: 2a06:5ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207895 Signature Algorithm: sha256WithRSAEncryption 30:81:83:a8:26:e4:19:ff:f0:05:78:c1:13:16:cb:6b:22:8d: 43:56:17:0b:49:b0:30:88:97:01:37:0c:46:59:3b:18:cc:23: 99:d1:5d:18:c9:89:bf:7a:dc:b0:5e:6d:5a:fc:93:05:8d:3a: b0:ef:80:9c:ee:3b:3c:7e:7c:f1:32:2d:60:ef:be:32:98:3a: 5b:8e:0b:a1:ad:08:5f:11:9a:d7:7a:8d:a5:09:84:4a:2e:19: 31:08:a7:c7:c1:d6:6a:98:cc:5b:b7:2f:13:ab:bd:77:f5:03: d2:03:32:9f:90:c2:42:70:ad:ce:92:9f:2c:41:c1:63:c1:75: 7d:40:b0:d5:81:bb:27:ce:00:1a:4a:b8:01:0b:e3:ad:5a:fa: a0:41:a3:45:8d:10:4b:c9:4c:66:eb:7d:c7:83:14:4f:9a:df: a2:be:44:7c:1b:24:a1:e7:67:e6:39:0c:b9:ed:b6:7c:94:6a: ac:60:98:92:96:e2:ae:f9:87:07:68:ba:81:a4:f7:dc:99:de: 7a:86:6d:d5:1f:c9:62:17:a8:90:c7:25:e0:44:f2:1b:60:fb: ac:7c:48:a2:53:1e:97:d1:21:e5:cc:10:c2:cc:ae:0e:70:fe: 9e:c5:18:8d:1e:85:c3:67:f0:fc:82:18:ab:af:e9:24:0a:f5: 9b:da:20:9e -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt26uhM6cqtP1iFr/YgHTK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTg3MGI5YTcwMDNjNGZkOWM1MWJkMzU0YTlkZWZhM2ZiNzdiNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tT+tpj21toR/wO6Qw+wRaDwBC5T DeHhNOp0iheHI1Q38NKPYc3KDp3gFB3jhsxkOcQ2kb9p+nbDOcIW236bYLZ1vv3Y Emdd6QwuWRgmV4iWPw/Clj+cW6ebOVZWNk99uDNwWJe22HIepb0ShJrZolGc9s/z MhE+nL1aanOyF51OsqsGvxBc4DcwidQIsycOVg82XIHxVgds7TO/MZijh/G8I5FO tvt0gf9WNIg67UnM1TbILTBH6RY9QTtVK7Yts3MTfC5Wkp7XlgcIvCNtCjqBDT6r UNEb9R874eYuTBcgWb5XBBCimldK6ki6pReq4A+mc4Hw3UoRTHQREioCkQIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFD6HC5pwA8T9nFG9NUqd76P7d7SpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M1ZDE4 ZTgyLTRkNjgtNDVhNi1hNWRmLWNhYzExNWFkMjI3OS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVk MThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvM0U4NzBCOUE3MDAz QzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBSBggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgME AiT/XAMEAFuE4wMEALlvvAMEArmCPAMEArnV8AMEArnlyAMEAbn0XjANBAIAAjAH AwUDKgZewDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLBcwDQYJKoZIhvcNAQEL BQADggEBADCBg6gm5Bn/8AV4wRMWy2sijUNWFwtJsDCIlwE3DEZZOxjMI5nRXRjJ ib963LBebVr8kwWNOrDvgJzuOzx+fPEyLWDvvjKYOluOC6GtCF8Rmtd6jaUJhEou GTEIp8fB1mqYzFu3LxOrvXf1A9IDMp+QwkJwrc6SnyxBwWPBdX1AsNWBuyfOABpK uAEL461a+qBBo0WNEEvJTGbrfceDFE+a36K+RHwbJKHnZ+Y5DLnttnyUaqxgmJKW 4q75hwdouoGk99yZ3nqGbdUfyWIXqJDHJeBE8htg+6x8SKJTHpfRIeXMEMLMrg5w /p7FGI0ehcNn8PyCGKuv6SQK9ZvaIJ4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:07 2026 by rpki-client