This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer (raw, json) Hash identifier: PIG+lJ7Q6XZ3zrFNSihSweahieDNiGuzUiLF6tP42fg= Subject key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78346AD43C0FD3BFCA3B2DA2352F58BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209993 IP: 45.90.192.0/22 IP: 2a0e:240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6a:d4:3c:0f:d3:bf:ca:3b:2d:a2:35:2f:58:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57f291818d8719738268d844994a2e10824d4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:12:48:c3:60:54:8e:9e:d3:ec:1e:b8:7b: bb:8c:e7:83:f4:79:7d:93:fc:18:83:68:69:55:94: b4:d1:51:9e:e0:47:eb:9d:e7:ae:61:27:65:8a:82: 05:71:fd:78:fc:e8:c8:87:d6:ba:fb:47:70:7f:d0: 2d:1f:aa:67:10:b5:b1:b8:3a:4f:3a:6d:fa:84:3c: 9b:3d:eb:5e:a3:ca:77:9e:ac:97:5f:d8:f3:7c:d3: 3c:52:fc:3f:67:b3:d2:00:d8:c3:ea:fc:60:49:15: 01:d0:c4:20:d7:32:d8:2b:d6:57:fd:87:19:63:77: d9:44:3e:3b:59:29:72:c3:83:31:7e:7a:a1:2a:ee: ee:b7:10:4e:27:53:05:2a:2a:6b:06:4b:09:7c:01: 51:5c:7d:41:96:9e:92:56:49:9e:34:d7:c4:48:11: cb:ed:71:dc:52:a7:75:f8:1b:3d:1f:44:93:1d:61: fa:a2:bf:7d:2a:c3:5e:9b:6b:0a:42:5f:f3:06:12: 6f:04:ae:49:b2:1a:15:50:4b:97:d0:4f:5e:e8:b8: 0c:00:ac:98:18:54:97:fa:01:b4:0e:cb:37:c1:e4: 91:28:ce:72:b5:8b:7f:75:df:1f:8b:ca:11:5e:22: 11:52:30:b8:a5:a2:e9:d9:19:a2:61:b9:1e:f0:72: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.192.0/22 IPv6: 2a0e:240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209993 Signature Algorithm: sha256WithRSAEncryption 09:08:a6:c0:9e:02:38:82:9d:80:3c:a4:83:fa:b7:ff:cd:f6: d7:27:f2:96:89:1b:84:53:47:b6:6f:f2:01:dd:bd:24:93:4a: e4:52:49:0a:99:66:ff:17:21:24:51:02:10:4a:dd:2b:c7:2b: e2:d6:9d:92:af:dd:76:1d:f3:34:a4:a9:67:7a:9a:8d:f0:04: 6d:75:2f:3b:68:b1:b0:75:c3:3c:42:8c:03:c0:15:98:51:c9: 82:28:35:9e:47:6e:98:ff:d8:58:6f:9b:01:f9:16:07:27:d7: d5:fa:1b:62:b0:28:42:88:ae:40:6d:f2:b4:e0:df:6d:ac:01: 0d:df:e0:12:80:a6:e4:54:76:f7:29:77:e0:22:2d:3d:50:a5: 6e:9b:13:d1:8d:a1:13:87:a7:6b:4d:1f:e2:6c:d4:1a:0b:c3: 98:e7:e5:43:79:88:c9:bf:76:5a:ed:5c:cb:33:b6:24:60:1c: b8:e3:1f:1e:4c:76:81:f9:57:1c:b2:d3:7e:6b:26:9d:0d:d7: 5d:dc:1c:1f:f4:03:27:6e:c7:d0:34:2b:bc:81:57:ad:cf:2c: 7d:23:f4:92:90:6a:dd:a0:2c:9b:88:6b:42:5e:d2:5c:60:f3: e5:ec:bc:6c:a4:51:ed:51:3a:fc:6e:94:47:68:59:ef:41:cf: 46:03:57:5c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NGrUPA/Tv8o7LaI1L1i9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTdmMjkxODE4ZDg3MTk3MzgyNjhkODQ0OTk0YTJlMTA4MjRkNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDwSSMNgVI6e0+weuHu7jOeD9Hl9 k/wYg2hpVZS00VGe4EfrneeuYSdlioIFcf14/OjIh9a6+0dwf9AtH6pnELWxuDpP Om36hDybPeteo8p3nqyXX9jzfNM8Uvw/Z7PSANjD6vxgSRUB0MQg1zLYK9ZX/YcZ Y3fZRD47WSlyw4MxfnqhKu7utxBOJ1MFKiprBksJfAFRXH1Blp6SVkmeNNfESBHL 7XHcUqd1+Bs9H0STHWH6or99KsNem2sKQl/zBhJvBK5JshoVUEuX0E9e6LgMAKyY GFSX+gG0Dss3weSRKM5ytYt/dd8fi8oRXiIRUjC4paLp2RmiYbke8HKz7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKV/KRgY2HGXOCaNhEmUouEIJNTJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3Lzk2M2E4 My1kMmQxLTQ2NGMtYmRiMC1iMWE5NzkzZWUzMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvOTYzYTgz LWQyZDEtNDY0Yy1iZGIwLWIxYTk3OTNlZTMyNC8xL3BYOHBHQmpZY1pjNEpvMkVT WlNpNFFnazFNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVrAMA0EAgACMAcDBQMqDgJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0STANBgkqhkiG9w0BAQsFAAOCAQEACQimwJ4COIKd gDykg/q3/8321yfylokbhFNHtm/yAd29JJNK5FJJCplm/xchJFECEErdK8cr4tad kq/ddh3zNKSpZ3qajfAEbXUvO2ixsHXDPEKMA8AVmFHJgig1nkdumP/YWG+bAfkW ByfX1fobYrAoQoiuQG3ytODfbawBDd/gEoCm5FR29yl34CItPVClbpsT0Y2hE4en a00f4mzUGgvDmOflQ3mIyb92Wu1cyzO2JGAcuOMfHkx2gflXHLLTfmsmnQ3XXdwc H/QDJ27H0DQrvIFXrc8sfSP0kpBq3aAsm4hrQl7SXGDz5ey8bKRR7VE6/G6UR2hZ 70HPRgNXXA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:24 2026 by rpki-client