This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer File: pJ0uULdziu0KzBoOwv7jAIAlWDg.cer (raw, json) Hash identifier: RZk28k+8OQDql7Q6TBBwnx3mn2kikSyMi3pd9Nrhw3g= Subject key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3B7826353D7643E48E353C35D3AC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.230.40.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b7:82:63:53:d7:64:3e:48:e3:53:c3:5d:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:60:d3:bd:8e:f1:2d:58:22:34:bb:69:a2: c2:54:85:49:5a:ec:fe:43:7a:3b:e8:e5:2f:2c:ab: fb:67:ae:12:80:7c:cc:1a:c9:f5:0e:53:e3:90:19: df:47:32:63:f4:61:cd:c1:d2:16:d8:43:1a:3b:fa: e4:df:eb:4e:18:eb:a3:17:9e:64:f8:9b:80:2e:12: 7c:c7:a5:30:21:75:82:e6:ed:7d:42:3c:40:da:ea: 92:11:6c:90:a8:95:60:71:b6:ff:52:64:b9:da:35: dc:41:0d:71:fc:6d:6f:53:52:da:19:4f:91:4f:77: 0c:f5:f2:5a:83:49:c9:02:c3:4d:36:f0:91:d3:bf: 23:9d:3d:75:ef:98:dd:a2:85:74:c6:2d:b2:cf:c6: 6b:26:46:ea:d1:c7:c3:4c:bf:0d:b5:1c:2b:9d:ca: 43:7b:a8:43:d8:9d:1c:32:b3:8b:d5:9e:06:e0:8f: cc:ac:da:8b:fe:a7:bb:00:da:f2:95:3e:9f:32:b1: d6:e1:b1:ba:20:fa:f0:41:91:33:25:6b:ab:2f:70: 1a:52:c9:a0:ff:4c:53:56:3d:c7:8c:71:94:04:dd: a6:fb:4d:e7:9a:b6:4a:d9:b4:02:b3:c8:bd:41:77: 17:6e:71:16:45:15:a2:4d:50:4f:3a:95:49:74:35: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.40.0/24 Signature Algorithm: sha256WithRSAEncryption 99:fe:0f:57:15:ba:b6:4a:33:f3:bc:bc:22:5c:bc:01:f9:38: 7f:19:f9:9c:2e:b0:7c:4e:47:90:6e:b7:38:74:8c:a8:79:62: c5:9d:76:db:60:81:7c:b7:08:d6:53:ef:a5:6b:5b:e0:60:8a: 22:df:5e:05:85:8e:eb:0f:03:b5:f8:22:42:6a:0d:2d:64:0b: 10:56:d5:b0:b6:12:db:98:dc:de:a8:f6:d9:bc:f5:c0:14:44: b4:e4:71:93:91:91:d9:f3:0f:4e:16:08:1d:59:bd:f8:c0:1d: 28:cf:61:de:27:b9:fd:a2:71:3c:d6:c6:23:6e:17:35:50:0e: 3b:a8:a0:e2:8f:36:f6:a8:c5:e7:d8:44:9a:24:b8:b4:26:b9: 96:74:8a:6d:a1:fb:71:22:44:47:b6:11:55:63:f7:53:39:8d: ef:67:cb:d3:6d:00:d8:a6:32:d5:4a:58:4d:fb:eb:63:00:4e: 01:79:7b:ae:ac:2a:b7:09:7f:2b:2b:22:8a:29:81:07:f0:2e: 59:2f:b8:e8:03:9d:8e:0a:18:c0:55:02:34:cb:ef:a2:2e:46: e6:77:6b:f4:83:83:05:c9:f1:45:df:70:24:64:c0:42:af:ed: 82:77:8c:cf:b6:60:86:21:5f:04:db:c0:3f:50:9f:ea:3d:ac: 40:b6:14:61 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7o7eCY1PXZD5I41PDXTrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDlkMmU1MGI3NzM4YWVkMGFjYzFhMGVjMmZlZTMwMDgwMjU1ODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwNg072O8S1YIjS7aaLCVIVJWuz+ Q3o76OUvLKv7Z64SgHzMGsn1DlPjkBnfRzJj9GHNwdIW2EMaO/rk3+tOGOujF55k +JuALhJ8x6UwIXWC5u19QjxA2uqSEWyQqJVgcbb/UmS52jXcQQ1x/G1vU1LaGU+R T3cM9fJag0nJAsNNNvCR078jnT1175jdooV0xi2yz8ZrJkbq0cfDTL8NtRwrncpD e6hD2J0cMrOL1Z4G4I/MrNqL/qe7ANrylT6fMrHW4bG6IPrwQZEzJWurL3AaUsmg /0xTVj3HjHGUBN2m+03nmrZK2bQCs8i9QXcXbnEWRRWiTVBPOpVJdDWgkwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKSdLlC3c4rtCswaDsL+4wCAJVg4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzM5MzIx OC00NmU1LTQ2OGItYjU4Yi03ZjMzNTIyMzRlMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMzkzMjE4 LTQ2ZTUtNDY4Yi1iNThiLTdmMzM1MjIzNGUyMS8xL3BKMHVVTGR6aXUwS3pCb093 djdqQUlBbFdEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+YoMA0GCSqGSIb3DQEBCwUAA4IBAQCZ/g9X Fbq2SjPzvLwiXLwB+Th/GfmcLrB8TkeQbrc4dIyoeWLFnXbbYIF8twjWU++la1vg YIoi314FhY7rDwO1+CJCag0tZAsQVtWwthLbmNzeqPbZvPXAFES05HGTkZHZ8w9O FggdWb34wB0oz2HeJ7n9onE81sYjbhc1UA47qKDijzb2qMXn2ESaJLi0JrmWdIpt oftxIkRHthFVY/dTOY3vZ8vTbQDYpjLVSlhN++tjAE4BeXuurCq3CX8rKyKKKYEH 8C5ZL7joA52OChjAVQI0y++iLkbmd2v0g4MFyfFF33AkZMBCr+2Cd4zPtmCGIV8E 28A/UJ/qPaxAthRh -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:03 2026 by rpki-client