This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer File: PLHMl1whjxZoawhB7fwwnMp0ans.cer (raw, json) Hash identifier: qE2DDBAUz6h87kMW2BXNOi92y7EmLkUsrdQOeHER6jc= Subject key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B955EFB0F4FA13FF3C49F4BFF4F62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198984 IP: 45.155.148.0/22 IP: 91.239.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:95:5e:fb:0f:4f:a1:3f:f3:c4:9f:4b:ff:4f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:56:91:95:49:da:ec:a3:00:1b:bd:e9:a5: 93:17:aa:dd:cf:6b:32:58:6f:11:82:5d:0c:97:c7: 4d:28:d5:b3:42:0e:bd:98:5f:5f:58:9e:9d:d6:fe: 0b:48:85:92:2b:d5:e3:02:4d:d0:30:01:fd:bf:6c: 95:fc:a5:b8:0a:53:1c:c5:6c:81:db:f7:5b:70:7e: e6:5d:ed:bc:9c:fc:a9:af:4a:7a:29:df:3e:57:d9: fa:c6:d2:84:63:92:24:3e:41:c4:e9:ea:b6:1e:bf: c2:79:88:9c:af:5c:0c:75:fb:31:a3:e9:5b:9d:81: 91:a8:3b:2e:be:72:b5:09:31:09:fd:b6:24:8c:29: 56:d4:ac:aa:b3:d0:eb:c7:dc:5f:5d:41:5e:3f:97: 1d:ce:0c:6a:c4:56:39:47:5b:6c:4b:10:6d:fb:27: ad:de:0d:24:68:8e:f2:b9:dd:55:ae:1c:77:80:7f: 58:4f:69:bf:92:9e:f4:b9:1f:99:cc:fe:df:80:15: 38:96:1f:a5:86:f8:85:d8:96:0c:6c:6c:61:fc:fd: 5f:50:6a:0e:f3:aa:98:98:ce:3f:f8:8a:8b:46:86: 72:c2:cf:bc:a1:76:33:50:30:ea:54:82:13:65:f2: f7:7b:0a:7a:85:6b:ad:42:fd:91:39:35:30:8d:d5: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.148.0/22 91.239.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198984 Signature Algorithm: sha256WithRSAEncryption 23:01:13:04:b4:e5:2c:e6:c3:d3:24:cc:3a:cf:a0:87:97:c9: d9:54:60:78:32:52:d7:5f:79:dd:52:3b:31:86:6b:0e:15:b0: 52:14:d0:26:a5:96:f3:b4:a5:d1:ff:a0:3a:10:c0:1d:64:05: 72:86:3d:69:cc:b2:f9:13:f1:0c:cc:cf:d3:b3:75:70:d0:bd: 43:99:e5:6d:79:bf:bd:8a:04:87:36:3d:48:1b:c7:48:0e:5e: d5:0e:48:4b:2f:8b:64:41:1b:93:e3:82:53:0e:06:b0:19:c1: 5b:da:ba:60:e5:d6:e9:ad:d7:57:14:93:94:5e:fb:c3:ad:a0: 70:15:5e:56:79:c1:71:b6:6e:f4:98:7c:5a:25:b4:20:8a:63: 22:07:d3:ca:80:93:fe:27:0f:4f:da:6d:60:0b:31:eb:f3:d5: db:57:75:3c:1c:34:db:15:49:1d:18:3f:59:ae:19:75:2a:99: 6b:2e:57:49:7d:97:cb:74:30:54:dc:57:fc:d1:22:3c:43:b0: d1:8c:6f:44:3f:37:6f:7d:dd:e5:cb:ea:51:83:4f:62:5d:0b: 18:7a:43:f9:92:9f:d6:cd:7c:aa:d4:c3:1e:c4:98:6b:a7:40: 72:86:8c:43:ef:26:47:f1:26:2a:fc:40:e5:95:41:b3:94:ec: 21:5a:7b:db -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6W5Ve+w9PoT/zxJ9L/09iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2IxY2M5NzVjMjE4ZjE2Njg2YjA4NDFlZGZjMzA5Y2NhNzQ2YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWpWkZVJ2uyjABu96aWTF6rdz2sy WG8Rgl0Ml8dNKNWzQg69mF9fWJ6d1v4LSIWSK9XjAk3QMAH9v2yV/KW4ClMcxWyB 2/dbcH7mXe28nPypr0p6Kd8+V9n6xtKEY5IkPkHE6eq2Hr/CeYicr1wMdfsxo+lb nYGRqDsuvnK1CTEJ/bYkjClW1Kyqs9Drx9xfXUFeP5cdzgxqxFY5R1tsSxBt+yet 3g0kaI7yud1Vrhx3gH9YT2m/kp70uR+ZzP7fgBU4lh+lhviF2JYMbGxh/P1fUGoO 86qYmM4/+IqLRoZyws+8oXYzUDDqVIITZfL3ewp6hWutQv2ROTUwjdUerwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFDyxzJdcIY8WaGsIQe38MJzKdGp7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzIzOWE4 ZS05MGQ4LTQzYmQtOTBlZC0zZTM0ZDAwNzMyYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMjM5YThl LTkwZDgtNDNiZC05MGVkLTNlMzRkMDA3MzJhMy8xL1BMSE1sMXdoanhab2F3aEI3 Znd3bk1wMGFucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLZuUAwQCW++YMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMJSDANBgkqhkiG9w0BAQsFAAOCAQEAIwETBLTlLObD0yTMOs+gh5fJ 2VRgeDJS11953VI7MYZrDhWwUhTQJqWW87Sl0f+gOhDAHWQFcoY9acyy+RPxDMzP 07N1cNC9Q5nlbXm/vYoEhzY9SBvHSA5e1Q5ISy+LZEEbk+OCUw4GsBnBW9q6YOXW 6a3XVxSTlF77w62gcBVeVnnBcbZu9Jh8WiW0IIpjIgfTyoCT/icPT9ptYAsx6/PV 21d1PBw02xVJHRg/Wa4ZdSqZay5XSX2Xy3QwVNxX/NEiPEOw0YxvRD83b33d5cvq UYNPYl0LGHpD+ZKf1s18qtTDHsSYa6dAcoaMQ+8mR/EmKvxA5ZVBs5TsIVp72w== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:54 2026 by rpki-client