This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer (raw, json) Hash identifier: F/tr+W4v6ixEk9dFfmqb0ta6egNV9JnStXeWPMuhimY= Subject key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA700240F90D19777916C67A130F31D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213089 IP: 185.133.232.0/22 IP: 193.178.128.0/24 IP: 193.178.137.0/24 IP: 193.178.139.0/24 IP: 193.178.142.0/24 IP: 2a0e:6000::/32 IP: 2a0f:92c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:00:24:0f:90:d1:97:77:91:6c:67:a1:30:f3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:e8:c5:56:0e:88:69:6a:a5:a6:68:72:f5: fb:9e:42:74:67:96:22:71:c8:bc:30:8d:41:56:31: f6:a5:83:47:df:6b:20:a0:1b:a6:22:a5:44:87:a7: cd:04:31:a7:61:a3:88:7e:43:30:1b:34:66:55:9c: ca:75:50:cb:94:49:75:ac:dc:3b:a8:dd:bf:26:90: 37:3b:ca:28:01:c8:d3:36:d5:e0:c1:6e:99:32:63: e2:4d:1c:12:71:aa:99:ca:00:1c:54:3e:70:cd:26: 74:fc:e6:46:0c:1a:05:45:c9:50:00:43:7e:c3:da: 06:11:b1:a0:ca:c1:85:90:dd:83:6f:e4:9d:fc:c5: 3c:a1:ff:fd:72:dc:30:58:ce:6a:36:9c:7e:25:ad: 2b:8b:d5:8e:6a:63:6d:1b:89:42:2c:29:26:0f:fe: cf:6f:d8:8f:b2:65:fa:72:6e:48:e3:96:ed:b9:77: 8b:5a:81:cc:7e:b9:42:4b:fd:c8:b9:99:1f:7e:3b: e3:d9:41:a8:f3:cf:2c:a5:44:14:66:55:d4:11:25: cb:d2:d4:45:5c:e0:14:a9:ef:09:1e:5c:44:b2:a7: 56:67:ad:31:7f:de:d1:7e:36:56:a3:83:7d:a5:b2: 84:89:7d:bd:f9:3e:74:06:28:16:cd:33:9c:19:4e: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.232.0/22 193.178.128.0/24 193.178.137.0/24 193.178.139.0/24 193.178.142.0/24 IPv6: 2a0e:6000::/32 2a0f:92c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213089 Signature Algorithm: sha256WithRSAEncryption 5f:92:2c:59:8d:bf:71:67:c6:e2:74:e3:d1:b4:6a:35:c0:7b: 82:5a:38:9c:7e:6f:27:3c:cc:af:06:de:a4:5b:6c:0b:0c:cc: 76:40:61:b3:39:1c:bf:8d:ec:3b:46:2c:64:18:00:84:52:44: 52:4d:8d:68:b9:4e:2f:a2:fd:5c:c8:41:ae:cb:c1:bc:05:ba: f2:0c:bc:50:1a:38:8d:56:de:4f:f3:d0:cf:0e:1c:97:66:f4: 40:16:8c:d6:8f:fd:e4:48:bd:fb:ac:00:6c:16:8a:f4:b2:b9: 76:ce:78:9f:4a:ed:95:a7:ec:df:ec:b7:82:68:e0:cc:cb:d0: 3d:94:cb:15:03:07:94:71:6d:1c:c6:f9:7f:2e:8e:1d:68:ed: 25:c1:29:d3:70:b6:10:db:0b:37:4e:e1:41:b3:71:36:c0:95: 96:30:4e:6e:13:7a:02:dd:78:41:4a:60:27:c2:4a:df:c4:84: 92:43:92:bb:90:52:d1:3e:89:e7:ab:4a:e1:37:ea:c5:54:29: 72:48:4c:f8:b5:6f:a9:e4:1e:e1:3a:c6:4e:1a:94:96:e7:09: d4:6a:fa:89:74:11:2a:e4:51:46:3b:a2:b6:70:bd:73:a6:95: a6:b5:c5:23:70:75:2d:79:58:ee:ec:d7:05:71:b9:20:7c:93: c8:a1:3d:13 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt+pwAkD5DRl3eRbGehMPMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmUzZjFlZDFiNDljNWJhN2NjMWYxOTJhNDAyNDc2NWEyNTM2NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY/oxVYOiGlqpaZocvX7nkJ0Z5Yi cci8MI1BVjH2pYNH32sgoBumIqVEh6fNBDGnYaOIfkMwGzRmVZzKdVDLlEl1rNw7 qN2/JpA3O8ooAcjTNtXgwW6ZMmPiTRwScaqZygAcVD5wzSZ0/OZGDBoFRclQAEN+ w9oGEbGgysGFkN2Db+Sd/MU8of/9ctwwWM5qNpx+Ja0ri9WOamNtG4lCLCkmD/7P b9iPsmX6cm5I45btuXeLWoHMfrlCS/3IuZkffjvj2UGo888spUQUZlXUESXL0tRF XOAUqe8JHlxEsqdWZ60xf97RfjZWo4N9pbKEiX29+T50BigWzTOcGU4qkQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFK/j8e0bScW6fMHxkqQCR2WiU2ZOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExL2I0NDQ4 OC0wNTAwLTQ1MzgtOTNiMS0yNjg4ZDM0NmY2YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvYjQ0NDg4 LTA1MDAtNDUzOC05M2IxLTI2ODhkMzQ2ZjZhYi8xL3ItUHg3UnRKeGJwOHdmR1Nw QUpIWmFKVFprNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQCuYXoAwQAwbKAAwQAwbKJAwQAwbKLAwQAwbKO MBQEAgACMA4DBQAqDmAAAwUAKg+SwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD QGEwDQYJKoZIhvcNAQELBQADggEBAF+SLFmNv3FnxuJ049G0ajXAe4JaOJx+byc8 zK8G3qRbbAsMzHZAYbM5HL+N7DtGLGQYAIRSRFJNjWi5Ti+i/VzIQa7LwbwFuvIM vFAaOI1W3k/z0M8OHJdm9EAWjNaP/eRIvfusAGwWivSyuXbOeJ9K7ZWn7N/st4Jo 4MzL0D2UyxUDB5RxbRzG+X8ujh1o7SXBKdNwthDbCzdO4UGzcTbAlZYwTm4TegLd eEFKYCfCSt/EhJJDkruQUtE+ieerSuE36sVUKXJITPi1b6nkHuE6xk4alJbnCdRq +ol0ESrkUUY7orZwvXOmlaa1xSNwdS15WO7s1wVxuSB8k8ihPRM= -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:09 2026 by rpki-client