This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer (raw, json) Hash identifier: sPSw8U6PGOUOAOtfx/Dza9HrVNvE699eoNLXOWhnr84= Subject key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364C90AA1BC8875A951B6D09F7E252 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44097 IP: 193.27.0.0/24 IP: 193.43.214.0/24 IP: 193.222.128.0/24 IP: 2001:67c:ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4c:90:aa:1b:c8:87:5a:95:1b:6d:09:f7:e2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:db:ed:5a:7f:dc:aa:cd:85:44:1d:23:ed: 05:15:00:99:ba:c7:c3:15:0b:b4:14:34:07:90:a2: 40:94:70:08:7f:38:38:45:f1:50:a0:ce:0e:aa:9f: 8b:0e:5d:20:22:c2:cb:9b:80:77:08:76:d1:5a:58: a9:d5:b3:38:ee:41:1b:14:59:e4:e6:30:5e:a8:ae: 75:02:fa:61:66:26:91:2c:0c:43:4a:ca:6f:c5:0e: 3d:00:4e:f0:4a:3c:cf:22:9d:60:63:d7:f6:00:1b: ae:28:76:5e:ef:33:9a:18:ec:90:ab:78:a0:ca:a2: 40:9d:62:7d:68:29:76:1e:5d:13:8e:01:25:75:3b: 53:d5:2e:2a:f9:1f:a8:b7:1c:3b:0d:35:6c:9a:ed: 70:9d:64:98:06:1f:de:be:a7:00:f9:de:7a:b7:0a: 31:d2:14:92:13:25:a7:0a:84:07:a9:e2:8f:30:3a: 50:f2:2b:be:37:5b:2b:0f:91:a7:75:55:de:68:37: fc:01:f8:6d:1c:8d:f1:7a:4b:8a:56:0e:de:16:18: 41:1a:25:7b:b6:9e:2f:72:7f:dc:dc:0a:50:5f:ec: e4:8d:dd:06:f1:6f:43:1b:7e:71:7b:5e:91:e8:d2: c0:13:bc:ee:da:7f:20:e6:05:1a:0a:3a:31:89:40: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.0.0/24 193.43.214.0/24 193.222.128.0/24 IPv6: 2001:67c:ec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44097 Signature Algorithm: sha256WithRSAEncryption 1e:c6:b1:8f:42:b1:b8:a2:b9:da:33:e1:46:ad:f6:1a:0c:1d: 9a:18:78:ae:f1:b8:dc:c0:a8:b8:af:04:d3:5e:af:3f:fc:12: 5f:ea:b9:9f:62:47:6e:84:5d:13:bd:0c:4a:96:02:a1:30:3e: b9:f5:f1:d7:70:31:b3:b4:ab:15:4d:d3:84:dd:ed:61:1a:e4: f3:8e:a4:d4:a5:94:2f:f7:d4:aa:e5:f1:b1:af:27:38:0a:a8: 5f:b4:fa:3c:96:30:1f:6f:95:bc:5d:94:82:57:ca:28:d8:c8: 3a:b1:df:86:5b:e4:4c:38:ce:76:43:63:53:3e:6b:6d:e6:32: e2:d9:bc:fe:cc:e3:39:b1:f1:6a:ec:a5:a7:0a:20:9d:a7:fa: 10:51:50:04:73:e2:ab:0e:3e:02:08:ba:e8:54:cb:bd:90:90: 5f:99:2b:23:20:3c:17:95:28:2c:0c:25:ac:2f:cf:c4:19:04: 2b:d0:9a:d3:9a:2e:ab:d6:9c:02:52:78:23:5a:82:a4:b6:c6: 22:9c:0c:9e:50:e3:7d:57:5f:11:2f:41:e3:68:ab:52:48:95: 54:20:1a:13:ac:4c:68:c7:39:75:08:11:40:23:12:50:ee:d7: 9d:84:c5:53:8a:52:42:fc:08:74:dc:0f:84:fc:77:b0:2c:7b: a9:bc:94:bc -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt7NkyQqhvIh1qVG20J9+JSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWE0MmQyNjBkNWVjZGMyZmEyYjBiNWRiZjYwM2I5MGQ3MTU0NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUfb7Vp/3KrNhUQdI+0FFQCZusfD FQu0FDQHkKJAlHAIfzg4RfFQoM4Oqp+LDl0gIsLLm4B3CHbRWlip1bM47kEbFFnk 5jBeqK51AvphZiaRLAxDSspvxQ49AE7wSjzPIp1gY9f2ABuuKHZe7zOaGOyQq3ig yqJAnWJ9aCl2Hl0TjgEldTtT1S4q+R+otxw7DTVsmu1wnWSYBh/evqcA+d56twox 0hSSEyWnCoQHqeKPMDpQ8iu+N1srD5GndVXeaDf8AfhtHI3xekuKVg7eFhhBGiV7 tp4vcn/c3ApQX+zkjd0G8W9DG35xe16R6NLAE7zu2n8g5gUaCjoxiUCL/QIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFKWkLSYNXs3C+isLXb9gO5DXFURNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2MzOTJk Ny0wYTk5LTQxYzktYTJjZC1mMGQyYjk0M2NiNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYzM5MmQ3 LTBhOTktNDFjOS1hMmNkLWYwZDJiOTQzY2I1My8xL3BhUXRKZzFlemNMNkt3dGR2 MkE3a05jVlJFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAwRsAAwQAwSvWAwQAwd6AMA8EAgACMAkDBwAg AQZ8AOwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKxBMA0GCSqGSIb3DQEBCwUA A4IBAQAexrGPQrG4ornaM+FGrfYaDB2aGHiu8bjcwKi4rwTTXq8//BJf6rmfYkdu hF0TvQxKlgKhMD659fHXcDGztKsVTdOE3e1hGuTzjqTUpZQv99Sq5fGxryc4Cqhf tPo8ljAfb5W8XZSCV8oo2Mg6sd+GW+RMOM52Q2NTPmtt5jLi2bz+zOM5sfFq7KWn CiCdp/oQUVAEc+KrDj4CCLroVMu9kJBfmSsjIDwXlSgsDCWsL8/EGQQr0JrTmi6r 1pwCUngjWoKktsYinAyeUON9V18RL0HjaKtSSJVUIBoTrExoxzl1CBFAIxJQ7ted hMVTilJC/Ah03A+E/HewLHupvJS8 -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:13 2026 by rpki-client