This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer (raw, json) Hash identifier: C6oXgDAZcquaZ7YstgvR9cknSGeBUAnfbbf09cqiuko= Subject key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC801955ADC32A791D158E634E4681E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.98.0.0/16 IP: 81.81.0.0/16 IP: 151.3.0.0 -- 151.79.255.255 IP: 185.215.240.0/22 IP: 195.210.64.0/19 IP: 212.52.64.0/18 IP: 212.141.0.0/16 IP: 212.245.0.0/16 IP: 2a0b:a540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:01:95:5a:dc:32:a7:91:d1:58:e6:34:e4:68:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4f6d657c0fa21828d313507354dec1481580ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:32:21:68:ac:ab:0e:5c:b6:c2:0d:52:f9:1e: 78:8f:52:42:5b:e1:21:79:3e:8a:d7:04:92:6d:89: 58:41:d6:e7:66:4a:46:a6:a6:b0:a1:5f:06:95:2b: 76:5f:b7:78:5e:dd:40:d0:63:9f:5c:08:c9:89:83: b7:4c:5e:9d:87:3c:4f:ec:e3:4f:c1:c8:c8:36:78: 9e:c7:6b:91:f3:7b:0f:d9:1a:82:7e:5b:db:8f:f9: be:ef:60:04:ae:91:41:95:51:2d:31:24:09:bc:24: 21:32:6b:49:44:ea:12:c2:34:44:b4:d9:08:d8:1a: 52:43:9a:d0:15:6d:47:cf:4b:82:82:c5:f7:63:72: 0e:d9:01:d7:c3:81:87:af:b7:18:07:e3:00:82:02: fe:ab:e9:d6:36:70:a0:3d:e4:bb:d9:af:86:bf:97: 1e:5a:46:f0:da:a9:19:95:4d:dc:69:fa:ab:96:73: d1:17:a4:ce:30:cb:b6:0c:f6:12:06:a1:88:28:50: 21:47:be:6c:2e:8d:00:18:60:82:99:13:6d:b5:b2: 19:9f:53:c5:96:75:8a:ad:d5:79:9e:1f:9b:e5:a1: 2c:57:ab:34:85:28:56:b2:1c:fc:b1:b9:f7:a7:18: d5:3b:48:49:b8:28:31:e1:94:53:53:2d:16:a8:7a: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.98.0.0/16 81.81.0.0/16 151.3.0.0-151.79.255.255 185.215.240.0/22 195.210.64.0/19 212.52.64.0/18 212.141.0.0/16 212.245.0.0/16 IPv6: 2a0b:a540::/29 Signature Algorithm: sha256WithRSAEncryption 68:99:3d:5f:8c:44:7b:88:d6:f4:e7:ef:30:5a:2e:5b:28:41: 3f:54:c8:2b:0b:bc:c5:4c:43:17:e3:e5:77:2f:22:32:40:19: 59:e2:38:60:2b:79:50:13:c8:83:30:8e:a1:3f:f2:0e:c1:b6: 1c:38:ad:61:45:66:15:f3:6e:1e:7b:87:ee:b7:f4:c3:58:83: 7d:b0:01:f5:1d:3c:f2:30:f5:8c:1e:14:01:83:9a:95:69:a9: 27:10:b8:0a:81:87:9d:7f:18:c0:81:92:3b:f3:6b:e9:f7:6f: 3f:da:8e:71:cf:68:1f:1a:45:59:fd:89:c9:00:a3:6f:d7:a7: 59:ec:f8:ab:29:18:46:09:93:64:02:d8:56:0a:69:3d:73:4a: 4c:ef:3a:34:11:bc:88:b2:f3:e1:c7:6b:5d:86:6f:ec:37:82: 40:2f:ef:64:0b:74:28:48:b7:5f:15:85:41:49:a0:79:75:02: 16:fb:c6:57:dd:b0:09:af:2b:7d:dd:73:3f:01:56:69:5a:8f: 97:31:51:bf:c9:8d:0e:b6:e1:fd:cb:d3:36:05:df:bf:11:e9: fa:1a:8d:05:2c:ac:e9:d2:2c:d6:f1:79:d8:31:8f:0c:36:ca: e4:50:8f:be:94:5d:a6:b6:2d:0d:bd:ee:3c:9e:a7:73:c5:23: 40:88:c1:bc -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt6yAGVWtwyp5HRWOY05GgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGY2ZDY1N2MwZmEyMTgyOGQzMTM1MDczNTRkZWMxNDgxNTgwZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DIhaKyrDly2wg1S+R54j1JCW+Eh eT6K1wSSbYlYQdbnZkpGpqawoV8GlSt2X7d4Xt1A0GOfXAjJiYO3TF6dhzxP7ONP wcjINniex2uR83sP2RqCflvbj/m+72AErpFBlVEtMSQJvCQhMmtJROoSwjREtNkI 2BpSQ5rQFW1Hz0uCgsX3Y3IO2QHXw4GHr7cYB+MAggL+q+nWNnCgPeS72a+Gv5ce Wkbw2qkZlU3cafqrlnPRF6TOMMu2DPYSBqGIKFAhR75sLo0AGGCCmRNttbIZn1PF lnWKrdV5nh+b5aEsV6s0hShWshz8sbn3pxjVO0hJuCgx4ZRTUy0WqHpcPQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFKT21lfA+iGCjTE1BzVN7BSBWA7WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzIzOTM5 Ny0zNDc3LTQzNzktYWM0Ni01YzI3NjM2NDhmMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvMjM5Mzk3 LTM0NzctNDM3OS1hYzQ2LTVjMjc2MzY0OGYxYy8xL3BQYldWOEQ2SVlLTk1UVUhO VTNzRklGWUR0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA4BAIAATAyAwMAPmIDAwBRUTAKAwMAlwMDAwSXQAMEArnX8AME BcPSQAMEBtQ0QAMDANSNAwMA1PUwDQQCAAIwBwMFAyoLpUAwDQYJKoZIhvcNAQEL BQADggEBAGiZPV+MRHuI1vTn7zBaLlsoQT9UyCsLvMVMQxfj5XcvIjJAGVniOGAr eVATyIMwjqE/8g7Bthw4rWFFZhXzbh57h+639MNYg32wAfUdPPIw9YweFAGDmpVp qScQuAqBh51/GMCBkjvza+n3bz/ajnHPaB8aRVn9ickAo2/Xp1ns+KspGEYJk2QC 2FYKaT1zSkzvOjQRvIiy8+HHa12Gb+w3gkAv72QLdChIt18VhUFJoHl1Ahb7xlfd sAmvK33dcz8BVmlaj5cxUb/JjQ624f3L0zYF378R6foajQUsrOnSLNbxedgxjww2 yuRQj76UXaa2LQ297jyep3PFI0CIwbw= -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:11 2026 by rpki-client