This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer File: pPTBZVXW8DttbI0KjMvhrx6uxDo.cer (raw, json) Hash identifier: aRgOlUKj8qY7vJ9hi5X6L7wQgSd26TC7KMGn67pEH1M= Subject key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE6544597880FC4CD08475EA3D280 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.104.113.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e6:54:45:97:88:0f:c4:cd:08:47:5e:a3:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:53:ea:a4:ae:85:fe:e9:77:c5:99:cb:99: 9c:60:54:b0:86:4d:cd:1d:50:0b:90:13:9a:13:07: c8:56:83:43:67:9c:9b:94:2b:9c:7d:ce:f0:41:ff: 09:a6:54:83:b4:34:44:4f:df:21:cf:84:04:44:7b: 97:c8:6d:d6:d3:cb:f0:32:59:28:7e:f5:7c:f6:c4: 8f:25:20:9f:3e:c5:9c:a2:af:c2:cb:a3:96:7a:d2: b2:93:0e:0f:2c:2b:b8:22:94:2a:7a:af:91:cd:54: b1:b1:3d:38:c8:10:4d:1e:f2:95:f4:9b:6e:36:0e: ee:14:06:47:af:bf:4b:83:d0:8c:21:22:36:73:bc: 99:0a:dd:a8:f8:d0:d3:ba:86:1d:75:31:ac:a3:33: 5c:c9:c6:fc:39:43:68:a2:85:2f:70:70:e9:f0:84: 97:04:e2:3e:a9:b9:f4:55:72:e5:32:54:bb:22:07: 6a:7a:9e:c8:e9:f3:fd:14:e8:55:2e:9d:1d:fe:13: a4:00:5f:97:1c:34:07:cc:5f:2f:18:d4:67:fb:6e: 98:c7:54:04:45:af:cc:d7:cc:61:f9:38:32:4e:16: e6:99:9d:03:ff:cb:a7:40:cc:8d:22:ea:49:a7:dd: 5b:be:8f:76:1d:ce:4d:15:08:07:eb:68:83:d2:03: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.113.0/24 Signature Algorithm: sha256WithRSAEncryption 74:bc:ab:74:14:fd:c7:30:cb:35:08:59:8b:7a:73:3d:fc:6c: 27:d1:f7:9f:10:63:37:9a:de:58:bd:3e:7c:1d:f6:a3:3c:c9: 69:28:86:10:a0:2d:84:d7:79:fc:76:f7:1a:aa:6f:05:07:dd: 72:85:b2:64:b4:b2:f0:c9:10:97:d9:eb:6e:a9:f3:6c:cf:d9: 81:38:d3:dc:92:f7:a5:f4:41:91:42:48:5f:96:f1:74:4b:bf: 7f:e8:1e:b3:e6:46:c8:ff:75:13:ef:87:ef:bb:ae:ea:4e:e0: 4e:47:9d:30:95:f3:fe:b1:30:3e:ca:5b:a9:d9:ea:24:4a:e8: b0:b4:ef:f3:5c:e4:29:c7:2d:84:a6:e4:c1:99:cc:4f:99:10: 91:4e:0b:74:e5:78:3d:ee:49:d8:20:1a:ed:dd:82:fc:76:bc: d0:8d:8a:d6:89:21:29:18:f0:9f:2d:c8:8b:8f:d7:12:04:ac: 4f:4f:bb:62:1e:29:4e:79:2d:22:8e:1f:4d:78:3c:ee:4d:4e: a1:3f:98:b8:da:4c:25:29:73:65:55:4e:94:5b:7c:ed:30:dd: 08:4e:8f:87:86:95:95:e0:0e:84:80:87:f5:0c:49:db:0c:e0: 37:32:86:3e:63:99:d1:89:ef:9e:c5:2b:b6:3b:33:bc:e5:15: 40:4b:e9:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9WuZURZeID8TNCEdeo9KAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGY0YzE2NTU1ZDZmMDNiNmQ2YzhkMGE4Y2NiZTFhZjFlYWVjNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc1T6qSuhf7pd8WZy5mcYFSwhk3N HVALkBOaEwfIVoNDZ5yblCucfc7wQf8JplSDtDRET98hz4QERHuXyG3W08vwMlko fvV89sSPJSCfPsWcoq/Cy6OWetKykw4PLCu4IpQqeq+RzVSxsT04yBBNHvKV9Jtu Ng7uFAZHr79Lg9CMISI2c7yZCt2o+NDTuoYddTGsozNcycb8OUNoooUvcHDp8ISX BOI+qbn0VXLlMlS7Igdqep7I6fP9FOhVLp0d/hOkAF+XHDQHzF8vGNRn+26Yx1QE Ra/M18xh+TgyThbmmZ0D/8unQMyNIupJp91bvo92Hc5NFQgH62iD0gPOOQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKT0wWVV1vA7bWyNCozL4a8ersQ6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2Q5NDI5 NC03OTk5LTQwMDktOWRkNi0yNTY3ZjRhOWIxMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZDk0Mjk0 LTc5OTktNDAwOS05ZGQ2LTI1NjdmNGE5YjEzOS8xL3BQVEJaVlhXOER0dGJJMEtq TXZocng2dXhEby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwmhxMA0GCSqGSIb3DQEBCwUAA4IBAQB0vKt0 FP3HMMs1CFmLenM9/Gwn0fefEGM3mt5YvT58HfajPMlpKIYQoC2E13n8dvcaqm8F B91yhbJktLLwyRCX2etuqfNsz9mBONPckvel9EGRQkhflvF0S79/6B6z5kbI/3UT 74fvu67qTuBOR50wlfP+sTA+ylup2eokSuiwtO/zXOQpxy2EpuTBmcxPmRCRTgt0 5Xg97knYIBrt3YL8drzQjYrWiSEpGPCfLciLj9cSBKxPT7tiHilOeS0ijh9NeDzu TU6hP5i42kwlKXNlVU6UW3ztMN0ITo+HhpWV4A6EgIf1DEnbDOA3MoY+Y5nRie+e xSu2OzO85RVAS+nv -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:21 2026 by rpki-client