This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer File: PLeBKLecqRq2JLqDJd_O2U9kRpo.cer (raw, json) Hash identifier: q+9lQew85dL+bhaZl7wTFsuz4zk2AhpetaM6Ycwy+mI= Subject key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8C969EAE79AD859B4A76C5EE87C35 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.71.100.0/22 IP: 2a05:31c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c9:69:ea:e7:9a:d8:59:b4:a7:6c:5e:e8:7c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0f:a3:18:f5:bb:a8:33:6a:db:2f:ec:b7:f4: cc:6b:de:0d:ea:f0:1e:d0:79:59:bb:75:ea:d6:b5: 73:36:84:f2:84:6e:c5:c5:ec:fc:82:09:05:1c:fc: e2:e5:86:00:c2:b0:ac:6c:2e:db:cb:8c:65:bc:6f: 8c:4c:b7:95:55:a4:65:e6:7c:ae:43:e4:e2:27:7e: 93:0e:93:00:fb:f2:19:fa:41:ca:5b:79:aa:9e:9b: d3:f9:ff:89:57:c1:72:68:86:b1:68:8c:33:59:4d: fb:d6:ed:72:8b:6f:9f:b4:cd:39:c8:64:af:43:e2: 1a:9d:87:12:3e:22:8e:1c:ea:1e:b9:55:4c:15:61: 0a:58:a7:9d:9c:07:23:a9:27:cf:92:33:39:b4:61: dd:41:4a:9e:64:2a:ec:4b:fb:a7:93:c9:41:52:3d: 37:f4:34:54:56:03:da:db:e0:bb:c0:23:6a:ce:20: 5c:03:8d:62:c2:44:10:8a:8c:23:22:91:7f:26:7f: 37:b0:58:71:a2:59:52:50:98:69:e5:e1:97:65:20: b1:99:58:11:fb:8d:fc:71:8c:f7:b3:d8:ed:3b:aa: a2:e0:a6:f3:ad:f3:e1:c6:37:db:9c:cf:37:65:8e: ed:58:e3:bd:65:54:ad:36:ad:d0:27:b9:1a:9a:3c: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.100.0/22 IPv6: 2a05:31c0::/29 Signature Algorithm: sha256WithRSAEncryption 4b:99:96:6e:f3:60:c0:f4:2a:4f:46:c9:3f:7e:aa:d3:05:cb: ee:1a:61:f8:99:f3:76:1a:b0:1b:68:f3:45:da:6e:12:9d:22: 37:0d:46:f0:1c:19:38:36:e8:b8:80:9f:18:8d:a1:cd:64:1d: e6:24:79:5c:3c:54:7f:0b:59:a0:66:36:96:39:ad:93:b8:17: 0c:3c:e8:53:b3:f3:e3:92:b2:67:b1:b1:f8:02:04:d1:ec:75: 88:e0:66:3a:96:37:23:d9:b5:5a:6f:b6:21:40:f7:85:f5:60: 7e:a4:21:51:39:3f:ba:5b:9b:d9:3e:67:c0:61:f4:e7:e1:3f: a7:16:94:3c:1d:3b:30:1f:95:72:87:26:dc:82:a6:93:47:80: 1e:98:d4:dc:4a:6b:8b:c4:83:97:37:1c:57:e1:9d:0b:a7:f5: 90:96:51:f3:19:dd:e9:53:05:5b:11:b3:31:b6:7c:57:df:7b: bd:2f:2c:a6:f5:23:43:43:22:b2:25:57:7f:7c:97:e4:3c:ae: ef:c9:da:96:81:0e:2e:64:f2:61:d0:c8:77:ae:e8:5c:25:90: df:c1:dd:9c:cb:15:69:2f:8a:db:5d:73:bb:aa:5a:fa:d1:fd: 50:fe:92:b3:40:be:2d:96:0c:17:e5:ec:49:c2:95:a0:bc:bb: 59:d1:a9:0d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yMlp6uea2Fm0p2xe6Hw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2I3ODEyOGI3OWNhOTFhYjYyNGJhODMyNWRmY2VkOTRmNjQ0NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A+jGPW7qDNq2y/st/TMa94N6vAe 0HlZu3Xq1rVzNoTyhG7Fxez8ggkFHPzi5YYAwrCsbC7by4xlvG+MTLeVVaRl5nyu Q+TiJ36TDpMA+/IZ+kHKW3mqnpvT+f+JV8FyaIaxaIwzWU371u1yi2+ftM05yGSv Q+IanYcSPiKOHOoeuVVMFWEKWKednAcjqSfPkjM5tGHdQUqeZCrsS/unk8lBUj03 9DRUVgPa2+C7wCNqziBcA41iwkQQiowjIpF/Jn83sFhxollSUJhp5eGXZSCxmVgR +438cYz3s9jtO6qi4KbzrfPhxjfbnM83ZY7tWOO9ZVStNq3QJ7kamjyNJQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDy3gSi3nKkatiS6gyXfztlPZEaaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzc3OWQ3 Yy03NTY0LTQ5NjAtOThjMS01ZjZlZTU4ZDljOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNzc5ZDdj LTc1NjQtNDk2MC05OGMxLTVmNmVlNThkOWM4Yi8xL1BMZUJLTGVjcVJxMkpMcURK ZF9PMlU5a1Jwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUdkMA0EAgACMAcDBQMqBTHAMA0GCSqGSIb3 DQEBCwUAA4IBAQBLmZZu82DA9CpPRsk/fqrTBcvuGmH4mfN2GrAbaPNF2m4SnSI3 DUbwHBk4Nui4gJ8YjaHNZB3mJHlcPFR/C1mgZjaWOa2TuBcMPOhTs/PjkrJnsbH4 AgTR7HWI4GY6ljcj2bVab7YhQPeF9WB+pCFROT+6W5vZPmfAYfTn4T+nFpQ8HTsw H5VyhybcgqaTR4AemNTcSmuLxIOXNxxX4Z0Lp/WQllHzGd3pUwVbEbMxtnxX33u9 Lyym9SNDQyKyJVd/fJfkPK7vydqWgQ4uZPJh0Mh3ruhcJZDfwd2cyxVpL4rbXXO7 qlr60f1Q/pKzQL4tlgwX5exJwpWgvLtZ0akN -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:33 2026 by rpki-client