This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer (raw, json) Hash identifier: JLVHBsRaqkurT/6/Ri8bgEdBfKqBxljCOnBhXX8U+vQ= Subject key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F1DD9DC82E58E0C49A8A109D4B36E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51626 IP: 91.220.13.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1d:d9:dc:82:e5:8e:0c:49:a8:a1:09:d4:b3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:d5:00:02:f8:d7:9e:e4:9e:d8:fc:12:7c: a6:2b:9b:37:b2:4a:7b:03:3e:b9:10:f4:3e:d8:5c: c5:18:e0:3f:af:4e:0d:65:82:20:e1:df:e7:fb:bd: 80:45:53:e9:b6:20:4f:92:ca:8f:e5:ea:26:e0:4f: 2a:1e:af:c1:6f:97:bc:c8:24:52:9c:96:8d:70:b2: 32:51:3e:78:2e:ea:39:5c:46:f8:1d:8e:c3:7a:aa: 56:3e:69:70:3c:8a:58:dc:69:af:9c:1e:ab:5a:f2: d0:e6:3e:b1:22:38:a0:35:a7:88:4a:a4:62:ab:85: 8f:09:1e:30:d6:c5:e1:30:d8:04:6b:ea:20:38:f4: 4e:53:85:36:3a:f2:8f:65:35:7d:b3:68:20:79:c5: 18:f6:f8:0e:09:b9:d6:9b:05:a6:1e:ec:d0:c4:5d: 0d:47:4a:e3:3f:bf:71:99:7e:04:3a:93:0f:f0:32: 5f:bc:73:a1:71:7c:0f:b9:2c:d1:6c:20:d0:c6:34: b4:d6:b4:88:77:97:8a:1b:1d:9a:56:8b:41:85:e1: 36:b6:d9:fe:5f:9e:48:c5:3d:ab:5d:fd:4a:b6:8c: 72:d9:3c:62:50:ce:54:22:9e:dc:83:dc:ba:a6:45: c4:5b:9f:b9:0f:50:42:55:ee:e6:93:bf:60:f5:44: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51626 Signature Algorithm: sha256WithRSAEncryption 42:8f:3b:57:76:f0:fa:f8:1f:f2:4c:28:99:d7:4b:04:cb:04: ab:51:97:ca:2c:cd:76:e2:33:c8:85:d6:ce:1a:7d:97:15:38: 18:e1:7f:0b:db:f5:e2:f0:28:26:28:85:71:0e:b1:69:de:61: 32:9d:3a:ea:73:2f:ca:f2:80:b0:63:29:de:79:41:e6:84:3b: d2:67:cf:cf:ea:af:90:c7:68:89:ee:1a:eb:37:d5:a5:46:e4: c3:6b:c9:98:5c:91:84:ce:6f:b0:ef:66:3b:47:3c:ea:5d:7c: ea:26:dd:15:30:b6:02:49:35:7c:d3:31:79:38:c0:2c:f6:e6: eb:65:52:44:32:af:3d:a6:da:2b:1f:f4:35:9d:cf:cc:81:dd: 2f:27:49:76:0b:2e:92:7d:7c:12:6d:43:19:48:77:d3:76:3e: 7f:53:4b:ad:27:40:d1:f1:c3:7b:59:87:b5:71:b2:e1:46:65: 87:53:62:6c:e0:94:34:b6:93:76:ef:fb:71:e5:ef:20:9b:69: 82:9c:fb:3b:6d:f0:86:1c:51:00:92:b8:18:da:fd:95:fe:34: a8:b4:6f:83:83:28:24:38:c5:63:3f:4c:4a:ed:1a:50:87:0e: 89:2d:d0:8a:61:d6:38:44:61:f4:e0:d8:36:72:ee:b6:b4:2a: 0e:9d:09:95 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8fx3Z3ILljgxJqKEJ1LNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWJmYWY4YTFhYTNiYzFmZjNlM2U0MzBjNjdmYjdhNjQxMGEzZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M/VAAL4157kntj8EnymK5s3skp7 Az65EPQ+2FzFGOA/r04NZYIg4d/n+72ARVPptiBPksqP5eom4E8qHq/Bb5e8yCRS nJaNcLIyUT54Luo5XEb4HY7DeqpWPmlwPIpY3GmvnB6rWvLQ5j6xIjigNaeISqRi q4WPCR4w1sXhMNgEa+ogOPROU4U2OvKPZTV9s2ggecUY9vgOCbnWmwWmHuzQxF0N R0rjP79xmX4EOpMP8DJfvHOhcXwPuSzRbCDQxjS01rSId5eKGx2aVotBheE2ttn+ X55IxT2rXf1Ktoxy2TxiUM5UIp7cg9y6pkXEW5+5D1BCVe7mk79g9UQmGQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFD6/r4oao7wf8+PkMMZ/t6ZBCj33MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzIxOGIw ZS01NGI1LTRhZDAtOWFhMC1lZmQxYTA5OGI0ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvMjE4YjBl LTU0YjUtNGFkMC05YWEwLWVmZDFhMDk4YjQ4NS8xL1ByLXZpaHFqdkJfejQtUXd4 bi0zcGtFS1BmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9wNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJqjANBgkqhkiG9w0BAQsFAAOCAQEAQo87V3bw+vgf8kwomddLBMsEq1GXyizN duIzyIXWzhp9lxU4GOF/C9v14vAoJiiFcQ6xad5hMp066nMvyvKAsGMp3nlB5oQ7 0mfPz+qvkMdoie4a6zfVpUbkw2vJmFyRhM5vsO9mO0c86l186ibdFTC2Akk1fNMx eTjALPbm62VSRDKvPabaKx/0NZ3PzIHdLydJdgsukn18Em1DGUh303Y+f1NLrSdA 0fHDe1mHtXGy4UZlh1NibOCUNLaTdu/7ceXvIJtpgpz7O23whhxRAJK4GNr9lf40 qLRvg4MoJDjFYz9MSu0aUIcOiS3QimHWOERh9ODYNnLutrQqDp0JlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:44 2026 by rpki-client