This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer File: Ps1TxmQkw_Npyojuevdq2yXhhFE.cer (raw, json) Hash identifier: pcGPgKDewOBqW9tAjmsGHoChhuu1FkYbDSgysVpXD7g= Subject key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C7344439BFB21803D50FF28758236 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.120.208.0/21 IP: 87.121.28.0/22 IP: 94.156.254.0/23 IP: 176.56.192.0/19 IP: 185.159.86.0/24 IP: 185.251.18.0/24 IP: 195.211.49.0/24 IP: 2a0b:d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:73:44:43:9b:fb:21:80:3d:50:ff:28:75:82:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:b9:ee:2b:4a:17:94:66:00:4e:2e:78:f5: 09:2c:6a:e7:83:2c:30:37:bd:96:84:4e:cb:fe:c4: 53:45:05:5f:b3:2d:ba:69:ea:ee:8e:30:30:a6:2d: a9:d2:8e:39:de:cd:19:0a:e0:8a:f4:07:4c:d5:62: cc:1b:56:b2:df:43:8d:b5:f2:31:67:9f:8d:66:01: eb:56:fa:e6:11:b5:e0:7b:51:2e:de:16:84:a8:95: 7d:90:c2:8c:88:16:f0:63:81:ab:85:6a:c3:ea:f8: ac:bf:c6:ea:b7:2a:4b:b1:98:78:9b:50:7e:7a:47: 3f:a7:37:6c:1d:1d:e2:cf:76:d9:3a:06:53:60:6e: fa:1d:2d:a4:b3:f8:09:ee:6d:7a:55:f6:8b:72:28: cb:c9:6e:30:ea:b9:f3:01:68:dd:6d:62:4b:15:c9: d9:db:d7:16:a0:e3:20:79:e7:b7:bc:32:6b:80:9f: fc:bd:f5:60:c2:c7:20:34:da:0d:ec:64:13:f3:76: 0a:4f:b0:bf:92:23:75:e2:ec:50:db:3b:59:2b:6b: db:1a:eb:a7:60:59:1b:1d:3a:ac:36:d0:d6:e1:38: f4:a5:eb:be:51:18:8c:43:48:7d:7a:6e:d0:e2:b9: 21:71:b7:1d:db:12:8f:99:78:e1:66:22:12:89:68: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.208.0/21 87.121.28.0/22 94.156.254.0/23 176.56.192.0/19 185.159.86.0/24 185.251.18.0/24 195.211.49.0/24 IPv6: 2a0b:d40::/29 Signature Algorithm: sha256WithRSAEncryption a8:87:0a:a9:fd:de:3a:1b:bc:95:e2:ea:b1:03:ad:2c:ef:19: 1f:21:8c:d5:a3:ac:9c:3b:ec:b0:04:23:20:c9:ef:4f:09:67: e7:4a:a8:19:18:71:aa:3f:63:56:ea:00:fc:a8:7d:c2:00:3e: 1c:86:05:46:cd:ed:8b:59:ab:84:06:f1:b5:c6:8a:e8:5c:99: cf:95:cb:19:2c:a7:36:f3:f6:96:58:30:c4:fc:70:75:b9:99: e1:29:fe:c5:b2:43:35:c5:b5:4f:b3:f5:9a:d4:50:09:81:19: ff:3e:c2:ef:4b:8a:2d:16:1f:88:48:d1:40:0b:9a:91:16:10: e8:2f:ed:4c:6c:6d:7f:ce:97:dc:47:7b:6b:b4:5e:e8:31:04: 90:a3:fd:86:8c:ca:7b:ff:99:0c:29:23:0d:c9:7a:47:67:36: 23:be:88:90:ad:b2:8a:a6:e2:d0:4a:7a:98:36:44:7b:0a:e9: 2f:61:fc:b7:1f:39:7e:38:36:4f:36:be:c2:55:cb:92:32:53: 22:e1:82:7b:12:a2:6c:8d:10:29:62:07:2b:a1:fd:d1:48:9e: 2a:99:e7:45:05:15:e1:16:d9:71:6c:ef:fe:da:34:47:3a:8c: 54:86:88:1f:b0:8b:4a:fc:99:13:28:9f:70:89:c0:d7:f0:49: 54:d1:9e:84 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt9XHNEQ5v7IYA9UP8odYI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWNkNTNjNjY0MjRjM2YzNjljYTg4ZWU3YWY3NmFkYjI1ZTE4NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37G57itKF5RmAE4uePUJLGrngyww N72WhE7L/sRTRQVfsy26aerujjAwpi2p0o453s0ZCuCK9AdM1WLMG1ay30ONtfIx Z5+NZgHrVvrmEbXge1Eu3haEqJV9kMKMiBbwY4GrhWrD6visv8bqtypLsZh4m1B+ ekc/pzdsHR3iz3bZOgZTYG76HS2ks/gJ7m16VfaLcijLyW4w6rnzAWjdbWJLFcnZ 29cWoOMgeee3vDJrgJ/8vfVgwscgNNoN7GQT83YKT7C/kiN14uxQ2ztZK2vbGuun YFkbHTqsNtDW4Tj0peu+URiMQ0h9em7Q4rkhcbcd2xKPmXjhZiISiWiIPQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFD7NU8ZkJMPzacqI7nr3atsl4YRRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2U2NWFk YS00ZDRhLTQwNGQtODcwMC1jMjI1NjgwNGU5MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTY1YWRh LTRkNGEtNDA0ZC04NzAwLWMyMjU2ODA0ZTkyMi8xL1BzMVR4bVFrd19OcHlvanVl dmRxMnlYaGhGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDV3jQAwQCV3kcAwQBXpz+AwQFsDjAAwQAuZ9W AwQAufsSAwQAw9MxMA0EAgACMAcDBQMqCw1AMA0GCSqGSIb3DQEBCwUAA4IBAQCo hwqp/d46G7yV4uqxA60s7xkfIYzVo6ycO+ywBCMgye9PCWfnSqgZGHGqP2NW6gD8 qH3CAD4chgVGze2LWauEBvG1xoroXJnPlcsZLKc28/aWWDDE/HB1uZnhKf7FskM1 xbVPs/Wa1FAJgRn/PsLvS4otFh+ISNFAC5qRFhDoL+1MbG1/zpfcR3trtF7oMQSQ o/2GjMp7/5kMKSMNyXpHZzYjvoiQrbKKpuLQSnqYNkR7CukvYfy3Hzl+ODZPNr7C VcuSMlMi4YJ7EqJsjRApYgcrof3RSJ4qmedFBRXhFtlxbO/+2jRHOoxUhogfsItK /JkTKJ9wicDX8ElU0Z6E -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:44 2026 by rpki-client