This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer File: Puk-t9S1uv9yBoVbFODuWGET0J8.cer (raw, json) Hash identifier: GxP5uxpe2LSoG2X+WLrI/ZdKywUtFYimLvtRpUARh2k= Subject key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAEE5386A014EB93904C3EDD721CAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212849 IP: 185.120.142.0/24 IP: 2a0d:a900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ee:53:86:a0:14:eb:93:90:4c:3e:dd:72:1c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:5a:46:50:28:0e:11:25:a0:35:97:1d:cb: f5:63:48:d6:b2:de:a7:50:31:e3:3a:40:73:ef:e7: 10:3b:01:9e:5b:51:89:b0:c8:3f:f1:ce:9a:e8:93: 90:37:f9:c8:c5:55:16:7e:0b:5e:4c:1d:41:a8:79: d2:6d:17:cb:94:f1:63:dd:0d:9f:5a:8a:28:3d:b3: 1b:75:e7:c4:48:d2:91:a4:16:83:8b:22:68:c0:14: 1c:f2:64:f1:4e:d9:20:b2:a2:57:12:80:93:31:24: 43:5e:aa:1a:90:2a:47:51:a3:7a:fc:4a:cd:25:e5: 06:ed:59:b2:33:7d:06:58:06:25:1d:92:42:81:f2: 3b:2c:38:ac:73:af:ba:93:14:fc:94:50:f6:38:1e: f8:eb:95:ad:5d:19:ce:46:36:d0:cc:e8:99:d9:51: 06:f1:c4:df:20:0f:09:a1:13:fb:6a:16:83:be:a0: b2:36:30:ff:ef:b4:f0:9d:3e:2f:3e:65:e3:cc:e7: 5e:49:74:39:25:00:6f:ef:a3:cd:85:05:8f:3d:38: 00:dc:29:a6:87:d1:fb:e3:1a:99:a9:1b:5d:1b:88: d8:34:26:f5:e6:2d:be:dc:35:03:80:99:23:8c:ff: 5b:af:31:eb:ca:38:94:c3:72:f5:48:87:27:2f:c7: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.142.0/24 IPv6: 2a0d:a900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212849 Signature Algorithm: sha256WithRSAEncryption 3c:f3:b1:ae:f4:32:01:98:d9:a5:b0:3b:0d:ab:52:be:8c:a6: 1b:b2:02:49:49:5c:c7:2e:07:fe:96:fd:e9:9e:12:13:c2:01: ed:09:df:77:05:a9:b4:44:ea:18:f1:1c:13:a8:10:cb:25:a3: af:92:07:76:0e:b1:66:4e:2a:5f:3f:82:2f:67:99:14:53:db: 2f:c0:66:2c:a6:5e:86:53:d9:13:55:d0:a6:5d:9a:9c:59:03: d6:75:ad:1b:2c:c1:2b:e4:7d:31:70:a0:5a:a2:3e:59:1f:c5: 51:1b:12:84:7c:64:5e:d7:09:61:92:b8:f5:29:52:80:ba:83: 6a:42:90:9f:3e:b7:d4:4a:ea:33:e5:46:9a:7c:45:08:43:2e: 5f:b2:9c:5b:48:c3:31:a1:5c:83:e3:2b:74:9f:23:a3:01:36: ae:2a:14:9c:64:fc:3b:8a:30:1c:57:ed:f4:a4:9d:60:81:12: 81:ad:0c:f5:be:70:c7:21:99:9f:69:4b:66:2b:23:c3:d6:ae: ee:93:a4:24:dd:54:38:f0:fe:e0:b3:74:fe:44:08:60:b6:43: 49:9e:39:87:42:fe:53:c2:19:63:3a:98:ae:da:90:3e:07:4c: 3b:61:5c:90:cd:b9:b1:84:67:49:c7:1b:94:63:5f:68:ac:f6: be:30:76:2c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26u5ThqAU65OQTD7dchyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWU5M2ViN2Q0YjViYWZmNzIwNjg1NWIxNGUwZWU1ODYxMTNkMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGFaRlAoDhEloDWXHcv1Y0jWst6n UDHjOkBz7+cQOwGeW1GJsMg/8c6a6JOQN/nIxVUWfgteTB1BqHnSbRfLlPFj3Q2f WoooPbMbdefESNKRpBaDiyJowBQc8mTxTtkgsqJXEoCTMSRDXqoakCpHUaN6/ErN JeUG7VmyM30GWAYlHZJCgfI7LDisc6+6kxT8lFD2OB7465WtXRnORjbQzOiZ2VEG 8cTfIA8JoRP7ahaDvqCyNjD/77TwnT4vPmXjzOdeSXQ5JQBv76PNhQWPPTgA3Cmm h9H74xqZqRtdG4jYNCb15i2+3DUDgJkjjP9brzHryjiUw3L1SIcnL8crxQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD7pPrfUtbr/cgaFWxTg7lhhE9CfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzNjNWRk ZC1kNjIxLTRkZDAtYWQ2Ny05OGQ5MDQ2Njk0ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvM2M1ZGRk LWQ2MjEtNGRkMC1hZDY3LTk4ZDkwNDY2OTRlNy8xL1B1ay10OVMxdXY5eUJvVmJG T0R1V0dFVDBKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXiOMA0EAgACMAcDBQMqDakAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/cTANBgkqhkiG9w0BAQsFAAOCAQEAPPOxrvQyAZjZ pbA7DatSvoymG7ICSUlcxy4H/pb96Z4SE8IB7QnfdwWptETqGPEcE6gQyyWjr5IH dg6xZk4qXz+CL2eZFFPbL8BmLKZehlPZE1XQpl2anFkD1nWtGyzBK+R9MXCgWqI+ WR/FURsShHxkXtcJYZK49SlSgLqDakKQnz631ErqM+VGmnxFCEMuX7KcW0jDMaFc g+MrdJ8jowE2rioUnGT8O4owHFft9KSdYIESga0M9b5wxyGZn2lLZisjw9au7pOk JN1UOPD+4LN0/kQIYLZDSZ45h0L+U8IZYzqYrtqQPgdMO2FckM25sYRnSccblGNf aKz2vjB2LA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:13 2026 by rpki-client