This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer (raw, json) Hash identifier: EIm9dfQo1ZVOfFNVv3552fC95t1vtuc9coNJBx+b+kc= Subject key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C117D4351AF289D93B6DB8F36E88943 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.207.64.0/23 IP: 91.208.247.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7d:43:51:af:28:9d:93:b6:db:8f:36:e8:89:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a50f21c3dc93757fc03282a835600d659f961e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d5:bb:46:d4:a1:87:cc:18:11:c2:ab:3b:7b: 66:c6:52:11:f4:18:46:be:b1:dd:e2:88:aa:cd:d9: de:42:0e:8c:c7:61:ca:bb:e5:28:6a:b8:cb:a4:31: 19:c0:f9:83:2f:be:20:7d:70:97:61:95:d7:6c:a5: 9c:09:65:3a:e4:67:e6:72:de:6a:02:64:0b:64:6b: fa:a6:cf:be:57:b6:a6:78:b2:76:1f:1e:c9:ed:40: fd:a3:bc:92:51:bd:4f:3b:67:f3:dc:c3:ae:cf:cb: 49:63:86:bd:0f:e0:a6:70:f3:7c:fe:35:76:29:46: 58:09:9d:9a:f8:0a:e2:f6:06:39:ed:01:02:33:59: 65:d5:4c:40:5e:36:28:fd:2d:79:3c:50:fc:ef:83: c7:27:93:cb:1f:56:76:a8:ef:59:70:fd:50:6b:41: 83:6e:59:d3:8c:32:81:db:a8:35:73:34:ab:c9:ab: f0:d2:29:1f:22:f6:38:31:0e:e3:e4:fc:a5:c1:01: 3c:17:8d:44:ab:f5:4e:a7:b0:24:0e:72:5a:d2:ef: 06:9d:b7:e9:a1:cb:31:27:7d:cf:3e:d3:a9:d8:d1: e7:ae:66:8d:9a:26:69:2b:13:c1:0e:a5:bd:c5:53: db:89:db:08:e8:0a:70:7a:ff:9e:0d:3f:e3:87:f4: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.64.0/23 91.208.247.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:da:03:b4:f0:26:bb:73:ef:25:96:af:fc:43:87:3f:55:6b: fd:16:d3:45:92:99:54:52:75:94:31:52:d5:29:67:9b:87:41: 3b:d9:ee:b5:06:22:3f:e0:01:a6:42:07:3a:23:6d:50:ce:21: 47:3c:15:d8:6e:7b:b9:9b:2e:70:5a:8e:4e:16:a2:bb:61:19: 7b:2e:b5:2d:5d:69:0c:72:25:68:f1:6e:8b:3c:c1:e3:a4:3f: 27:b7:fc:84:44:c4:b3:ee:a2:db:cf:ee:28:e6:87:2b:43:ca: 3f:aa:b3:b9:de:61:33:92:c3:ca:3b:ba:2b:93:63:92:f2:bd: a8:fa:2c:44:3e:22:bc:94:b5:b4:f9:ab:8e:1f:cf:0c:67:fb: ec:d1:69:fc:72:a0:25:c8:55:0d:81:c3:99:e1:97:57:9a:a9: de:ee:d0:a9:30:0d:7e:64:5e:b3:70:af:74:47:ae:e8:6d:82: e3:b2:c5:f2:1d:d3:65:3a:ae:28:e2:84:c4:cb:54:43:81:4d: 66:81:b9:26:f7:a5:d4:8d:bb:91:de:70:65:b4:d8:0e:26:84: d6:2f:82:cb:13:10:fa:ef:8e:72:50:1b:99:be:d0:50:c9:a3: ed:40:62:be:28:9c:0d:29:12:f2:f6:76:0b:b8:58:45:e0:23: 8b:4d:5a:b9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8EX1DUa8onZO224826IlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTBmMjFjM2RjOTM3NTdmYzAzMjgyYTgzNTYwMGQ2NTlmOTYxZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtW7RtShh8wYEcKrO3tmxlIR9BhG vrHd4oiqzdneQg6Mx2HKu+UoarjLpDEZwPmDL74gfXCXYZXXbKWcCWU65Gfmct5q AmQLZGv6ps++V7ameLJ2Hx7J7UD9o7ySUb1PO2fz3MOuz8tJY4a9D+CmcPN8/jV2 KUZYCZ2a+Ari9gY57QECM1ll1UxAXjYo/S15PFD874PHJ5PLH1Z2qO9ZcP1Qa0GD blnTjDKB26g1czSryavw0ikfIvY4MQ7j5PylwQE8F41Eq/VOp7AkDnJa0u8Gnbfp ocsxJ33PPtOp2NHnrmaNmiZpKxPBDqW9xVPbidsI6Apwev+eDT/jh/QUUQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKUPIcPck3V/wDKCqDVgDWWflh6OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2VhMWRm Ny04MDhhLTQ3YzMtYWU1MS1iMDg0M2VjMzg4MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvZWExZGY3 LTgwOGEtNDdjMy1hZTUxLWIwODQzZWMzODgyMy8xL3BROGh3OXlUZFhfQU1vS29O V0FOWlotV0hvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW89AAwQAW9D3MA0GCSqGSIb3DQEBCwUAA4IB AQAq2gO08Ca7c+8llq/8Q4c/VWv9FtNFkplUUnWUMVLVKWebh0E72e61BiI/4AGm Qgc6I21QziFHPBXYbnu5my5wWo5OFqK7YRl7LrUtXWkMciVo8W6LPMHjpD8nt/yE RMSz7qLbz+4o5ocrQ8o/qrO53mEzksPKO7ork2OS8r2o+ixEPiK8lLW0+auOH88M Z/vs0Wn8cqAlyFUNgcOZ4ZdXmqne7tCpMA1+ZF6zcK90R67obYLjssXyHdNlOq4o 4oTEy1RDgU1mgbkm96XUjbuR3nBltNgOJoTWL4LLExD6745yUBuZvtBQyaPtQGK+ KJwNKRLy9nYLuFhF4COLTVq5 -----END CERTIFICATE-----Generated at Mon Jan 26 08:00:29 2026 by rpki-client