This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer (raw, json) Hash identifier: XKTcyLTkH7hl7zL91TGZp2OhZpifZZA2ZZNR+Yq9xlY= Subject key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBCD1CAABA91A357F137EF8C1E004A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8604 AS: 47554 AS: 57625 IP: 185.83.180.0/24 IP: 185.83.182.0/24 IP: 185.170.236.0/22 IP: 2a05:9d80::/29 IP: 2a0b:900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cd:1c:aa:ba:91:a3:57:f1:37:ef:8c:1e:00:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:67:08:c9:15:77:1c:02:99:18:af:2c:52: c9:9f:8e:1f:17:a1:7b:ca:4e:66:0a:1c:39:f5:48: d4:68:3a:18:90:f8:83:6a:6e:8f:50:11:d6:6d:34: 9d:af:aa:0d:a5:ef:99:d7:59:be:13:33:db:33:d4: 0e:80:fe:a1:2c:4f:ec:97:0b:40:17:66:90:24:2d: 66:dc:ff:5d:b9:86:ae:5b:43:4d:f1:92:1c:ed:48: 4c:15:0f:da:93:c7:25:aa:d4:f2:de:8b:0e:28:cf: 50:d5:05:73:6f:ec:50:35:57:57:5d:dc:5f:80:df: 05:13:fc:c8:49:10:d6:90:b8:ec:8c:24:63:ae:33: b9:cc:20:7f:3d:4e:1d:07:69:ae:78:10:d9:13:91: 13:c5:8d:bc:7c:69:78:f0:79:3e:fa:4f:2c:e6:92: 4f:6b:39:61:81:94:f8:82:ec:b9:e9:1c:11:09:ba: d1:9e:69:3a:7d:b8:f6:d9:86:2f:47:69:4a:06:5c: 09:07:25:52:4c:15:86:51:2c:df:79:0d:d8:a8:aa: 9d:ed:dc:d7:76:8e:73:8d:8e:36:63:c2:35:27:49: b7:7f:da:4d:4c:de:da:a5:60:7c:d3:fd:b6:ce:95: c2:d1:7e:13:c5:29:f7:01:aa:aa:ff:37:36:38:7e: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.180.0/24 185.83.182.0/24 185.170.236.0/22 IPv6: 2a05:9d80::/29 2a0b:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8604 47554 57625 Signature Algorithm: sha256WithRSAEncryption aa:9f:93:85:9e:41:6b:0f:b1:53:1a:73:12:51:bf:16:1d:60: d0:e3:1e:b4:dc:04:73:e3:54:0b:44:27:81:df:7a:fb:f9:48: a0:9d:d3:94:05:5a:d7:7d:7d:28:52:2b:b2:31:31:4b:e3:d9: 01:17:95:4e:bf:ef:b0:5d:aa:0f:de:a3:47:7c:2a:d9:08:cc: a3:2a:fd:7a:dc:51:c7:24:47:9c:92:fa:8b:d8:a2:b8:43:3c: ab:9b:b2:73:09:ed:dd:51:be:2e:ec:4d:3a:99:60:22:ae:ed: b7:50:82:f1:6d:78:1a:cd:30:fe:6b:d8:07:db:d2:ef:b7:55: c8:f6:16:c4:ea:85:ab:22:ab:fa:4a:4f:20:67:1a:d5:93:e6: c7:7f:90:d2:ee:44:37:fc:81:1a:a7:c8:d9:ef:07:81:51:02: 80:5b:22:4d:9d:64:e4:e1:69:da:63:5d:ed:73:02:d5:71:9b: f1:d1:a1:2b:db:8e:0d:15:5d:84:32:e7:41:b5:70:db:95:32: 68:60:ff:e1:23:57:45:76:65:6c:30:55:10:6a:91:8b:92:33: 50:10:84:2b:3a:e7:7e:fa:c2:54:1b:96:00:cb:44:81:35:d2: 5c:72:db:e0:5a:b8:1c:08:2e:7a:a5:62:8f:c1:e0:ff:28:38: fe:ce:91:49 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt5680cqrqRo1fxN++MHgBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2QzN2VjMjM3MTliMmYxNDJmNDZlNmYzMzE3NjY0MDM0YWRmNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6JnCMkVdxwCmRivLFLJn44fF6F7 yk5mChw59UjUaDoYkPiDam6PUBHWbTSdr6oNpe+Z11m+EzPbM9QOgP6hLE/slwtA F2aQJC1m3P9duYauW0NN8ZIc7UhMFQ/ak8clqtTy3osOKM9Q1QVzb+xQNVdXXdxf gN8FE/zISRDWkLjsjCRjrjO5zCB/PU4dB2mueBDZE5ETxY28fGl48Hk++k8s5pJP azlhgZT4guy56RwRCbrRnmk6fbj22YYvR2lKBlwJByVSTBWGUSzfeQ3YqKqd7dzX do5zjY42Y8I1J0m3f9pNTN7apWB80/22zpXC0X4TxSn3Aaqq/zc2OH7GTwIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFDzTfsI3GbLxQvRubzMXZkA0rfWYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzNmN2U1 Ni0wOTE2LTQ3YWMtODU4Ni1hOTM4OGYzMWI0N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvM2Y3ZTU2 LTA5MTYtNDdhYy04NTg2LWE5Mzg4ZjMxYjQ3ZS8xL1BOTi13amNac3ZGQzlHNXZN eGRtUURTdDlaZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQAuVO0AwQAuVO2AwQCuarsMBQEAgACMA4DBQMq BZ2AAwUAKgsJADAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgIhnAIDALnCAgMA4Rkw DQYJKoZIhvcNAQELBQADggEBAKqfk4WeQWsPsVMacxJRvxYdYNDjHrTcBHPjVAtE J4Hfevv5SKCd05QFWtd9fShSK7IxMUvj2QEXlU6/77Bdqg/eo0d8KtkIzKMq/Xrc UcckR5yS+ovYorhDPKubsnMJ7d1Rvi7sTTqZYCKu7bdQgvFteBrNMP5r2Afb0u+3 Vcj2FsTqhasiq/pKTyBnGtWT5sd/kNLuRDf8gRqnyNnvB4FRAoBbIk2dZOThadpj Xe1zAtVxm/HRoSvbjg0VXYQy50G1cNuVMmhg/+EjV0V2ZWwwVRBqkYuSM1AQhCs6 5376wlQblgDLRIE10lxy2+BauBwILnqlYo/B4P8oOP7OkUk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:14 2026 by rpki-client