This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer (raw, json) Hash identifier: sDDqjTKe8WJR46YCVJzfakwkMspDcyrOOTm4ZLtShsc= Subject key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8573961545971F6FE92C80B5FADCE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215666 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:73:96:15:45:97:1f:6f:e9:2c:80:b5:fa:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0be4ae38735554cd11810a9c7d203019040198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:cb:64:0a:e4:24:f9:a9:27:3c:93:34:9f: 55:e9:f3:b9:ee:10:2f:ce:10:ee:90:54:2b:64:66: bd:0a:68:8e:27:bb:cf:18:e4:25:f6:6c:1e:7f:84: ce:0e:45:ee:95:fa:e4:2f:b7:0f:e4:d6:84:94:f7: aa:b9:4c:64:68:3e:eb:a4:45:41:18:0f:cc:31:e0: fa:cc:27:58:72:6d:51:1a:dc:65:6f:3a:62:8c:4d: bb:61:51:98:34:31:48:ae:d7:85:00:d4:e1:68:8b: f2:81:de:85:d3:c6:18:86:84:ff:42:22:a1:dc:cd: 54:f8:7d:6d:50:95:38:5a:b1:a1:0c:b4:84:7e:15: ee:22:25:a5:c9:ba:0e:53:27:7e:c6:91:25:65:17: 8e:3c:1e:a1:ea:60:09:ad:1f:d5:ba:d5:8b:e6:9b: 9d:b8:82:cc:d8:ef:e9:11:4d:cf:53:bf:ac:a4:03: 65:33:c4:f6:37:76:a9:56:4d:19:48:9d:da:d4:88: fc:62:90:8c:75:e4:1f:80:30:81:82:89:83:17:73: 8c:55:b1:c3:23:95:06:c5:12:4f:89:75:fc:e8:d7: e7:28:6f:fb:10:66:5a:9d:12:c9:45:b4:c1:9c:c0: 1d:d0:c9:a9:ee:b8:9b:fb:2c:77:f8:b3:b3:ce:ed: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215666 Signature Algorithm: sha256WithRSAEncryption a2:8c:63:87:d7:2d:cd:02:95:ef:38:1a:0f:0b:65:16:d8:20: b3:71:0d:47:f0:35:81:6b:11:21:cf:cc:a9:fc:48:00:e0:01: 16:db:42:39:ed:30:32:1a:b9:7c:1c:62:46:bb:ba:78:55:10: e2:b1:81:39:45:05:18:fd:05:ad:0b:21:b1:ad:72:4c:3c:1c: a1:3d:cd:37:11:89:3d:2a:86:66:af:37:23:ce:85:4c:19:93: 33:0e:d2:5c:96:0e:cd:fc:b5:91:25:49:67:ac:4e:2f:f9:cc: ea:b8:e3:4d:8a:ac:93:8d:e1:a4:bf:3d:d1:bb:97:d3:a9:f0: d8:de:dd:3a:b6:92:93:95:b0:93:47:d8:ed:7d:aa:0b:cd:3b: a5:dd:88:ee:84:91:36:3c:dc:a9:c5:96:b9:e0:d1:8b:c8:b6: 5b:0e:d5:7e:83:ee:8e:1e:98:ce:70:d1:67:c7:ef:2b:d7:f7: 48:41:a5:bd:27:1f:42:08:24:fa:2d:ec:b2:7f:84:8b:b0:43: d9:7a:27:71:0a:75:df:e6:15:2a:67:50:82:27:3a:07:0d:33: 52:67:7c:53:67:1c:52:af:99:3c:6e:73:45:3a:dc:1e:60:77: 5b:e1:d8:47:d7:3d:2e:b3:b7:61:e2:d5:89:66:a0:2f:0b:ea: 54:bf:ba:d9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/hXOWFUWXH2/pLIC1+tzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDBiZTRhZTM4NzM1NTU0Y2QxMTgxMGE5YzdkMjAzMDE5MDQwMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWDLZArkJPmpJzyTNJ9V6fO57hAv zhDukFQrZGa9CmiOJ7vPGOQl9mwef4TODkXulfrkL7cP5NaElPequUxkaD7rpEVB GA/MMeD6zCdYcm1RGtxlbzpijE27YVGYNDFIrteFANThaIvygd6F08YYhoT/QiKh 3M1U+H1tUJU4WrGhDLSEfhXuIiWlyboOUyd+xpElZReOPB6h6mAJrR/VutWL5pud uILM2O/pEU3PU7+spANlM8T2N3apVk0ZSJ3a1Ij8YpCMdeQfgDCBgomDF3OMVbHD I5UGxRJPiXX86NfnKG/7EGZanRLJRbTBnMAd0Mmp7rib+yx3+LOzzu2b+QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFD0L5K44c1VUzRGBCpx9IDAZBAGYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2Q0MDRh MC03ODBkLTQzYzgtYjcyMS1mZDJlYjU0OTdiNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZDQwNGEw LTc4MGQtNDNjOC1iNzIxLWZkMmViNTQ5N2I1Yy8xL1BRdmtyamh6VlZUTkVZRUtu SDBnTUJrRUFaZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKcjANBgkqhkiG9w0BAQsFAAOCAQEAooxjh9ctzQKV 7zgaDwtlFtggs3ENR/A1gWsRIc/MqfxIAOABFttCOe0wMhq5fBxiRru6eFUQ4rGB OUUFGP0FrQshsa1yTDwcoT3NNxGJPSqGZq83I86FTBmTMw7SXJYOzfy1kSVJZ6xO L/nM6rjjTYqsk43hpL890buX06nw2N7dOraSk5Wwk0fY7X2qC807pd2I7oSRNjzc qcWWueDRi8i2Ww7VfoPujh6YznDRZ8fvK9f3SEGlvScfQggk+i3ssn+Ei7BD2Xon cQp13+YVKmdQgic6Bw0zUmd8U2ccUq+ZPG5zRTrcHmB3W+HYR9c9LrO3YeLViWag LwvqVL+62Q== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:49 2026 by rpki-client