This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer File: Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer (raw, json) Hash identifier: AQqLOotNn2EsD3BByf0lEHEsOfqPbey+MNHKE8/baK8= Subject key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD6736470B1DC2A975D63609776F3D727 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 13:30:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200242 IP: 77.73.117.0/24 IP: 2a14:6f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:73:64:70:b1:dc:2a:97:5d:63:60:97:76:f3:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 13:30:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:41:20:03:57:9c:b8:c4:ae:f5:44:d0:d1: 41:93:93:9f:10:0b:d7:d6:d7:fb:ea:0d:54:69:ef: 65:c7:12:5e:f9:86:1a:e1:60:80:4f:49:fa:70:0c: ba:e6:7d:0b:e5:9b:6e:16:e9:77:d1:a2:c0:31:3a: 3a:2e:fc:6a:bb:29:0d:cd:dc:8e:36:76:78:09:14: 56:53:9f:44:01:af:8c:89:55:0f:d2:23:bf:4c:a1: 65:4b:ad:cb:4e:18:25:90:84:a7:e2:7c:48:2d:c4: 63:8c:15:3a:ba:a5:85:de:92:14:23:8b:63:eb:8c: dd:01:91:88:93:9d:ee:3a:47:e4:44:43:e3:9d:53: 3d:4e:00:9c:5d:ea:be:f9:f7:46:0f:5f:2d:fc:d3: 9b:cb:71:8f:20:17:41:4a:7a:8c:0f:87:9b:72:d1: 6b:80:90:db:7a:8a:53:af:4d:7a:04:c4:15:14:a5: 99:84:32:d2:73:d6:a7:f3:13:24:73:cf:97:31:9e: de:4b:ab:40:e2:c5:40:c1:54:d8:e5:3d:7a:7a:1f: 2c:78:fa:78:be:24:76:e7:9f:93:d1:69:96:57:7d: 7c:cf:24:5d:e0:5d:65:9c:d6:33:89:7f:be:f9:46: 59:20:39:a8:c2:89:bd:98:1b:0e:f7:61:78:d4:f3: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.117.0/24 IPv6: 2a14:6f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200242 Signature Algorithm: sha256WithRSAEncryption 7b:4e:16:15:76:4d:99:01:31:b5:15:a9:14:53:8d:51:a3:1c: 75:cd:ca:25:a6:5a:2f:9e:44:e4:f9:4d:90:ef:84:ef:8c:6d: 2b:9b:a5:34:86:1e:f4:e3:e4:da:86:ce:4c:1f:60:a3:08:46: 62:3a:8d:f5:48:1d:ab:be:4e:6b:03:9e:a5:fd:1f:d7:7a:90: df:1e:e0:71:0a:17:98:2c:79:ae:92:55:5d:49:ea:e4:c7:c8: c6:37:0e:4d:53:01:3b:84:c3:bd:eb:1b:dc:db:b7:62:4f:e9: 19:03:73:cf:1a:c0:92:18:27:a2:33:c2:ef:de:9b:98:c4:62: b2:1c:8a:a3:d6:a7:04:f3:09:37:05:18:7c:31:55:08:0f:34: 21:68:a9:67:8d:e6:a7:cd:69:5f:d8:a9:f3:15:5c:23:6b:fc: 89:63:88:92:5c:48:1c:ab:b5:36:e0:7f:1e:b6:72:bb:e9:f4: de:8a:33:c4:10:bf:42:76:c2:50:9c:39:f0:9f:f8:f2:0c:54: a9:e0:64:a0:f3:8d:69:f7:ac:8d:7a:5b:c6:a9:91:c9:b7:b2: 3a:9b:0e:41:f7:75:ed:9e:07:f1:48:3d:e0:b9:ac:e7:80:d6: 3e:22:57:ec:24:31:86:74:4c:90:5f:e0:e5:2c:f0:27:31:3e: f6:48:e4:60 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZvWc2Rwsdwql11jYJd289cnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTMzMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWVlYmI5NDZhOGQyMWQ0MDgzYzkzZGMwOWNlZTU1N2JiMmFjMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM1BIANXnLjErvVE0NFBk5OfEAvX 1tf76g1Uae9lxxJe+YYa4WCAT0n6cAy65n0L5ZtuFul30aLAMTo6LvxquykNzdyO NnZ4CRRWU59EAa+MiVUP0iO/TKFlS63LThglkISn4nxILcRjjBU6uqWF3pIUI4tj 64zdAZGIk53uOkfkREPjnVM9TgCcXeq++fdGD18t/NOby3GPIBdBSnqMD4ebctFr gJDbeopTr016BMQVFKWZhDLSc9an8xMkc8+XMZ7eS6tA4sVAwVTY5T16eh8sePp4 viR255+T0WmWV318zyRd4F1lnNYziX+++UZZIDmowom9mBsO92F41PMW4QIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFD7uu5RqjSHUCDyT3AnO5Ve7KsMuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZmZjdh OTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC80LzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZm N2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvM0VFRUJCOTQ2QThE MjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME AE1JdTANBAIAAjAHAwUDKhRvQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDjIw DQYJKoZIhvcNAQELBQADggEBAHtOFhV2TZkBMbUVqRRTjVGjHHXNyiWmWi+eROT5 TZDvhO+MbSubpTSGHvTj5NqGzkwfYKMIRmI6jfVIHau+TmsDnqX9H9d6kN8e4HEK F5gsea6SVV1J6uTHyMY3Dk1TATuEw73rG9zbt2JP6RkDc88awJIYJ6Izwu/em5jE YrIciqPWpwTzCTcFGHwxVQgPNCFoqWeN5qfNaV/YqfMVXCNr/IljiJJcSByrtTbg fx62crvp9N6KM8QQv0J2wlCcOfCf+PIMVKngZKDzjWn3rI16W8apkcm3sjqbDkH3 de2eB/FIPeC5rOeA1j4iV+wkMYZ0TJBf4OUs8CcxPvZI5GA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:03:29 2026 by rpki-client