This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer File: PBuDiIaW_ERHjGk9bngD6VFiUOY.cer (raw, json) Hash identifier: NdwituHoui8cmoUcH5KR11tKOu5XYXIibWPBYaey1/o= Subject key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36517BDBF4F64352FAA580813F5C80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216442 IP: 46.31.71.0/24 IP: 185.51.172.0/22 IP: 2a01:b2a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:51:7b:db:f4:f6:43:52:fa:a5:80:81:3f:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c1b83888696fc44478c693d6e7803e9516250e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:66:21:23:be:f9:1d:0e:1c:df:a3:07:8c: 03:69:25:00:ae:ea:9e:20:56:1b:5d:aa:f5:8c:0d: c6:0c:f1:c1:7f:7c:e8:f3:d2:cc:cc:33:f6:fc:22: af:27:91:32:00:f1:0a:b9:f1:c4:8c:0d:36:01:6e: 22:4d:6b:1c:72:aa:12:a5:ec:1a:b2:89:5d:05:17: 29:a8:f3:87:1b:69:3f:fd:0c:21:4f:f3:f4:c5:d0: 7f:8d:ba:83:72:f7:cb:cd:42:76:9b:79:39:49:06: 7d:26:d5:f1:9e:7f:7d:5c:56:ca:1d:b3:05:58:e4: 08:66:58:42:16:6f:02:02:bd:74:7f:42:46:f0:e1: a9:85:fd:d0:d9:13:d3:82:ec:12:e9:fa:50:7e:7b: f1:ac:1a:8a:2d:07:1c:09:0d:ef:db:01:bc:32:09: 95:91:f3:e3:e5:fe:08:19:4b:b7:03:1a:a1:f7:7f: 60:5f:cf:f6:d9:ea:4f:8f:4a:de:66:80:41:f1:5f: 6c:81:9f:1e:37:a6:11:f9:ac:0f:09:22:a6:55:f7: 86:9c:d2:33:89:ea:44:ec:9d:f6:ad:0f:f8:6a:cd: 44:2e:e4:9f:6e:4e:68:91:29:29:71:76:fc:07:e6: 58:b4:1c:8d:b5:20:4f:8f:0e:a9:23:55:6c:e4:bf: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.71.0/24 185.51.172.0/22 IPv6: 2a01:b2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216442 Signature Algorithm: sha256WithRSAEncryption a3:8c:05:fc:3e:89:ad:af:0d:5c:c2:bb:ae:99:74:f6:56:1a: 50:7c:3b:79:8e:83:3b:72:10:02:26:c9:0e:70:35:81:6a:2b: 34:18:18:96:38:9f:fd:c4:e5:1d:9f:66:3a:3a:2a:8d:67:7d: 5d:a8:2e:44:fb:b8:2a:e1:82:90:df:8a:72:d2:c1:0f:0c:da: 1e:cb:9f:46:ca:5c:db:cb:f5:60:53:8e:e4:b5:97:9f:49:1a: 2f:a5:21:c3:11:ae:f8:63:92:ff:ab:b2:94:57:2f:1c:d4:3c: 0a:a8:d4:5b:0d:80:9d:d5:2b:04:6b:6a:2d:9b:01:2f:63:f9: e5:df:5a:8d:07:26:10:ba:a4:a9:ab:46:0a:71:b5:a7:dd:f5: 5b:78:32:dc:cc:9e:f2:bc:79:26:7d:44:2c:d4:07:62:5b:16: b8:03:39:6e:d7:2b:19:b9:e0:7c:5c:0b:77:80:9b:aa:d0:e4: 06:87:40:9b:5f:e4:fe:b5:9d:06:d0:bd:09:64:53:34:fc:db: 1c:bd:91:ff:12:3b:75:62:c7:7d:df:aa:de:7d:d3:fa:da:53: bd:c4:5b:a3:8e:69:23:62:dd:11:37:f6:72:e9:d8:7f:9e:79: 28:00:e7:ac:03:8c:4a:cf:91:c7:63:99:c6:16:52:8a:1e:fd: 95:56:9d:be -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NlF72/T2Q1L6pYCBP1yAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzFiODM4ODg2OTZmYzQ0NDc4YzY5M2Q2ZTc4MDNlOTUxNjI1MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycJmISO++R0OHN+jB4wDaSUAruqe IFYbXar1jA3GDPHBf3zo89LMzDP2/CKvJ5EyAPEKufHEjA02AW4iTWsccqoSpewa soldBRcpqPOHG2k//QwhT/P0xdB/jbqDcvfLzUJ2m3k5SQZ9JtXxnn99XFbKHbMF WOQIZlhCFm8CAr10f0JG8OGphf3Q2RPTguwS6fpQfnvxrBqKLQccCQ3v2wG8MgmV kfPj5f4IGUu3Axqh939gX8/22epPj0reZoBB8V9sgZ8eN6YR+awPCSKmVfeGnNIz iepE7J32rQ/4as1ELuSfbk5okSkpcXb8B+ZYtByNtSBPjw6pI1Vs5L8JmwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDwbg4iGlvxER4xpPW54A+lRYlDmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2Q1NTY4 My1mZWMyLTQ3ZmQtYWM2ZS05ZTgyZGE3MzE1Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvZDU1Njgz LWZlYzItNDdmZC1hYzZlLTllODJkYTczMTVjZi8xL1BCdURpSWFXX0VSSGpHazli bmdENlZGaVVPWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALh9HAwQCuTOsMA0EAgACMAcDBQAqAbKgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNejANBgkqhkiG9w0BAQsFAAOCAQEAo4wF /D6Jra8NXMK7rpl09lYaUHw7eY6DO3IQAibJDnA1gWorNBgYljif/cTlHZ9mOjoq jWd9XaguRPu4KuGCkN+KctLBDwzaHsufRspc28v1YFOO5LWXn0kaL6UhwxGu+GOS /6uylFcvHNQ8CqjUWw2AndUrBGtqLZsBL2P55d9ajQcmELqkqatGCnG1p931W3gy 3Mye8rx5Jn1ELNQHYlsWuAM5btcrGbngfFwLd4CbqtDkBodAm1/k/rWdBtC9CWRT NPzbHL2R/xI7dWLHfd+q3n3T+tpTvcRbo45pI2LdETf2cunYf555KADnrAOMSs+R x2OZxhZSih79lVadvg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:52 2026 by rpki-client