This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer File: PL3ORcSILIo6JXEQxrHw1JsYKpw.cer (raw, json) Hash identifier: mLPus0kUudoaTzMBmjacs+9AVVAKRmwLpOnC1smxY2I= Subject key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF285ED9A9D1D848FCCE460C83B1C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211533 IP: 185.154.189.0/24 IP: 2a12:dac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f2:85:ed:9a:9d:1d:84:8f:cc:e4:60:c8:3b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:08:e0:dc:e8:6a:6d:ef:23:56:eb:bf:bb: 2f:39:be:20:3b:16:85:00:06:00:fc:0b:29:61:43: d8:6b:5a:59:dd:0e:7a:15:9b:f2:1a:2e:73:77:c6: 11:bb:20:42:b9:4a:03:d7:fa:0e:63:fd:16:3d:16: 51:02:2e:f2:1a:8a:77:aa:c7:e8:01:87:6f:76:69: 70:2c:d3:bb:2b:f2:1f:db:21:4c:a7:7c:a4:5b:37: 77:52:20:16:c5:3e:f3:09:a5:97:41:34:9d:1b:6c: bf:b2:ca:a5:09:10:5e:45:43:49:69:aa:7a:a0:9b: 03:2a:15:f0:99:10:1a:6d:05:51:c1:05:bd:39:27: e0:1a:36:a2:00:2c:ca:87:e0:0e:d5:75:02:03:24: 45:c6:7a:a3:77:45:39:79:43:91:12:66:9a:20:5e: 73:32:5c:35:89:cf:e1:c2:51:4a:dc:68:8b:53:20: 85:a3:3f:01:cd:c0:4c:c6:80:7a:d5:60:4b:08:58: 07:40:5b:29:c8:8b:e1:2d:01:fc:98:79:d1:dc:46: 9d:4b:2a:e9:95:77:c3:9c:f0:2e:56:d6:1e:24:63: 17:b7:3c:6e:8c:67:ec:a4:d8:6a:ff:20:bb:c0:56: a2:14:78:d5:2f:97:ca:a4:70:31:93:70:92:6a:51: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.189.0/24 IPv6: 2a12:dac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211533 Signature Algorithm: sha256WithRSAEncryption 01:e4:d2:e1:f3:1b:fb:34:e4:dc:86:91:76:b5:99:f8:62:63: a4:7e:ba:43:97:8e:47:bc:3c:4d:60:38:41:a5:6b:a0:38:d6: f3:1c:f4:75:28:50:b8:2c:e3:f2:11:b6:85:3a:b1:48:1f:70: 35:04:10:ab:49:44:1c:13:ef:c4:dd:11:87:51:3f:94:62:0d: 67:06:48:12:d7:f6:1d:6e:d5:00:aa:45:fa:17:16:84:44:e6: 3c:2d:b8:0a:b2:3c:58:db:4f:37:fe:32:84:b8:cc:1f:4f:46: 98:e0:6a:ad:24:4f:35:a1:23:e3:1f:67:2a:c6:d7:9d:94:75: 46:b7:e0:4e:74:36:a1:a8:97:04:7c:e7:2b:c6:f8:97:04:46: 23:9c:ec:e5:dc:17:8c:33:04:40:b9:02:9b:13:29:2d:9c:70: 0b:63:3a:3a:66:a2:8d:3f:ff:73:97:c4:7e:29:9d:a5:87:01: 84:c1:c9:e3:72:15:97:d9:f0:c4:a4:5e:f5:2d:f2:8a:65:e8: d8:73:d5:93:9b:5f:37:11:0f:21:14:49:d6:fb:5e:ff:c8:47: eb:68:1e:fc:33:43:10:37:a9:d9:89:f7:cd:61:6a:29:30:5e: ad:c1:88:d2:58:22:6f:b1:01:1a:bc:76:46:58:ad:15:3d:a8: 13:fd:40:c9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WvKF7ZqdHYSPzORgyDscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2JkY2U0NWM0ODgyYzhhM2EyNTcxMTBjNmIxZjBkNDliMTgyYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9UI4Nzoam3vI1brv7svOb4gOxaF AAYA/AspYUPYa1pZ3Q56FZvyGi5zd8YRuyBCuUoD1/oOY/0WPRZRAi7yGop3qsfo AYdvdmlwLNO7K/If2yFMp3ykWzd3UiAWxT7zCaWXQTSdG2y/ssqlCRBeRUNJaap6 oJsDKhXwmRAabQVRwQW9OSfgGjaiACzKh+AO1XUCAyRFxnqjd0U5eUOREmaaIF5z Mlw1ic/hwlFK3GiLUyCFoz8BzcBMxoB61WBLCFgHQFspyIvhLQH8mHnR3EadSyrp lXfDnPAuVtYeJGMXtzxujGfspNhq/yC7wFaiFHjVL5fKpHAxk3CSalErYQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDy9zkXEiCyKOiVxEMax8NSbGCqcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzFjOTQ2 OS0xNmZlLTRlN2ItODgyMy01ZGI0MzliNGNjZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMWM5NDY5 LTE2ZmUtNGU3Yi04ODIzLTVkYjQzOWI0Y2NlZS8xL1BMM09SY1NJTElvNkpYRVF4 ckh3MUpzWUtwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZq9MA0EAgACMAcDBQMqEtrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6TTANBgkqhkiG9w0BAQsFAAOCAQEAAeTS4fMb+zTk 3IaRdrWZ+GJjpH66Q5eOR7w8TWA4QaVroDjW8xz0dShQuCzj8hG2hTqxSB9wNQQQ q0lEHBPvxN0Rh1E/lGINZwZIEtf2HW7VAKpF+hcWhETmPC24CrI8WNtPN/4yhLjM H09GmOBqrSRPNaEj4x9nKsbXnZR1RrfgTnQ2oaiXBHznK8b4lwRGI5zs5dwXjDME QLkCmxMpLZxwC2M6OmaijT//c5fEfimdpYcBhMHJ43IVl9nwxKRe9S3yimXo2HPV k5tfNxEPIRRJ1vte/8hH62ge/DNDEDep2Yn3zWFqKTBercGI0lgib7EBGrx2Rlit FT2oE/1AyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:46 2026 by rpki-client