This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer File: pENNZpHm4nwoLKo3r_kPK8VL8eM.cer (raw, json) Hash identifier: 1J5Rrjet3Ncy5N69MWtNr53As/n32X41NX3OjyCT7Aw= Subject key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EF719808A43D0394AECAC387A47DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.148.112.0/22 IP: 2a07:6040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f7:19:80:8a:43:d0:39:4a:ec:ac:38:7a:47:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:05:0e:d0:70:9f:fd:fa:39:45:94:95:6e:94: 6a:cf:2f:51:d6:2c:65:ad:f1:35:7a:45:e8:74:35: 00:72:7f:f9:8b:12:19:37:6d:57:4e:7c:13:cb:cf: e4:0a:29:eb:48:cb:66:d1:cf:6d:0b:bf:b6:9c:3c: de:35:7a:b8:64:64:05:61:c9:91:fb:81:6e:b6:16: 60:1f:86:8a:c0:e7:0c:76:31:dd:da:b6:92:8f:92: ac:c3:8a:83:dd:66:ad:4d:18:c7:c3:e1:60:18:e1: 04:67:84:37:c6:cd:a4:6a:8b:fb:f3:b4:47:7b:34: df:09:5d:16:68:21:28:81:f9:2a:fb:13:2c:0a:1b: 6c:cd:42:57:b9:b8:2a:f0:bf:6c:0b:77:50:eb:1f: 12:19:90:1b:cb:26:83:b1:b7:d4:96:97:00:66:60: 1a:3d:e9:5e:c3:89:52:53:ab:20:2a:5b:5c:02:a8: 0e:9d:8e:27:85:2c:93:e1:b3:ed:a9:28:b4:9a:68: 47:47:86:05:7a:87:2c:85:d2:c8:5a:98:e2:5e:93: 3b:6b:a6:57:3a:ca:63:f3:78:74:45:9f:45:76:4a: 1f:e0:96:07:ba:27:01:ec:f4:12:64:c4:f9:5a:7d: f1:20:c3:4f:48:87:e1:07:40:f1:76:23:55:b2:6e: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.112.0/22 IPv6: 2a07:6040::/29 Signature Algorithm: sha256WithRSAEncryption a0:d7:94:0e:51:da:56:6c:ec:76:1c:e7:f8:b8:8b:7a:15:0d: fe:79:7d:10:01:34:ac:45:a9:94:22:c5:c4:7d:bb:f5:7c:96: f2:6f:27:f0:9f:ed:9f:b3:33:d9:68:04:2f:fd:ca:ed:8c:43: d2:d5:50:0d:da:b5:46:17:94:48:3b:64:40:14:76:e2:8f:f5: 76:2b:b5:72:8a:6a:eb:35:e6:da:23:3b:3c:08:37:34:1c:6b: 3b:8f:34:e1:a4:fc:bc:69:59:ad:1f:74:58:b0:4a:33:1f:88: 1d:17:6c:0f:e2:d4:22:f1:43:6c:60:97:01:81:37:fc:46:97: 8f:03:22:21:76:6a:d9:41:6d:0d:b1:f8:17:95:c5:47:8b:be: 62:df:f4:82:5f:56:ec:11:50:ac:08:a4:8e:73:a8:6c:db:b0: 6d:06:ec:c0:f5:01:1b:8b:49:28:bb:3c:a5:c6:ae:d4:6c:eb: 7d:d9:6e:27:4c:87:11:07:fa:a1:ce:42:d5:e6:e6:ac:d9:46: 90:58:73:3a:68:f2:a0:6f:85:c3:d5:77:63:05:f1:01:dc:03: 98:99:f3:50:95:cc:c1:aa:a6:0b:ac:cf:6c:87:13:97:53:83: 02:f2:59:ac:7b:22:58:05:a3:b7:7a:54:8f:39:38:59:8d:e5: 2b:55:ff:a0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8fvcZgIpD0DlK7Kw4ekfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQzNGQ2NjkxZTZlMjdjMjgyY2FhMzdhZmY5MGYyYmM1NGJmMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QUO0HCf/fo5RZSVbpRqzy9R1ixl rfE1ekXodDUAcn/5ixIZN21XTnwTy8/kCinrSMtm0c9tC7+2nDzeNXq4ZGQFYcmR +4FuthZgH4aKwOcMdjHd2raSj5Ksw4qD3WatTRjHw+FgGOEEZ4Q3xs2kaov787RH ezTfCV0WaCEogfkq+xMsChtszUJXubgq8L9sC3dQ6x8SGZAbyyaDsbfUlpcAZmAa Pelew4lSU6sgKltcAqgOnY4nhSyT4bPtqSi0mmhHR4YFeocshdLIWpjiXpM7a6ZX Ospj83h0RZ9Fdkof4JYHuicB7PQSZMT5Wn3xIMNPSIfhB0DxdiNVsm502wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzQ1YjJk OS1lODYxLTQzZWYtYmNjMC1lOTk3NWEwYmRlYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNDViMmQ5 LWU4NjEtNDNlZi1iY2MwLWU5OTc1YTBiZGVhNy8xL3BFTk5acEhtNG53b0xLbzNy X2tQSzhWTDhlTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZRwMA0EAgACMAcDBQMqB2BAMA0GCSqGSIb3 DQEBCwUAA4IBAQCg15QOUdpWbOx2HOf4uIt6FQ3+eX0QATSsRamUIsXEfbv1fJby byfwn+2fszPZaAQv/crtjEPS1VAN2rVGF5RIO2RAFHbij/V2K7VyimrrNebaIzs8 CDc0HGs7jzThpPy8aVmtH3RYsEozH4gdF2wP4tQi8UNsYJcBgTf8RpePAyIhdmrZ QW0NsfgXlcVHi75i3/SCX1bsEVCsCKSOc6hs27BtBuzA9QEbi0kouzylxq7UbOt9 2W4nTIcRB/qhzkLV5uas2UaQWHM6aPKgb4XD1XdjBfEB3AOYmfNQlczBqqYLrM9s hxOXU4MC8lmseyJYBaO3elSPOThZjeUrVf+g -----END CERTIFICATE-----Generated at Sun Jan 25 20:27:45 2026 by rpki-client