This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer File: PwKJr_qvCA4lJxjj9Eidop2fpVo.cer (raw, json) Hash identifier: WkfgIYCUnADttdcDtRm58jjhGjSjSApR5sg1gcXIa+o= Subject key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7537D0875C63647E01C1A7C432440 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.119.216.0/22 IP: 2a03:78c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:53:7d:08:75:c6:36:47:e0:1c:1a:7c:43:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0289affaaf080e252718e3f4489da29d9fa55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:d6:53:4e:78:69:23:21:64:6e:1a:73:82: 6e:60:9b:a6:63:6e:34:83:00:55:5d:fd:aa:61:3d: e2:9c:8d:c8:21:04:89:f5:76:43:c1:6f:ba:0f:05: e7:67:98:d7:b2:13:ab:d9:0b:d6:8e:0e:d1:fc:d2: 8c:3b:c9:3b:7b:1a:26:68:9d:55:78:70:69:26:d5: b3:54:08:67:bb:44:8b:ca:77:f0:e0:d4:70:11:21: c6:db:d1:df:d3:25:f4:ae:51:2c:04:c0:41:7c:fd: f9:2c:e3:21:cc:05:c9:09:cf:dc:64:31:dd:45:d3: 3b:ca:6e:38:7e:50:c6:0b:71:fd:1b:1b:84:59:1a: cc:12:8f:aa:69:27:36:64:45:51:42:79:db:25:7f: 8d:df:93:4a:7d:02:a3:e5:6e:a3:36:34:bd:9b:1f: 83:62:92:bf:c1:43:45:a2:c5:66:b7:3c:44:aa:ec: ab:69:28:4e:f4:1f:ef:23:3e:8a:b3:d4:28:17:06: 9c:03:ae:1d:a2:55:87:b9:60:63:e4:c5:bf:b4:c6: 40:c8:0f:af:a5:20:a6:0e:02:68:80:10:d2:bc:ec: cd:2e:2b:b3:35:48:49:c0:f5:00:56:ed:d1:bc:41: 5a:4e:53:49:78:34:12:7a:30:68:5f:20:5c:b2:d3: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.216.0/22 IPv6: 2a03:78c0::/32 Signature Algorithm: sha256WithRSAEncryption 38:86:bb:20:a1:58:bb:43:69:80:1b:f7:fe:39:97:be:42:2e: ee:49:91:48:fc:44:04:0e:86:fb:85:c0:87:90:fe:94:d9:51: e8:22:29:07:ce:1c:38:0b:b7:a1:ee:13:e5:5f:83:09:55:f9: 0e:cd:73:30:71:39:1d:c6:68:11:5c:56:a1:ef:67:87:21:5f: a8:8d:26:9d:3e:0a:b4:a7:de:fd:5e:76:97:d1:15:4a:59:a0: 1a:a1:81:f5:3c:a1:c6:91:dd:74:24:92:ea:69:dd:ae:f4:7f: 57:ef:41:ec:90:ae:4c:5e:a6:79:a0:3a:bb:2b:71:0e:57:e4: 89:ac:1b:6d:58:df:d1:e7:54:02:1d:be:20:01:c8:2f:be:90: 13:f8:d9:4d:a0:fa:ed:67:38:00:77:69:ec:55:ee:c8:32:44: 9e:3c:9c:df:bc:db:11:dd:7c:87:96:bc:e3:d2:d5:a5:d4:bf: 65:56:4b:d0:9f:27:6f:82:3d:ee:00:2f:ed:61:cb:82:03:74: 6c:0f:ca:44:2b:77:1c:13:8c:26:e8:eb:4c:ba:fd:0f:fc:b9: 23:f0:3e:22:2a:77:89:e5:8c:c2:cb:3a:8d:96:da:47:bf:b4: 03:cc:15:da:99:66:dd:7b:cf:5e:32:d1:e5:55:21:26:99:55: 78:5f:ed:e8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3x1N9CHXGNkfgHBp8QyRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjAyODlhZmZhYWYwODBlMjUyNzE4ZTNmNDQ4OWRhMjlkOWZhNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqzWU054aSMhZG4ac4JuYJumY240 gwBVXf2qYT3inI3IIQSJ9XZDwW+6DwXnZ5jXshOr2QvWjg7R/NKMO8k7exomaJ1V eHBpJtWzVAhnu0SLynfw4NRwESHG29Hf0yX0rlEsBMBBfP35LOMhzAXJCc/cZDHd RdM7ym44flDGC3H9GxuEWRrMEo+qaSc2ZEVRQnnbJX+N35NKfQKj5W6jNjS9mx+D YpK/wUNFosVmtzxEquyraShO9B/vIz6Ks9QoFwacA64dolWHuWBj5MW/tMZAyA+v pSCmDgJogBDSvOzNLiuzNUhJwPUAVu3RvEFaTlNJeDQSejBoXyBcstNQGwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFD8Cia/6rwgOJScY4/RInaKdn6VaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzlmY2Nj Zi1lN2FhLTRjNDQtOTU5MC0xY2YwZmVhYWEzZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOWZjY2Nm LWU3YWEtNGM0NC05NTkwLTFjZjBmZWFhYTNlYS8xL1B3S0pyX3F2Q0E0bEp4amo5 RWlkb3AyZnBWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXfYMA0EAgACMAcDBQAqA3jAMA0GCSqGSIb3 DQEBCwUAA4IBAQA4hrsgoVi7Q2mAG/f+OZe+Qi7uSZFI/EQEDob7hcCHkP6U2VHo IikHzhw4C7eh7hPlX4MJVfkOzXMwcTkdxmgRXFah72eHIV+ojSadPgq0p979XnaX 0RVKWaAaoYH1PKHGkd10JJLqad2u9H9X70HskK5MXqZ5oDq7K3EOV+SJrBttWN/R 51QCHb4gAcgvvpAT+NlNoPrtZzgAd2nsVe7IMkSePJzfvNsR3XyHlrzj0tWl1L9l VkvQnydvgj3uAC/tYcuCA3RsD8pEK3ccE4wm6OtMuv0P/Lkj8D4iKneJ5YzCyzqN ltpHv7QDzBXamWbde89eMtHlVSEmmVV4X+3o -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:59 2026 by rpki-client