This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer File: PZQks8jnL3RqWesZlFWqNkajpFc.cer (raw, json) Hash identifier: 3MXSZsT4Y24MXyb/2pypr8/+tsOsij7A1cdvuAXxe6Y= Subject key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B33C35D546FADCBF5B97C997F9024 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202283 IP: 185.232.220.0/22 IP: 193.109.238.0/24 IP: 2a0c:d100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:33:c3:5d:54:6f:ad:cb:f5:b9:7c:99:7f:90:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:9d:f1:08:d0:3c:a1:4c:80:c7:e7:fc:65: a6:1e:62:67:3a:50:ef:a2:fb:69:c9:41:ac:f8:b4: c0:b9:35:2d:f5:84:c1:9c:09:24:2f:9d:76:84:40: bf:e8:87:dd:27:13:80:d9:9f:60:3c:ff:ca:fb:eb: 56:c3:a0:53:ea:e8:e5:24:83:fc:1e:0f:5c:df:f2: 65:a6:54:63:78:13:fc:a0:ca:4f:75:d4:bb:5e:80: 9b:57:7c:c1:09:31:d5:12:0a:8f:d6:7f:ae:80:6d: 98:15:9f:15:95:b2:d5:1e:7c:bc:b7:39:cc:a4:2f: 08:31:42:02:21:52:67:00:63:3a:ef:35:9e:37:e9: 66:0d:28:ca:ad:26:ee:b9:61:c5:7b:64:c1:15:8f: ca:33:40:7b:4c:5e:59:45:71:60:03:33:1c:54:48: 17:56:85:a4:aa:66:88:bc:24:a4:71:8d:be:2d:75: 17:cf:af:25:cb:42:1c:9a:37:e1:3f:41:eb:84:0f: 29:14:77:17:25:a6:ba:a8:92:dc:0d:09:a5:70:99: 2a:a1:98:f6:90:5f:9a:69:60:4c:c7:4a:b7:9c:4e: e9:4a:1e:15:d5:bd:05:62:e1:5b:c1:f5:9c:7a:01: e8:eb:c4:61:46:b3:f9:0b:ca:df:4c:8f:c4:a7:fc: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.220.0/22 193.109.238.0/24 IPv6: 2a0c:d100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202283 Signature Algorithm: sha256WithRSAEncryption 0b:6f:3d:4c:a4:f9:e8:25:8b:b4:4d:94:21:2b:ee:85:6d:cf: 1d:98:fd:d5:ac:a8:2b:23:98:c2:40:fa:fe:6f:68:12:d2:15: 07:d8:53:03:90:1e:1a:52:68:3e:b1:db:7e:2a:6f:52:ca:9b: 90:84:29:85:2f:ff:14:37:89:24:74:61:4b:37:7a:3c:b9:71: f1:22:3f:04:7e:c7:ad:e5:24:46:61:20:77:2d:00:fb:c9:d2: cc:2e:3e:92:93:87:ae:d0:8e:f9:4f:e4:65:13:ba:7f:45:c2: 7d:99:93:43:50:0a:62:07:ad:a4:67:04:33:7b:1a:cc:26:88: 05:ab:83:e1:d3:7f:bd:62:db:11:94:f5:91:4c:7d:1d:33:f0: 84:52:a6:31:f9:70:2b:dd:74:a4:a8:08:be:9c:52:a2:0f:f7: 86:93:bc:d1:1b:f0:5b:c8:8d:17:ed:5a:a1:f8:d3:ca:b6:5d: c5:82:5c:62:c3:a8:ba:19:a8:76:37:f4:b6:10:57:60:e6:e7: c3:3e:b7:62:11:d3:c1:02:66:1c:e3:97:61:de:b8:1b:54:5b: 2e:c0:30:8d:f4:da:d4:c0:57:99:0c:70:4a:dc:a5:ac:69:4e: be:85:17:d7:b2:17:63:8c:00:74:f5:79:cc:1f:5e:98:ef:13: 00:a1:4e:c7 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6WzPDXVRvrcv1uXyZf5AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk0MjRiM2M4ZTcyZjc0NmE1OWViMTk5NDU1YWEzNjQ2YTNhNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYid8QjQPKFMgMfn/GWmHmJnOlDv ovtpyUGs+LTAuTUt9YTBnAkkL512hEC/6IfdJxOA2Z9gPP/K++tWw6BT6ujlJIP8 Hg9c3/JlplRjeBP8oMpPddS7XoCbV3zBCTHVEgqP1n+ugG2YFZ8VlbLVHny8tznM pC8IMUICIVJnAGM67zWeN+lmDSjKrSbuuWHFe2TBFY/KM0B7TF5ZRXFgAzMcVEgX VoWkqmaIvCSkcY2+LXUXz68ly0IcmjfhP0HrhA8pFHcXJaa6qJLcDQmlcJkqoZj2 kF+aaWBMx0q3nE7pSh4V1b0FYuFbwfWcegHo68RhRrP5C8rfTI/Ep/yTkwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFD2UJLPI5y90alnrGZRVqjZGo6RXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2RmMjk0 Ny1jZDA1LTQ0MDUtOTQ5YS02YTgwMzNkY2JlMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZGYyOTQ3 LWNkMDUtNDQwNS05NDlhLTZhODAzM2RjYmUxYy8xL1BaUWtzOGpuTDNScVdlc1ps RldxTmthanBGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuejcAwQAwW3uMA0EAgACMAcDBQMqDNEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWKzANBgkqhkiG9w0BAQsFAAOCAQEAC289 TKT56CWLtE2UISvuhW3PHZj91ayoKyOYwkD6/m9oEtIVB9hTA5AeGlJoPrHbfipv UsqbkIQphS//FDeJJHRhSzd6PLlx8SI/BH7HreUkRmEgdy0A+8nSzC4+kpOHrtCO +U/kZRO6f0XCfZmTQ1AKYgetpGcEM3sazCaIBauD4dN/vWLbEZT1kUx9HTPwhFKm MflwK910pKgIvpxSog/3hpO80RvwW8iNF+1aofjTyrZdxYJcYsOouhmodjf0thBX YObnwz63YhHTwQJmHOOXYd64G1RbLsAwjfTa1MBXmQxwStylrGlOvoUX17IXY4wA dPV5zB9emO8TAKFOxw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:45 2026 by rpki-client