This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer File: PpvRijUxNTVm7RgUDK10GQW-r64.cer (raw, json) Hash identifier: C1rg1eaTSyGC3ULcEKj7ubYQ4XTjiyw76Kk7on1jJwc= Subject key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E51B22F6F79C58F852E65609686D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a09:1180::/29 IP: 2a0a:8f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:51:b2:2f:6f:79:c5:8f:85:2e:65:60:96:86:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e9bd18a3531353566ed18140cad741905beafae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d4:86:b9:2a:ab:e9:5c:4d:4d:be:bf:db:9c: 5a:fc:86:6c:b2:33:25:8c:d0:17:d5:d6:2e:34:ea: 1b:81:cc:f0:19:28:92:0d:28:ce:14:d7:0f:2d:fe: f7:7d:d1:a3:73:84:ed:34:b0:ef:ee:e5:94:b5:26: dc:83:6f:53:37:35:00:4f:d3:ff:8e:c7:90:d1:c8: 4f:66:4b:ee:7d:6e:98:2a:48:3c:1b:b4:89:33:fb: fc:59:74:82:0d:d9:f3:60:d4:18:4a:d4:b8:e1:dc: 9e:e0:bf:ef:56:ea:da:90:fa:99:61:e3:fd:a1:73: ed:ab:2b:8a:b5:eb:c8:c6:54:26:df:13:2c:e9:96: bd:ab:c5:f8:47:ec:c0:9b:11:a1:70:e1:08:09:56: c5:01:d5:71:d4:5f:7f:58:9f:79:bf:b9:6a:48:62: 29:d8:01:99:61:1b:f9:0c:1b:3d:a6:0c:64:e6:f3: c8:c3:46:c7:6d:04:c9:9d:86:53:88:90:20:af:80: 00:85:cf:12:93:c3:3d:0e:2d:8d:a4:aa:6a:78:b1: 96:ea:1e:18:c1:6d:7b:9b:f5:f3:9e:e1:70:16:6a: 8d:f3:04:5b:c4:84:2a:a6:dd:f9:dc:3d:73:70:eb: 42:1a:79:2e:88:16:dd:99:87:66:4b:b9:16:ab:b4: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1180::/29 2a0a:8f80::/29 Signature Algorithm: sha256WithRSAEncryption 69:d6:7d:64:32:38:27:22:64:cb:4c:06:18:70:d0:e9:83:24: e5:83:5b:b9:8c:2d:74:2e:86:0c:21:65:1d:74:78:62:3f:32: f1:11:7e:d7:38:f1:09:47:22:9c:b9:1a:ef:96:e1:90:db:b2: 37:65:49:e3:08:73:c6:bb:dd:79:86:84:60:24:51:cf:38:4c: 65:93:e7:9e:a7:ec:4e:0d:5c:64:7d:5e:79:fa:31:e8:28:85: 18:fa:71:56:d2:5d:bb:8e:e8:a6:f9:41:6a:e6:c8:dd:f0:23: c3:91:fb:c7:f6:2a:0b:d3:37:dd:be:26:4b:e1:1a:d0:66:2f: 48:ac:53:d4:c7:77:dd:6a:8a:5c:05:c1:22:f6:6c:f7:3a:e5: 53:f6:04:4d:d5:0e:f2:4c:83:e8:08:f7:9b:8e:d6:25:db:85: 3b:15:28:a6:db:16:f3:a7:26:46:34:3c:15:f1:25:38:d1:e9: ec:e1:9c:7b:6d:9b:57:11:1f:d0:d3:34:64:f1:fe:5d:e3:e9: 99:93:16:5e:d8:47:8d:27:ed:74:3d:e0:87:e3:75:94:ce:3a: 49:da:56:db:55:20:1f:10:02:1e:e7:65:83:77:25:42:fb:91: 36:ae:0d:e2:40:15:3b:38:75:9f:65:52:e2:52:0b:27:be:02: 31:81:6d:0d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt5flGyL295xY+FLmVglobXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTliZDE4YTM1MzEzNTM1NjZlZDE4MTQwY2FkNzQxOTA1YmVhZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9SGuSqr6VxNTb6/25xa/IZssjMl jNAX1dYuNOobgczwGSiSDSjOFNcPLf73fdGjc4TtNLDv7uWUtSbcg29TNzUAT9P/ jseQ0chPZkvufW6YKkg8G7SJM/v8WXSCDdnzYNQYStS44dye4L/vVurakPqZYeP9 oXPtqyuKtevIxlQm3xMs6Za9q8X4R+zAmxGhcOEICVbFAdVx1F9/WJ95v7lqSGIp 2AGZYRv5DBs9pgxk5vPIw0bHbQTJnYZTiJAgr4AAhc8Sk8M9Di2NpKpqeLGW6h4Y wW17m/XznuFwFmqN8wRbxIQqpt353D1zcOtCGnkuiBbdmYdmS7kWq7RLLwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzg2ZGJi NC02YWU0LTQ3NmUtYTYwMS1lYTI3N2I0OTJmMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvODZkYmI0 LTZhZTQtNDc2ZS1hNjAxLWVhMjc3YjQ5MmYxZS8xL1BwdlJpalV4TlRWbTdSZ1VE SzEwR1FXLXI2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAAjAOAwUDKgkRgAMFAyoKj4AwDQYJKoZIhvcNAQELBQAD ggEBAGnWfWQyOCciZMtMBhhw0OmDJOWDW7mMLXQuhgwhZR10eGI/MvERftc48QlH Ipy5Gu+W4ZDbsjdlSeMIc8a73XmGhGAkUc84TGWT556n7E4NXGR9Xnn6MegohRj6 cVbSXbuO6Kb5QWrmyN3wI8OR+8f2KgvTN92+JkvhGtBmL0isU9THd91qilwFwSL2 bPc65VP2BE3VDvJMg+gI95uO1iXbhTsVKKbbFvOnJkY0PBXxJTjR6ezhnHttm1cR H9DTNGTx/l3j6ZmTFl7YR40n7XQ94IfjdZTOOknaVttVIB8QAh7nZYN3JUL7kTau DeJAFTs4dZ9lUuJSCye+AjGBbQ0= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:19 2026 by rpki-client