This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer (raw, json) Hash identifier: It0UuN1HO4x8vXsYBT6tNsYoZIqFKAMhM86mIVmTeuA= Subject key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC86537B97B9543DC7A24359B33172D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 680 IP: 141.39.0.0/16 IP: 188.1.0.0/16 IP: 192.76.176.0/24 IP: 192.108.66.0/23 IP: 192.108.69.0 -- 192.108.72.255 IP: 192.129.26.0 -- 192.129.31.255 IP: 193.174.0.0/15 IP: 194.94.0.0/15 IP: 195.37.0.0/16 IP: 212.201.0.0/16 IP: 2001:638::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:65:37:b9:7b:95:43:dc:7a:24:35:9b:33:17:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:48:e8:27:b1:05:10:83:30:d4:c7:35:25: 47:9a:5a:f9:fa:06:dd:e6:a1:05:27:e7:01:ba:9b: bd:80:9d:ed:c2:1e:bd:f7:bc:e4:6c:33:fb:90:97: 0d:db:0f:a3:03:57:af:a4:31:1e:ea:64:cb:15:35: 9a:2d:7a:8e:73:f3:c9:ed:0e:0b:71:95:e7:a1:41: a3:be:67:0a:de:df:1b:2a:7c:1e:4c:8a:83:4e:91: 3b:48:bd:95:66:69:ad:7d:a3:bc:ac:fa:ff:79:f7: 9d:8b:f0:3b:e4:aa:7b:3d:ed:4a:e5:4f:84:0e:e2: b6:91:43:23:fc:9f:cc:91:2f:14:2a:5b:3a:40:f3: 87:32:03:50:70:f9:9d:b2:de:d3:58:c2:4a:f2:6e: 4d:df:4f:9d:a1:58:21:d1:dd:75:92:58:b7:d2:ea: 29:28:24:5b:8f:17:a6:de:0b:58:2e:f8:cc:ba:f7: 4b:85:eb:d7:fc:5b:76:44:c2:dc:55:0c:04:51:7e: 45:5d:76:c0:7b:12:4f:91:49:d6:02:79:a4:45:bf: 3e:33:13:1b:31:82:d0:32:e6:cb:77:f6:85:27:e5: d0:47:c6:eb:54:5e:9a:f5:5c:2c:0f:b5:c4:df:e7: ed:36:6f:de:c1:9e:42:65:2d:e1:f8:58:f2:36:13: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.39.0.0/16 188.1.0.0/16 192.76.176.0/24 192.108.66.0/23 192.108.69.0-192.108.72.255 192.129.26.0-192.129.31.255 193.174.0.0/15 194.94.0.0/15 195.37.0.0/16 212.201.0.0/16 IPv6: 2001:638::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 680 Signature Algorithm: sha256WithRSAEncryption 73:b1:fd:64:2c:20:79:a6:cb:d2:c6:f9:80:8c:a0:9e:53:83: ac:6f:55:e7:3f:f7:d4:2a:97:32:ce:5f:7e:13:2f:f8:ea:91: 66:b0:ab:2f:81:ca:3e:81:5e:da:ce:ac:0f:c4:3d:f1:91:bc: f9:8a:25:03:84:e4:8d:07:16:90:f6:a7:ca:c5:57:89:2a:86: f7:f8:13:e4:b1:56:b2:2a:ec:61:95:9f:5b:f6:b3:b2:c4:85: 3f:52:9f:00:32:33:40:8e:1a:30:ea:66:0b:1a:1b:2f:b5:14: c1:e4:24:2a:8f:82:de:e0:18:ef:f4:54:e2:e8:20:05:02:7f: 30:c3:62:45:aa:cb:f0:e8:4f:03:07:b4:d5:a9:79:b2:f9:36: 3a:6c:5f:23:59:36:3c:6f:1c:7f:b2:26:c1:a5:bc:76:42:18: db:b1:3f:9e:cc:5d:27:df:b4:db:f3:fd:71:9c:7f:80:71:9f: 5d:d4:81:c8:81:98:83:0f:2f:6e:24:c6:c6:86:6f:7b:d0:f0: f9:13:a3:93:35:72:33:5c:25:b7:c3:b4:96:bf:54:79:29:d2: 76:25:08:dd:55:64:4c:45:ce:72:3e:6f:9c:a0:2e:e2:3a:92: 69:81:74:b4:96:8b:67:d0:ff:bb:05:29:7b:c3:49:8e:85:53: 20:86:b5:df -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt6yGU3uXuVQ9x6JDWbMxctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDk5OTAzZGFiODVmNmE1OTc3MmIzZWRmZDRiZjBlNDkxYWY1N2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPtI6CexBRCDMNTHNSVHmlr5+gbd 5qEFJ+cBupu9gJ3twh6997zkbDP7kJcN2w+jA1evpDEe6mTLFTWaLXqOc/PJ7Q4L cZXnoUGjvmcK3t8bKnweTIqDTpE7SL2VZmmtfaO8rPr/efedi/A75Kp7Pe1K5U+E DuK2kUMj/J/MkS8UKls6QPOHMgNQcPmdst7TWMJK8m5N30+doVgh0d11kli30uop KCRbjxem3gtYLvjMuvdLhevX/Ft2RMLcVQwEUX5FXXbAexJPkUnWAnmkRb8+MxMb MYLQMubLd/aFJ+XQR8brVF6a9VwsD7XE3+ftNm/ewZ5CZS3h+FjyNhNOHQIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFKSZkD2rhfall3Kz7f1L8OSRr1fEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzhlZGE5 YS1kMTNjLTQ0MzAtOGNmNC01N2VjMTJlODY0MWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvOGVkYTlh LWQxM2MtNDQzMC04Y2Y0LTU3ZWMxMmU4NjQxZS8xL3BKbVFQYXVGOXFXWGNyUHRf VXZ3NUpHdlY4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG4GCCsGAQUF BwEHAQH/BF8wXTBMBAIAATBGAwMAjScDAwC8AQMEAMBMsAMEAcBsQjAMAwQAwGxF AwQAwGxIMAwDBAHAgRoDBAXAgQADAwHBrgMDAcJeAwMAwyUDAwDUyTANBAIAAjAH AwUDIAEGODAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgICqDANBgkqhkiG9w0BAQsF AAOCAQEAc7H9ZCwgeabL0sb5gIygnlODrG9V5z/31CqXMs5ffhMv+OqRZrCrL4HK PoFe2s6sD8Q98ZG8+YolA4TkjQcWkPanysVXiSqG9/gT5LFWsirsYZWfW/azssSF P1KfADIzQI4aMOpmCxobL7UUweQkKo+C3uAY7/RU4uggBQJ/MMNiRarL8OhPAwe0 1al5svk2OmxfI1k2PG8cf7ImwaW8dkIY27E/nsxdJ9+02/P9cZx/gHGfXdSByIGY gw8vbiTGxoZve9Dw+ROjkzVyM1wlt8O0lr9UeSnSdiUI3VVkTEXOcj5vnKAu4jqS aYF0tJaLZ9D/uwUpe8NJjoVTIIa13w== -----END CERTIFICATE-----Generated at Mon Jan 26 13:04:39 2026 by rpki-client