This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer File: pCNxKB3-GQctEzndBIKyqvrVQs4.cer (raw, json) Hash identifier: ePx4pAiuaS5osfV1YoFDlTV9lq4k9mp0OGsw+NxHgFQ= Subject key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37C65873CAE376F03F9A99A63DA34 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57025 IP: 95.131.201.0/24 IP: 2a13:db00::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7c:65:87:3c:ae:37:6f:03:f9:a9:9a:63:da:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42371281dfe19072d1339dd0482b2aafad542ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:f4:7c:cd:10:28:e5:9f:d5:2f:bf:b8:e9: e6:36:03:2e:06:67:33:f3:67:b2:0d:ca:68:b0:9e: 8a:5d:52:08:af:21:ff:00:ea:f2:63:36:b8:91:b6: ab:32:d1:5a:0f:7e:9c:70:ef:dd:00:10:9b:6a:ba: 4c:09:d1:90:0d:79:84:13:3b:a3:80:bd:2f:96:39: 09:2c:a3:af:9a:22:5b:9b:fb:92:e8:08:cb:0f:ca: c1:bc:db:fc:88:f8:24:d6:29:dd:bd:66:2c:26:4c: 31:ab:78:94:a3:5a:a1:e2:f5:d1:50:59:69:86:0e: 5c:a3:08:82:29:d8:19:8f:46:bf:db:03:02:87:ba: 23:d2:ee:33:86:a1:b7:4e:d0:f5:40:11:0b:01:ec: 5a:3c:ef:ed:b0:5f:68:b9:55:08:a7:35:d2:6d:75: ab:84:f8:19:24:6d:23:f3:1c:27:11:18:a6:bc:29: 61:83:2c:b3:a6:6a:2a:3d:cc:52:0b:be:6b:3e:a9: ff:de:ec:06:34:9d:44:37:9e:e3:4a:01:33:c3:c3: 6b:3d:df:a1:b9:38:1d:bf:c0:a5:d2:da:8e:22:ca: dc:cc:66:14:69:09:ee:50:ae:72:49:55:72:df:99: 11:38:82:0d:dd:83:90:2c:0c:99:91:01:63:87:af: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.201.0/24 IPv6: 2a13:db00::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57025 Signature Algorithm: sha256WithRSAEncryption 50:43:3b:22:54:57:13:d2:68:f3:ba:74:ba:ee:88:27:6d:09: 21:19:c6:2d:d5:f6:3e:c9:b6:cc:9a:94:01:4b:df:af:ed:02: c2:d6:49:16:a6:01:0d:4a:46:d6:39:36:e9:d4:ba:4c:19:05: e5:b4:da:25:d5:52:c1:9b:62:20:2e:ab:fe:6a:8d:39:66:7c: 92:6a:06:6e:cb:36:f8:03:36:b7:95:40:c6:66:2f:7e:30:b3: 47:78:c5:c7:80:2c:56:6c:89:a9:5a:eb:19:00:b7:dc:fe:36: ce:d6:84:1f:42:7b:e9:3b:1b:af:0f:0e:05:fe:eb:05:70:8f: c2:cd:38:6b:61:c3:26:f9:66:62:d2:ed:84:93:99:c5:80:ca: 7e:54:26:22:f7:12:c2:5e:d3:63:e7:89:20:3c:6b:7e:c4:19: 8f:40:28:cc:21:6b:e0:7b:b8:ac:6b:2d:6c:3a:6c:de:57:a2: c5:b8:5f:96:e7:1a:45:cb:f5:41:e3:a8:9f:f1:95:84:0a:39: cc:8a:12:24:82:23:02:9f:4d:4e:72:ca:ea:53:0b:dc:91:bb: d0:49:1f:3a:01:f7:c0:b0:50:25:4e:67:0b:f6:89:01:9c:38: fc:bc:42:e1:cf:d9:c3:e5:7b:bf:89:bc:c7:2f:9d:94:fc:cc: 30:34:e6:82 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4o3xlhzyuN28D+amaY9o0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDIzNzEyODFkZmUxOTA3MmQxMzM5ZGQwNDgyYjJhYWZhZDU0MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEP0fM0QKOWf1S+/uOnmNgMuBmcz 82eyDcposJ6KXVIIryH/AOryYza4kbarMtFaD36ccO/dABCbarpMCdGQDXmEEzuj gL0vljkJLKOvmiJbm/uS6AjLD8rBvNv8iPgk1indvWYsJkwxq3iUo1qh4vXRUFlp hg5cowiCKdgZj0a/2wMCh7oj0u4zhqG3TtD1QBELAexaPO/tsF9ouVUIpzXSbXWr hPgZJG0j8xwnERimvClhgyyzpmoqPcxSC75rPqn/3uwGNJ1EN57jSgEzw8NrPd+h uTgdv8Cl0tqOIsrczGYUaQnuUK5ySVVy35kROIIN3YOQLAyZkQFjh68ycwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKQjcSgd/hkHLRM53QSCsqr61ULOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2E0M2Ew NS02MDNmLTQ2MDctYmM2OC05OTA2MGUyNDU4ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvYTQzYTA1 LTYwM2YtNDYwNy1iYzY4LTk5MDYwZTI0NThlYy8xL3BDTnhLQjMtR1FjdEV6bmRC SUt5cXZyVlFzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAX4PJMA0EAgACMAcDBQIqE9sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDewTANBgkqhkiG9w0BAQsFAAOCAQEAUEM7IlRXE9Jo 87p0uu6IJ20JIRnGLdX2Psm2zJqUAUvfr+0CwtZJFqYBDUpG1jk26dS6TBkF5bTa JdVSwZtiIC6r/mqNOWZ8kmoGbss2+AM2t5VAxmYvfjCzR3jFx4AsVmyJqVrrGQC3 3P42ztaEH0J76Tsbrw8OBf7rBXCPws04a2HDJvlmYtLthJOZxYDKflQmIvcSwl7T Y+eJIDxrfsQZj0AozCFr4Hu4rGstbDps3leixbhflucaRcv1QeOon/GVhAo5zIoS JIIjAp9NTnLK6lML3JG70EkfOgH3wLBQJU5nC/aJAZw4/LxC4c/Zw+V7v4m8xy+d lPzMMDTmgg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:26 2026 by rpki-client