This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer File: peab2C1ewMe9PV3J-SkC8141ekU.cer (raw, json) Hash identifier: hympvD/y1WP4NoZyrRN/DyTVO8U5qyYNNBVWe7R17E8= Subject key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC3CEC42BD48263B8495B4C43F023 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207932 IP: 194.127.200.0/23 IP: 194.127.212.0/23 IP: 2a0f:3e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c3:ce:c4:2b:d4:82:63:b8:49:5b:4c:43:f0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:b1:2f:ac:78:4e:c9:d5:60:87:df:e6:c0: 0c:b5:2f:a9:22:d3:1d:66:46:b7:7e:e3:97:ab:54: 6b:f7:e3:3d:64:23:4b:54:ac:d1:86:74:50:8b:11: 63:54:b2:18:c1:83:dd:2c:c6:7b:ac:cf:c8:e7:d0: 96:d3:02:b9:2e:97:0c:90:84:1c:14:28:4e:74:8e: 57:67:ae:ec:58:a7:40:51:98:55:a3:cd:a7:de:d4: 12:91:e4:76:cb:9b:d8:2a:b2:16:6f:f3:86:30:45: 18:f5:2e:6d:8b:72:7f:0d:ee:7b:69:79:a0:a2:6f: 55:f4:5a:72:c6:94:2d:e6:04:3e:89:c4:44:b4:63: 56:b3:9e:ee:e0:57:aa:72:93:35:6b:9f:a1:b1:7d: a8:80:31:7e:d9:08:33:de:d6:32:66:89:12:dc:be: 68:81:53:9f:6c:6f:d1:be:51:07:3b:21:17:40:64: bc:77:5f:58:c1:4f:50:fb:9e:2c:4d:a2:97:59:87: f4:90:ff:88:35:ff:98:cd:7e:77:0d:09:49:5f:36: 43:69:a5:03:11:02:71:b6:4e:39:47:b7:33:2b:8e: 14:10:dc:cc:42:24:b9:d6:b9:cf:ba:c7:bd:dc:88: 00:33:7d:0a:67:8a:50:ab:5d:16:5b:e6:9c:fb:83: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.200.0/23 194.127.212.0/23 IPv6: 2a0f:3e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207932 Signature Algorithm: sha256WithRSAEncryption 58:a7:f8:f6:84:73:14:f8:26:a4:92:ed:48:60:77:fa:a8:4c: 19:70:89:a7:26:65:47:b9:4d:76:1b:1d:1b:d2:b1:f7:de:92: 10:7f:50:c7:56:b0:17:96:98:41:12:f3:0f:9b:ba:53:32:4e: fd:30:34:20:0b:7f:bb:ab:e4:aa:3f:03:6a:7a:c6:12:d8:96: 2f:7b:fc:cf:b9:59:d8:c9:d4:1f:b9:57:0b:b6:d9:7b:bd:9b: f0:62:9e:c7:84:34:75:b4:9c:b4:ab:bd:d2:02:60:35:bc:19: 60:d5:b8:fe:b8:20:43:ee:6e:b9:56:7d:08:d8:19:8b:3f:e1: 17:cb:a7:60:16:40:d2:d6:cd:8f:cb:7c:3a:cd:2e:b5:36:77: 8d:86:b3:ef:ef:4d:32:e6:82:a8:95:37:2d:47:95:df:14:3e: 13:c9:52:da:25:62:9e:14:fd:dc:c6:80:a4:83:93:a2:11:97: f1:c2:7a:86:96:52:68:0e:cc:fb:d4:89:39:0a:9f:33:b4:17: 9c:ed:37:b0:44:1e:ce:71:23:47:ad:5f:35:be:2b:4e:87:4a: 7d:f5:48:f4:5c:52:bf:94:8b:2c:ee:37:03:a7:9d:c6:70:46: c2:04:0b:5f:98:cb:17:ee:61:ae:80:3e:17:0e:1d:5e:53:fe: a9:eb:f2:f7 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6WsPOxCvUgmO4SVtMQ/AjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWU2OWJkODJkNWVjMGM3YmQzZDVkYzlmOTI5MDJmMzVlMzU3YTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2CxL6x4TsnVYIff5sAMtS+pItMd Zka3fuOXq1Rr9+M9ZCNLVKzRhnRQixFjVLIYwYPdLMZ7rM/I59CW0wK5LpcMkIQc FChOdI5XZ67sWKdAUZhVo82n3tQSkeR2y5vYKrIWb/OGMEUY9S5ti3J/De57aXmg om9V9FpyxpQt5gQ+icREtGNWs57u4FeqcpM1a5+hsX2ogDF+2Qgz3tYyZokS3L5o gVOfbG/RvlEHOyEXQGS8d19YwU9Q+54sTaKXWYf0kP+INf+YzX53DQlJXzZDaaUD EQJxtk45R7czK44UENzMQiS51rnPuse93IgAM30KZ4pQq10WW+ac+4O4LwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKXmm9gtXsDHvT1dyfkpAvNeNXpFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzk4MTQ5 YS1iOTk2LTQ1ZGMtOGZjYy01M2U2YzE0ZmNjMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvOTgxNDlh LWI5OTYtNDVkYy04ZmNjLTUzZTZjMTRmY2MwYy8xL3BlYWIyQzFld01lOVBWM0ot U2tDODE0MWVrVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwn/IAwQBwn/UMA0EAgACMAcDBQMqDz5AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsPDANBgkqhkiG9w0BAQsFAAOCAQEAWKf4 9oRzFPgmpJLtSGB3+qhMGXCJpyZlR7lNdhsdG9Kx996SEH9Qx1awF5aYQRLzD5u6 UzJO/TA0IAt/u6vkqj8DanrGEtiWL3v8z7lZ2MnUH7lXC7bZe72b8GKex4Q0dbSc tKu90gJgNbwZYNW4/rggQ+5uuVZ9CNgZiz/hF8unYBZA0tbNj8t8Os0utTZ3jYaz 7+9NMuaCqJU3LUeV3xQ+E8lS2iVinhT93MaApIOTohGX8cJ6hpZSaA7M+9SJOQqf M7QXnO03sEQeznEjR61fNb4rTodKffVI9FxSv5SLLO43A6edxnBGwgQLX5jLF+5h roA+Fw4dXlP+qevy9w== -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:48 2026 by rpki-client