This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer (raw, json) Hash identifier: ALkDVXf643p27DOwL4TlDUQZyq6udPPOEd3A+kYZevU= Subject key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9CC9603D844D42773F36684F2D76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34599 IP: 193.104.76.0/24 IP: 193.104.80.0/24 IP: 193.104.93.0 -- 193.104.94.255 IP: 2a0f:86c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9c:c9:60:3d:84:4d:42:77:3f:36:68:4f:2d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:f6:56:0e:35:18:93:24:51:4a:fb:9a:7c: 7b:53:33:e2:7a:6f:ee:d3:6a:3d:eb:f7:ae:9a:1e: 71:62:dc:bf:ba:b7:94:74:2a:e0:a8:da:40:0a:2a: 75:42:2b:49:57:12:ce:d0:9f:93:84:8f:a0:f6:6f: 89:d9:08:c1:eb:3a:18:17:13:47:c8:93:a3:11:55: c7:45:45:dc:04:04:93:2b:ee:3d:f3:90:9d:c1:ce: da:6f:63:4b:ac:45:f0:01:1a:22:76:4a:61:88:e1: bb:50:03:8e:ca:14:a7:84:8a:e6:c7:5b:70:05:fc: f9:0e:96:44:96:0c:a9:ab:95:00:f9:aa:8a:1c:e6: 87:62:5e:89:93:0c:ad:27:fe:cc:c6:41:e7:e9:7b: bb:2a:00:07:ae:00:ed:7d:6b:03:72:ca:cc:4a:d3: 23:65:a0:ea:b8:e5:84:80:01:ee:e1:0c:f3:fa:29: 97:d3:f6:35:23:b1:1a:ae:ce:ba:36:b0:1d:ca:91: 8b:70:f6:26:56:85:df:bf:3a:b1:52:89:d7:b4:10: ab:29:c1:20:d5:fb:fe:9d:c6:86:c9:76:a7:f1:d7: 84:33:37:2a:05:95:8c:b6:dd:ae:3d:6b:a8:5b:a0: a3:4f:75:46:f3:ad:91:af:f4:b8:b5:2c:35:e0:68: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.76.0/24 193.104.80.0/24 193.104.93.0-193.104.94.255 IPv6: 2a0f:86c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34599 Signature Algorithm: sha256WithRSAEncryption 7d:91:d7:15:cf:97:b3:a7:53:68:cf:4a:f1:c8:4d:7d:d1:85: a8:22:3a:60:7b:39:79:b9:cc:05:2c:6e:df:b4:e5:20:9e:ff: 32:e4:ec:fb:f8:f8:84:73:cb:2b:3b:1d:19:3f:9b:69:32:bb: 03:e1:b8:22:7f:b1:dd:0b:fa:1d:fd:7f:c8:4a:82:ca:f0:bd: a6:f6:d1:b2:38:4f:8c:e3:00:aa:46:2e:31:38:05:83:26:82: c1:07:1c:46:5f:8a:b5:2d:98:dd:0f:21:91:c4:42:b3:03:2d: f9:75:54:b0:c7:e5:c7:8f:2c:5a:22:2a:d7:9c:56:8b:50:44: 21:67:0c:82:ea:da:d0:ac:22:2d:f2:f2:91:7f:a0:8b:3a:18: 22:9c:cc:1a:ff:5f:fb:82:f1:20:ea:67:2f:7e:54:dd:d5:3f: a2:21:32:02:89:a5:77:5d:0d:05:a3:7b:6a:c2:85:4c:38:72: ad:c9:17:1d:dd:b6:f2:3b:c4:60:40:c0:db:7f:9f:a9:c7:1c: ba:93:8e:ea:3d:73:c3:85:3a:10:fa:ed:5b:9a:9d:a8:5a:a5: bb:ee:93:fa:29:56:0d:d0:8f:97:2f:7a:ab:a0:da:d3:ce:67: 77:79:33:a9:29:52:da:d2:be:75:8a:33:06:eb:8a:b5:71:dd: 7e:03:35:02 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt265zJYD2ETUJ3PzZoTy12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzRjZjg4MTc3NDQyYTU0ZjMyMWI4ZmE4MGI2Y2Y1ZGY0MDRjZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B/2Vg41GJMkUUr7mnx7UzPiem/u 02o96/eumh5xYty/ureUdCrgqNpACip1QitJVxLO0J+ThI+g9m+J2QjB6zoYFxNH yJOjEVXHRUXcBASTK+4985Cdwc7ab2NLrEXwARoidkphiOG7UAOOyhSnhIrmx1tw Bfz5DpZElgypq5UA+aqKHOaHYl6JkwytJ/7MxkHn6Xu7KgAHrgDtfWsDcsrMStMj ZaDquOWEgAHu4Qzz+imX0/Y1I7Ears66NrAdypGLcPYmVoXfvzqxUonXtBCrKcEg 1fv+ncaGyXan8deEMzcqBZWMtt2uPWuoW6CjT3VG862Rr/S4tSw14GgG7QIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFDxM+IF3RCpU8yG4+oC2z130BM/2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzNhNDBj MC0yNDc1LTQ4MTQtODU1OS03MDBlMzAyN2Y2MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvM2E0MGMw LTI0NzUtNDgxNC04NTU5LTcwMGUzMDI3ZjYyMy8xL1BFejRnWGRFS2xUekliajZn TGJQWGZRRXpfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAwWhMAwQAwWhQMAwDBADBaF0DBADBaF4wDQQC AAIwBwMFAyoPhsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIcnMA0GCSqGSIb3 DQEBCwUAA4IBAQB9kdcVz5ezp1Noz0rxyE190YWoIjpgezl5ucwFLG7ftOUgnv8y 5Oz7+PiEc8srOx0ZP5tpMrsD4bgif7HdC/od/X/ISoLK8L2m9tGyOE+M4wCqRi4x OAWDJoLBBxxGX4q1LZjdDyGRxEKzAy35dVSwx+XHjyxaIirXnFaLUEQhZwyC6trQ rCIt8vKRf6CLOhginMwa/1/7gvEg6mcvflTd1T+iITICiaV3XQ0Fo3tqwoVMOHKt yRcd3bbyO8RgQMDbf5+pxxy6k47qPXPDhToQ+u1bmp2oWqW77pP6KVYN0I+XL3qr oNrTzmd3eTOpKVLa0r51ijMG64q1cd1+AzUC -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:12 2026 by rpki-client