This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer (raw, json) Hash identifier: rpNJJ7xGjdmzfOS7GFvRRSSKwrTy8lsab2M+BCdxMjw= Subject key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CA1935C787B702D6F380B04C126D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9081 IP: 212.102.128.0/19 IP: 2a0b:3b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a1:93:5c:78:7b:70:2d:6f:38:0b:04:c1:26:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:95:bd:f9:9d:d8:a5:40:f0:4a:54:89:a9: 36:31:c6:35:10:fa:a7:ac:02:64:ef:18:56:f0:e9: ec:87:b2:f6:de:4a:43:51:c0:a9:5b:61:40:19:f7: 87:38:10:19:04:d9:5c:2d:0e:ad:a8:e4:65:d8:a7: 6f:30:a7:69:dd:e0:e9:11:23:2d:59:78:b6:2f:38: 64:9a:34:27:54:cd:80:7d:c9:68:a3:36:e5:31:f0: 16:01:ac:46:63:53:44:d6:f0:ed:ff:38:b7:45:5d: c1:5d:d8:87:27:a7:1c:23:82:6c:51:7c:3d:07:98: 9a:7a:ff:9c:a6:6a:f0:17:b9:e4:93:48:9b:c3:b4: 82:81:c9:bb:14:6f:d4:75:c5:32:83:7c:9a:9c:cd: 92:f4:20:85:f9:e7:a4:44:be:31:46:e2:fb:a0:8f: 60:48:96:ea:a1:5e:4a:4d:70:5e:15:08:02:b7:06: cc:98:f1:3d:dc:76:75:17:d2:f9:ed:e9:59:b0:12: a8:1e:6c:1d:0b:f1:3a:06:71:96:2c:2d:f3:ed:f0: ec:60:9c:83:44:8a:1b:99:e7:8b:39:7d:4d:87:ec: 4f:78:fa:57:91:6b:5f:b9:16:02:f9:3a:3a:f0:ea: a6:99:d1:c1:5d:8d:a8:65:d1:94:cc:58:e7:e6:01: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.128.0/19 IPv6: 2a0b:3b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9081 Signature Algorithm: sha256WithRSAEncryption ab:13:cc:d3:58:1f:e6:0b:77:22:8f:b2:e1:ba:d4:56:a9:d8: b4:96:21:2e:94:7b:a2:d3:db:cc:ad:fd:de:6b:33:df:af:41: 00:7d:1c:40:79:2b:6a:7c:da:8d:3b:44:b2:fd:47:f9:b9:0a: cd:da:a6:38:69:89:aa:66:94:e4:be:1f:79:e7:fe:76:e9:79: 79:35:be:c7:cf:4c:23:0c:4d:af:f1:ab:92:63:6a:da:c0:dc: 7f:96:de:5f:d2:96:61:a9:31:8d:66:78:24:5b:07:9b:49:39: e9:48:db:16:aa:11:c0:1c:80:bd:81:9e:6d:6f:07:4a:2f:5c: 2b:70:9a:6b:1f:1b:59:c7:1c:a2:64:1a:80:17:b7:dd:5c:aa: 88:ab:21:1b:d4:ed:c8:7b:80:16:f9:0e:e6:48:45:79:77:16: 00:84:7b:48:10:c1:e2:66:aa:9c:eb:ce:33:61:60:ee:45:29: d6:62:90:90:eb:b7:dd:ec:07:a8:7f:6a:5d:1d:ac:89:c2:d1: 26:eb:99:26:e1:25:5c:9f:a3:ca:31:d3:f7:42:ec:68:dd:ae: df:1c:41:94:da:9f:b5:44:a0:b3:79:e6:4d:5a:c8:0b:26:b8: a0:a1:fb:90:40:c5:27:01:c7:57:4f:ec:b2:7e:88:f6:a8:8b: 5f:fe:4a:ef -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9XKGTXHh7cC1vOAsEwSbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzIyNjQzYmE2YTBlYWVmNTczMjliZjViZGM5MGIzMWMzODZmOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKVvfmd2KVA8EpUiak2McY1EPqn rAJk7xhW8Onsh7L23kpDUcCpW2FAGfeHOBAZBNlcLQ6tqORl2KdvMKdp3eDpESMt WXi2LzhkmjQnVM2AfcloozblMfAWAaxGY1NE1vDt/zi3RV3BXdiHJ6ccI4JsUXw9 B5iaev+cpmrwF7nkk0ibw7SCgcm7FG/UdcUyg3yanM2S9CCF+eekRL4xRuL7oI9g SJbqoV5KTXBeFQgCtwbMmPE93HZ1F9L57elZsBKoHmwdC/E6BnGWLC3z7fDsYJyD RIobmeeLOX1Nh+xPePpXkWtfuRYC+To68OqmmdHBXY2oZdGUzFjn5gHgZQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFDwiZDumoOrvVzKb9b3JCzHDhvinMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzdhZWQ5 OS1hNDdkLTRlYzctYjRjNS1mYTE0ODZlYTc5OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvN2FlZDk5 LWE0N2QtNGVjNy1iNGM1LWZhMTQ4NmVhNzk4Yy8xL1BDSmtPNmFnNnU5WE1wdjF2 Y2tMTWNPRy1LYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1GaAMA0EAgACMAcDBQMqCzuAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAiN5MA0GCSqGSIb3DQEBCwUAA4IBAQCrE8zTWB/mC3ci j7LhutRWqdi0liEulHui09vMrf3eazPfr0EAfRxAeStqfNqNO0Sy/Uf5uQrN2qY4 aYmqZpTkvh955/526Xl5Nb7Hz0wjDE2v8auSY2rawNx/lt5f0pZhqTGNZngkWweb STnpSNsWqhHAHIC9gZ5tbwdKL1wrcJprHxtZxxyiZBqAF7fdXKqIqyEb1O3Ie4AW +Q7mSEV5dxYAhHtIEMHiZqqc684zYWDuRSnWYpCQ67fd7Aeof2pdHayJwtEm65km 4SVcn6PKMdP3Quxo3a7fHEGU2p+1RKCzeeZNWsgLJrigofuQQMUnAcdXT+yyfoj2 qItf/krv -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:34 2026 by rpki-client