This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer File: Pls0eWfOpnu2K2nSWazeS4-elBc.cer (raw, json) Hash identifier: ACf0FU9QrTxIuL5wbkwBNGQX6UpinSaN6A1uAxjos8g= Subject key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BFAE879FC11F9ACF86428BCC2CFFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202585 IP: 2001:678:d64::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fa:e8:79:fc:11:f9:ac:f8:64:28:bc:c2:cf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:5b:66:b2:df:d1:32:2f:0d:ce:0c:f4:3a: 46:20:da:d5:a2:a8:86:78:79:de:b8:bd:77:22:39: 67:56:89:7f:1c:d2:a5:cf:5e:b4:14:a7:80:13:b3: 28:b4:5a:18:c1:a3:d2:ca:84:cc:a0:44:13:74:36: a5:00:47:4b:5e:9c:10:8a:68:a2:ef:96:e7:05:f3: f3:49:ad:76:5e:79:de:47:20:e8:70:0a:e6:ba:2a: c6:79:c7:e2:d4:d6:fe:e1:dc:e9:52:01:78:09:79: 64:9f:1a:67:1f:79:b1:8e:5d:0f:27:e4:a5:8b:e5: e3:e0:62:7a:1f:c3:67:8a:94:1a:03:a0:79:b0:bf: 49:d8:97:75:d3:11:3d:0a:25:27:ae:68:f0:ef:89: 57:fb:dc:54:4f:c1:fe:5d:2f:e2:e8:80:ce:20:cc: 98:88:9d:d3:77:83:0d:89:d3:5a:cd:f0:c5:ab:06: 45:c1:4a:69:e6:f9:80:e6:ee:08:93:12:f8:52:ad: ab:39:fe:5b:7a:19:99:60:97:fc:3a:19:11:5c:ce: ce:cc:d2:43:bc:84:c6:69:10:50:3a:cd:12:b7:22: 1c:9b:43:c7:31:08:14:ba:b7:8a:fe:71:7e:27:12: 84:e1:29:e6:e8:38:1a:85:36:69:6f:4c:f7:aa:98: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d64::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202585 Signature Algorithm: sha256WithRSAEncryption 1e:03:bc:9c:89:3a:00:82:b0:31:22:f3:5c:84:71:4e:c2:0b: 38:88:7a:19:c5:4e:e4:09:be:f2:25:f7:67:44:2c:6d:16:d3: 8f:da:63:aa:21:ab:be:f1:44:bc:50:f5:18:9f:14:e1:c8:2f: 6d:f4:ff:da:b6:4e:0e:96:ef:72:99:db:ef:3a:1f:38:1f:95: 46:6b:c4:4a:a6:ed:88:cc:e0:6f:f5:85:5f:ff:67:df:e4:b1: 9c:b2:f5:54:ae:f7:2d:d5:67:4d:44:36:99:a1:46:8f:a4:92: 6f:0a:2a:70:3d:b1:27:dd:59:d3:4a:c1:90:e0:fc:e6:e4:fb: f6:82:9b:4e:81:f6:48:ee:3b:6b:ed:07:59:8e:7e:f0:d3:2c: 68:4c:d7:67:25:2c:8e:e8:04:0b:92:c8:d8:71:d1:72:26:14: 3a:2a:9a:0d:d7:2d:c6:95:51:d8:2f:c1:da:5f:fd:8e:9f:7d: 62:c3:4b:51:8e:d7:cd:a2:9d:17:a9:a8:d1:20:98:3c:9c:fd: 54:4d:60:b1:37:0c:56:93:09:df:aa:19:c9:47:66:ca:5b:74: 78:e6:f8:98:19:7e:6d:1e:3d:6e:2e:b8:6e:08:ad:d2:88:a7: 67:d8:2d:ae:fb:92:98:9d:46:d7:23:c4:aa:09:7a:81:f1:d8: eb:7c:37:ef -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9W/roefwR+az4ZCi8ws/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTViMzQ3OTY3Y2VhNjdiYjYyYjY5ZDI1OWFjZGU0YjhmOWU5NDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT1bZrLf0TIvDc4M9DpGINrVoqiG eHneuL13IjlnVol/HNKlz160FKeAE7MotFoYwaPSyoTMoEQTdDalAEdLXpwQimii 75bnBfPzSa12XnneRyDocArmuirGecfi1Nb+4dzpUgF4CXlknxpnH3mxjl0PJ+Sl i+Xj4GJ6H8NnipQaA6B5sL9J2Jd10xE9CiUnrmjw74lX+9xUT8H+XS/i6IDOIMyY iJ3Td4MNidNazfDFqwZFwUpp5vmA5u4IkxL4Uq2rOf5behmZYJf8OhkRXM7OzNJD vITGaRBQOs0StyIcm0PHMQgUureK/nF+JxKE4Snm6DgahTZpb0z3qpgIrwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFD5bNHlnzqZ7titp0lms3kuPnpQXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzI1NmRh Ny0xOWQwLTQ1OWEtYjUzZS05NGU3ZDA3ZmIzMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjU2ZGE3 LTE5ZDAtNDU5YS1iNTNlLTk0ZTdkMDdmYjMxZC8xL1BsczBlV2ZPcG51MksyblNX YXplUzQtZWxCYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA1kMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMXWTANBgkqhkiG9w0BAQsFAAOCAQEAHgO8nIk6AIKwMSLzXIRxTsILOIh6 GcVO5Am+8iX3Z0QsbRbTj9pjqiGrvvFEvFD1GJ8U4cgvbfT/2rZODpbvcpnb7zof OB+VRmvESqbtiMzgb/WFX/9n3+SxnLL1VK73LdVnTUQ2maFGj6SSbwoqcD2xJ91Z 00rBkOD85uT79oKbToH2SO47a+0HWY5+8NMsaEzXZyUsjugEC5LI2HHRciYUOiqa DdctxpVR2C/B2l/9jp99YsNLUY7XzaKdF6mo0SCYPJz9VE1gsTcMVpMJ36oZyUdm ylt0eOb4mBl+bR49bi64bgit0oinZ9gtrvuSmJ1G1yPEqgl6gfHY63w37w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:47 2026 by rpki-client