This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer File: PUM0D60kZGXejmFNA5VjppllfY0.cer (raw, json) Hash identifier: En156ZAT+fr/lAtxf0QmYdL/rav1Fb9EGmbptStukdY= Subject key identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B0E0B74E226477F2985124380A437 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:e9c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0e:0b:74:e2:26:47:7f:29:85:12:43:80:a4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d43340fad246465de8e614d039563a699657d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:4f:c7:db:9e:c0:ef:85:e8:c8:e6:50:6a: 00:0d:d5:de:ae:2b:16:39:df:6c:a8:ba:07:bd:c3: 76:cc:40:83:d1:05:25:56:c5:28:56:be:af:ef:4e: 86:18:25:8c:b1:95:c3:a2:85:94:3b:de:5b:a2:a9: 95:b3:f3:e3:66:f8:ac:36:77:4e:8e:65:3d:ec:ae: 0f:b5:93:f3:1d:08:2d:d1:1c:ac:c2:bc:67:dd:ef: e6:4e:46:30:ed:07:90:76:b6:0e:9a:d6:d6:11:9d: 36:4d:79:3e:96:23:9e:7d:8f:df:74:89:20:57:8a: 04:df:10:c2:9d:72:a6:19:5c:7e:b8:60:16:50:1f: 92:14:4a:49:84:92:f2:f9:85:18:3a:49:3d:57:1f: 82:2a:6f:87:2b:24:17:da:cb:7d:b2:e3:87:a0:ed: 74:c7:c7:b2:40:82:e4:94:2c:79:9b:a6:b5:06:f0: 01:ff:4c:52:fd:b7:3a:4f:d5:09:bd:d8:27:6a:6d: 43:2c:9f:76:5a:c0:6b:f8:ec:a1:55:41:6d:33:86: 5b:28:8d:bb:7b:3a:e7:11:c1:bb:35:56:5e:9c:ce: 58:82:ac:37:90:d8:e5:08:a9:84:9a:47:e3:9d:0d: a3:2d:31:e4:c9:7d:63:cd:98:d1:5b:5a:df:98:76: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e9c::/48 Signature Algorithm: sha256WithRSAEncryption 07:3b:4e:08:66:70:c5:1e:06:9e:5b:7d:aa:b0:8b:0c:3e:d4: d5:c0:fe:c8:a4:33:21:27:ae:4c:fa:9b:f3:30:a4:bb:d9:90: 3a:9d:35:8f:15:ce:45:70:9d:1f:9f:cd:6c:b7:8e:35:7a:df: 3a:ec:db:30:ec:c3:d2:19:b1:53:a0:aa:f2:96:b7:06:9c:34: 34:d6:19:34:a8:ca:20:97:0a:4d:9e:80:68:bd:6d:b9:01:ff: 2e:ef:ef:c5:fa:fa:03:43:a6:3e:13:5a:51:83:1f:23:d2:af: b9:96:9d:6d:7a:65:c3:df:a7:5c:82:bc:99:3e:0f:74:f5:6b: 9b:73:23:d2:9e:5b:15:8f:a6:09:1c:3d:04:c9:c4:2e:80:49: 62:7c:8a:79:3c:2d:57:76:48:00:cc:4d:ef:57:9e:58:22:86: e9:80:65:c4:2e:e4:2a:7d:35:16:55:55:e3:31:a8:19:b4:3d: af:83:88:37:4e:59:41:66:d7:3f:fc:58:9e:fe:09:2d:c1:7c: 5a:0b:e5:01:fd:b4:ae:c7:ff:bd:22:49:c6:eb:72:0a:6b:cd: 7c:a9:f6:bc:f3:e9:69:43:06:5c:9d:c3:cc:ff:7d:61:4b:21: 7d:fd:92:e4:2a:b2:5e:7d:37:9d:ac:b2:9f:43:49:5d:b8:43: 0e:07:84:2e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt6Ww4LdOImR38phRJDgKQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQzMzQwZmFkMjQ2NDY1ZGU4ZTYxNGQwMzk1NjNhNjk5NjU3ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiJPx9uewO+F6MjmUGoADdXerisW Od9sqLoHvcN2zECD0QUlVsUoVr6v706GGCWMsZXDooWUO95boqmVs/PjZvisNndO jmU97K4PtZPzHQgt0Ryswrxn3e/mTkYw7QeQdrYOmtbWEZ02TXk+liOefY/fdIkg V4oE3xDCnXKmGVx+uGAWUB+SFEpJhJLy+YUYOkk9Vx+CKm+HKyQX2st9suOHoO10 x8eyQILklCx5m6a1BvAB/0xS/bc6T9UJvdgnam1DLJ92WsBr+OyhVUFtM4ZbKI27 ezrnEcG7NVZenM5Ygqw3kNjlCKmEmkfjnQ2jLTHkyX1jzZjRW1rfmHZfqwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFD1DNA+tJGRl3o5hTQOVY6aZZX2NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzZjZTky Mi1jZGNlLTRjN2EtYjM0Ni1hNDM3Y2U4OTI4NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNmNlOTIy LWNkY2UtNGM3YS1iMzQ2LWE0MzdjZTg5Mjg0MS8xL1BVTTBENjBrWkdYZWptRk5B NVZqcHBsbGZZMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA6cMA0GCSqGSIb3DQEBCwUAA4IBAQAH O04IZnDFHgaeW32qsIsMPtTVwP7IpDMhJ65M+pvzMKS72ZA6nTWPFc5FcJ0fn81s t441et867Nsw7MPSGbFToKrylrcGnDQ01hk0qMoglwpNnoBovW25Af8u7+/F+voD Q6Y+E1pRgx8j0q+5lp1temXD36dcgryZPg909WubcyPSnlsVj6YJHD0EycQugEli fIp5PC1XdkgAzE3vV55YIobpgGXELuQqfTUWVVXjMagZtD2vg4g3TllBZtc//Fie /gktwXxaC+UB/bSux/+9IknG63IKa818qfa88+lpQwZcncPM/31hSyF9/ZLkKrJe fTedrLKfQ0lduEMOB4Qu -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:15 2026 by rpki-client