This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer File: pQl6FWrvL4L_E7PBav9vfhbbAsg.cer (raw, json) Hash identifier: a7xF2EsUMZ+7hpadmr81kOoB0UJWp1I9fxpE/z/DvJQ= Subject key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1AC960F303EED900D978F3F0318C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209819 IP: 91.209.13.0/24 IP: 91.232.24.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1a:c9:60:f3:03:ee:d9:00:d9:78:f3:f0:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:0b:dc:03:ce:e7:31:e8:44:bd:f6:bb:44: 1e:9a:c8:38:85:a1:14:a2:21:bc:13:24:2c:05:5b: be:f7:93:dd:1b:18:ee:71:5b:37:dd:6d:3a:99:31: a4:06:cc:97:6c:54:4e:64:17:78:04:3e:43:17:83: 55:4b:c1:eb:39:59:9a:d5:b8:7c:9d:75:9f:4d:d3: 9b:82:7c:10:8c:25:cd:82:0f:f2:7c:f7:90:85:8f: d6:27:4d:62:28:88:15:e4:94:f0:b5:e1:41:df:47: 14:81:3f:59:80:32:67:77:80:b3:54:d4:38:60:47: df:f2:4f:3d:6b:af:07:47:97:98:cf:93:ca:6d:5b: e5:28:1f:29:2c:51:b1:fc:57:82:0f:5e:1f:2a:c6: 8f:85:33:62:fd:83:3f:8a:c2:11:30:fb:33:b7:00: e3:1e:f7:a1:12:22:1a:dd:6f:05:5a:b3:9d:e9:5d: 17:83:07:5b:6d:01:19:8d:2c:e7:8e:0c:58:b5:c5: 9e:d7:78:d7:11:cf:e9:d6:c5:73:12:93:f7:9b:19: 2b:1d:0e:aa:31:45:75:85:24:db:df:32:be:2d:8f: 57:4e:62:1d:8d:01:b7:69:29:4e:58:29:07:bd:47: ff:3e:65:b0:8a:7a:b7:ee:14:60:d5:88:73:e7:9c: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.13.0/24 91.232.24.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209819 Signature Algorithm: sha256WithRSAEncryption 86:83:31:f7:33:3b:1d:bc:13:bc:32:44:2b:6c:cc:5c:77:b5: f3:39:99:10:03:07:6c:b8:b3:36:04:9e:3b:9a:02:8d:9c:13: d3:bc:0d:36:0c:df:57:b2:af:ba:67:8b:a7:7f:cf:56:47:b8: 26:ce:ac:c5:03:39:84:24:8a:db:b1:08:11:63:53:26:2d:fc: 56:27:97:c1:9d:7c:ac:ff:3f:bf:1b:ee:4a:c9:c8:81:24:7a: 6b:4f:b3:16:4e:7b:57:65:b9:17:ad:b1:20:b4:92:27:bb:a5: c1:06:41:31:89:0c:e2:ee:83:65:16:46:5f:76:72:72:cc:23: 42:82:a1:16:14:4f:8f:7e:c4:db:ea:24:13:b0:49:fc:0b:91: 97:9f:c9:ee:25:b3:67:e4:ef:c6:5e:3b:3e:39:bf:b6:74:81: 74:ac:86:45:2e:cb:1c:87:fd:0f:10:43:5a:59:27:71:27:ac: be:5f:cf:3e:b5:89:f0:01:3b:35:f6:2d:51:3e:64:9b:1b:65: 1b:fa:b0:44:d8:4d:e5:24:77:b9:b7:86:40:4e:61:cf:ac:d1: b1:2c:07:1d:99:1e:18:67:0d:fb:d9:67:55:08:1a:b8:1d:bf: cf:0a:e8:9e:ec:57:90:a6:51:3e:d0:5b:9d:b1:d6:c6:04:d6: 95:4b:01:0b -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt87hrJYPMD7tkA2Xjz8DGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTA5N2ExNTZhZWYyZjgyZmYxM2IzYzE2YWZmNmY3ZTE2ZGIwMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkUL3APO5zHoRL32u0Qemsg4haEU oiG8EyQsBVu+95PdGxjucVs33W06mTGkBsyXbFROZBd4BD5DF4NVS8HrOVma1bh8 nXWfTdObgnwQjCXNgg/yfPeQhY/WJ01iKIgV5JTwteFB30cUgT9ZgDJnd4CzVNQ4 YEff8k89a68HR5eYz5PKbVvlKB8pLFGx/FeCD14fKsaPhTNi/YM/isIRMPsztwDj HvehEiIa3W8FWrOd6V0XgwdbbQEZjSznjgxYtcWe13jXEc/p1sVzEpP3mxkrHQ6q MUV1hSTb3zK+LY9XTmIdjQG3aSlOWCkHvUf/PmWwinq37hRg1Yhz55ybaQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKUJehVq7y+C/xOzwWr/b34W2wLIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzQyZjdm OC03NDA3LTQzMmQtYmJiNS0wZDMzOTcwN2NiODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNDJmN2Y4 LTc0MDctNDMyZC1iYmI1LTBkMzM5NzA3Y2I4OC8xL3BRbDZGV3J2TDRMX0U3UEJh djl2ZmhiYkFzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9ENAwQBW+gYMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMzmzANBgkqhkiG9w0BAQsFAAOCAQEAhoMx9zM7HbwTvDJEK2zMXHe1 8zmZEAMHbLizNgSeO5oCjZwT07wNNgzfV7KvumeLp3/PVke4Js6sxQM5hCSK27EI EWNTJi38VieXwZ18rP8/vxvuSsnIgSR6a0+zFk57V2W5F62xILSSJ7ulwQZBMYkM 4u6DZRZGX3ZycswjQoKhFhRPj37E2+okE7BJ/AuRl5/J7iWzZ+Tvxl47Pjm/tnSB dKyGRS7LHIf9DxBDWlkncSesvl/PPrWJ8AE7NfYtUT5kmxtlG/qwRNhN5SR3ubeG QE5hz6zRsSwHHZkeGGcN+9lnVQgauB2/zwronuxXkKZRPtBbnbHWxgTWlUsBCw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:43 2026 by rpki-client