This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer File: PQSDU4c3RT4vV_-1dJnDki6DY20.cer (raw, json) Hash identifier: Hddsvj2tqI6kRbHiIgbyL+9R3lohTsHhGYg5Z6I3llg= Subject key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD8B19AF3E7C807BCB3377C534E37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44592 AS: 213030 IP: 45.156.84.0/22 IP: 91.245.220.0/24 IP: 185.150.24.0/22 IP: 194.62.1.0/24 IP: 194.62.6.0/24 IP: 194.62.29.0/24 IP: 194.62.157.0/24 IP: 2a07:6d40::/29 IP: 2a0f:5480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d8:b1:9a:f3:e7:c8:07:bc:b3:37:7c:53:4e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0483538737453e2f57ffb57499c3922e83636d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:2e:a4:02:82:19:d7:44:93:19:de:81:c9: 91:95:21:eb:dc:ea:73:47:5e:64:46:1c:ca:9b:0a: 80:de:19:87:ec:71:eb:2c:69:98:1c:3c:5c:9b:f5: 72:62:71:ab:66:a3:9b:35:2a:31:ca:59:4d:31:5d: d8:e6:ea:72:8d:57:81:ab:8f:ac:a0:c5:49:f2:95: c8:51:09:4b:76:85:33:6d:62:b9:fe:62:25:dd:64: f8:47:13:07:6d:5a:98:ff:df:17:6c:56:89:5d:f8: 47:91:0b:df:bd:37:94:d4:1e:b1:bb:79:0f:25:d0: 5f:c9:38:0e:f8:f6:57:f7:c0:33:3f:ec:75:d8:76: 44:84:d6:d5:af:69:70:49:32:00:59:de:27:1d:d8: 7c:9a:4e:02:b5:87:8b:87:87:96:9b:ec:8b:f0:a1: 00:a9:85:63:ef:0b:85:84:de:a5:0c:c1:e5:2c:e8: 42:3d:5f:e0:5a:86:83:f3:30:a7:82:5c:c9:69:fc: 08:56:b1:bc:9c:25:cb:04:9e:63:2f:3d:f1:7e:f0: 4c:36:45:7f:66:f1:43:a0:7b:bc:88:89:fe:17:d3: f0:fc:5b:9a:72:7d:3b:a8:3a:bd:8c:4a:cb:50:3f: af:69:ba:d6:23:4d:e9:5e:90:2b:9b:3d:f7:70:cb: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.84.0/22 91.245.220.0/24 185.150.24.0/22 194.62.1.0/24 194.62.6.0/24 194.62.29.0/24 194.62.157.0/24 IPv6: 2a07:6d40::/29 2a0f:5480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44592 213030 Signature Algorithm: sha256WithRSAEncryption a9:80:da:70:72:19:37:84:36:65:22:c8:ed:8c:0b:c8:97:42: 1d:f9:80:6f:a6:1b:c2:8c:f4:d2:8d:61:b4:8f:de:16:ac:9b: 25:47:78:13:47:64:c0:61:1e:a1:c1:28:da:c4:2c:18:91:3f: fb:aa:5c:5b:0a:0c:84:42:4e:6d:8f:fd:0a:46:52:6d:73:42: 7a:8a:8b:fe:0d:4b:87:92:90:45:13:b7:10:f0:59:1b:2d:62: 6f:5b:f8:b6:59:c5:f7:83:72:9b:4e:dc:1e:dd:ab:94:be:42: d8:cc:b1:8a:b1:5f:3f:38:02:75:f1:a6:b4:64:0a:08:64:4d: 50:5f:36:d7:82:c7:8e:cd:e8:58:14:ab:dd:84:7d:50:00:a7: 6d:3c:b9:2e:19:82:ce:d3:a4:62:8c:2b:94:5e:7d:39:04:40: cf:ff:41:e7:aa:ff:72:b3:b4:ce:21:bb:52:91:28:51:ad:1e: 64:66:5c:3a:d1:5d:eb:66:b8:f3:40:a2:4f:e2:e3:01:6d:eb: 88:17:f8:87:6d:6c:fa:85:8c:93:14:79:40:a1:22:e3:2c:46: fb:92:e6:8b:12:2b:71:b7:c5:9b:49:dd:08:fc:db:02:a9:64: 63:0b:c3:dd:0a:18:e0:60:92:12:25:82:39:fe:9f:74:54:7f: a7:1c:89:37 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt87dixmvPnyAe8szd8U043MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDA0ODM1Mzg3Mzc0NTNlMmY1N2ZmYjU3NDk5YzM5MjJlODM2MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW4upAKCGddEkxnegcmRlSHr3Opz R15kRhzKmwqA3hmH7HHrLGmYHDxcm/VyYnGrZqObNSoxyllNMV3Y5upyjVeBq4+s oMVJ8pXIUQlLdoUzbWK5/mIl3WT4RxMHbVqY/98XbFaJXfhHkQvfvTeU1B6xu3kP JdBfyTgO+PZX98AzP+x12HZEhNbVr2lwSTIAWd4nHdh8mk4CtYeLh4eWm+yL8KEA qYVj7wuFhN6lDMHlLOhCPV/gWoaD8zCnglzJafwIVrG8nCXLBJ5jLz3xfvBMNkV/ ZvFDoHu8iIn+F9Pw/Fuacn07qDq9jErLUD+vabrWI03pXpArmz33cMtPqwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2UxMDZj My0wYjFmLTQwMTAtODZmMS02NWE0NmM4ZTQxZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvZTEwNmMz LTBiMWYtNDAxMC04NmYxLTY1YTQ2YzhlNDFlOS8xL1BRU0RVNGMzUlQ0dlZfLTFk Sm5Ea2k2RFkyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQCLZxUAwQAW/XcAwQCuZYYAwQAwj4BAwQAwj4G AwQAwj4dAwQAwj6dMBQEAgACMA4DBQMqB21AAwUDKg9UgDAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMArjACAwNAJjANBgkqhkiG9w0BAQsFAAOCAQEAqYDacHIZN4Q2 ZSLI7YwLyJdCHfmAb6Ybwoz00o1htI/eFqybJUd4E0dkwGEeocEo2sQsGJE/+6pc WwoMhEJObY/9CkZSbXNCeoqL/g1Lh5KQRRO3EPBZGy1ib1v4tlnF94Nym07cHt2r lL5C2MyxirFfPzgCdfGmtGQKCGRNUF8214LHjs3oWBSr3YR9UACnbTy5LhmCztOk YowrlF59OQRAz/9B56r/crO0ziG7UpEoUa0eZGZcOtFd62a480CiT+LjAW3riBf4 h21s+oWMkxR5QKEi4yxG+5LmixIrcbfFm0ndCPzbAqlkYwvD3QoY4GCSEiWCOf6f dFR/pxyJNw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:58 2026 by rpki-client