This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer File: PplTRJPLqcidveJi-HoVh6Sqmd8.cer (raw, json) Hash identifier: NaIN9dJtTY3bnHLXf3VPzAlLbEKDi+0gJsz3/zTd0eU= Subject key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBFB353A4904CAD631FCCF0568AE76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.36.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:fb:35:3a:49:04:ca:d6:31:fc:cf:05:68:ae:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e99534493cba9c89dbde262f87a1587a4aa99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:05:2c:d0:dc:7b:51:1b:a6:ab:95:20:fa: 37:db:4d:82:57:2e:f5:2f:5c:88:a5:09:22:d0:f2: 01:46:1a:ba:51:47:57:46:d4:3d:11:ba:39:59:7d: 71:7c:4b:22:96:df:81:f2:48:b2:fb:9c:fa:5a:52: 44:dc:45:ec:49:da:56:2b:39:6f:a6:64:bb:34:bd: e2:68:54:03:9b:96:fc:21:df:b6:6b:99:64:48:1a: 94:e1:e6:4a:57:95:0e:b4:11:86:4c:3e:15:b5:62: 78:21:0c:7f:78:b2:f0:28:4b:3b:72:0c:ef:42:44: fe:ba:18:91:58:bf:fc:3f:66:40:ce:84:e1:d4:38: aa:7e:25:e4:f3:a4:88:8e:40:b9:a0:65:d9:aa:bb: 0f:c8:e2:d2:b3:50:24:29:00:6b:70:c8:33:56:ba: 4f:25:9d:b4:cc:86:59:bd:4f:c9:8a:59:e9:3d:82: ed:4e:e2:bd:94:f8:eb:b4:e7:cc:6e:fe:08:ee:a3: 02:2d:8a:aa:a8:f4:3b:69:e3:8d:e6:6f:5f:91:f7: 86:8e:b3:bc:a5:b6:f4:1c:50:0a:5e:ac:56:f2:c0: 2a:71:85:de:17:46:5c:cf:3a:4d:41:22:bf:fa:c4: d8:47:d0:b4:a6:63:04:8a:10:11:26:75:1b:7d:e4: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.60.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:4f:c6:8f:e8:a0:0f:ec:80:e8:23:b9:17:2e:d9:ad:32:85: 5a:01:33:f2:61:f0:b3:cd:58:ea:d1:f7:e1:ce:b8:e6:48:0f: 3b:7a:7d:78:43:5c:0b:65:9c:f3:d2:22:23:48:38:d0:ce:e3: 1d:3b:6b:21:4b:c5:d7:61:c4:5d:66:b9:8c:cb:52:4d:11:98: 00:44:37:92:f6:5f:4c:ad:69:e1:8d:00:5f:ee:ea:59:57:72: 7b:bc:3b:b5:de:3d:39:d5:c2:14:59:d6:ea:ca:c3:71:74:85: 1d:49:fc:75:31:36:ca:76:3c:4e:fc:00:fb:12:9e:fd:8d:fc: c3:49:82:cf:55:94:20:6b:70:5c:40:15:7a:d1:36:3f:79:43: ab:34:9e:c9:67:4c:5e:7c:2d:98:68:31:51:29:0e:b5:68:43: 89:2e:e9:70:c4:98:11:32:06:d8:75:d5:52:cf:f5:55:bf:5d: 22:27:f1:8d:c5:d5:ba:5f:e3:2d:a7:b7:b2:84:49:e3:0e:03: d3:be:8c:5c:72:94:d9:88:de:14:94:25:ed:b9:19:8c:01:15: 57:e5:0d:21:50:b4:ff:54:e4:50:43:aa:49:b1:15:a8:98:1a: 37:49:57:81:c3:3e:05:45:3a:12:9d:22:7c:74:a4:13:1f:4e: da:e5:be:95 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt56/s1OkkEytYx/M8FaK52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTk5NTM0NDkzY2JhOWM4OWRiZGUyNjJmODdhMTU4N2E0YWE5OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPEFLNDce1EbpquVIPo3202CVy71 L1yIpQki0PIBRhq6UUdXRtQ9Ebo5WX1xfEsilt+B8kiy+5z6WlJE3EXsSdpWKzlv pmS7NL3iaFQDm5b8Id+2a5lkSBqU4eZKV5UOtBGGTD4VtWJ4IQx/eLLwKEs7cgzv QkT+uhiRWL/8P2ZAzoTh1DiqfiXk86SIjkC5oGXZqrsPyOLSs1AkKQBrcMgzVrpP JZ20zIZZvU/JilnpPYLtTuK9lPjrtOfMbv4I7qMCLYqqqPQ7aeON5m9fkfeGjrO8 pbb0HFAKXqxW8sAqcYXeF0ZczzpNQSK/+sTYR9C0pmMEihARJnUbfeREXQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFD6ZU0STy6nInb3iYvh6FYekqpnfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzA5MTY0 MS01NWVkLTQwM2ItYTY4Ny01ZWQwNzdlYjhiZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMDkxNjQx LTU1ZWQtNDAzYi1hNjg3LTVlZDA3N2ViOGJlMC8xL1BwbFRSSlBMcWNpZHZlSmkt SG9WaDZTcW1kOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwiQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAqT8aP 6KAP7IDoI7kXLtmtMoVaATPyYfCzzVjq0ffhzrjmSA87en14Q1wLZZzz0iIjSDjQ zuMdO2shS8XXYcRdZrmMy1JNEZgARDeS9l9MrWnhjQBf7upZV3J7vDu13j051cIU WdbqysNxdIUdSfx1MTbKdjxO/AD7Ep79jfzDSYLPVZQga3BcQBV60TY/eUOrNJ7J Z0xefC2YaDFRKQ61aEOJLulwxJgRMgbYddVSz/VVv10iJ/GNxdW6X+Mtp7eyhEnj DgPTvoxccpTZiN4UlCXtuRmMARVX5Q0hULT/VORQQ6pJsRWomBo3SVeBwz4FRToS nSJ8dKQTH07a5b6V -----END CERTIFICATE-----Generated at Mon Jan 26 01:27:56 2026 by rpki-client