This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer File: pVz4nuVieX53WqTR0ffkX0Zqc8M.cer (raw, json) Hash identifier: Gn6mHUB1UFv98nfG6wDrjWCqUl/f85AFJL1i1zeToxE= Subject key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791113ABA8263A7F6275A49C2DE0CD0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208058 IP: 45.145.39.0/24 IP: 2a13:5a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:13:ab:a8:26:3a:7f:62:75:a4:9c:2d:e0:cd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:55:be:f4:72:9b:ef:66:5c:54:2d:c4:cd: 16:ef:71:1b:bc:3b:00:09:25:0b:e0:46:23:8d:40: 44:62:e2:28:38:e1:78:b5:28:58:fa:5b:89:36:76: 12:a6:40:dc:8a:63:43:90:48:85:14:e5:92:34:a8: f0:1c:00:b4:e9:d6:24:2a:d6:78:69:eb:15:ca:9b: d2:8a:b8:8d:e1:1b:09:f6:38:20:96:96:35:08:bc: 00:44:05:b1:2b:dc:16:c3:ec:f5:84:19:19:8f:ef: b1:98:9e:2d:f9:5a:07:65:0e:0f:0c:49:14:bb:15: 55:40:de:14:f0:2b:23:83:e4:b8:b5:77:f8:16:5d: 40:3a:1a:bd:fa:e2:12:25:ee:f5:b6:b8:df:ef:c5: 10:cf:b3:29:2b:88:cf:83:97:88:38:28:a5:83:88: 7e:78:83:77:3e:43:88:44:b9:e1:87:46:75:f7:ad: 69:56:1d:80:d5:d3:90:05:46:85:7c:0b:77:4e:1b: 09:0f:35:7e:6f:24:30:58:20:fc:70:f1:22:cf:e8: 05:eb:a2:ad:3a:eb:ab:57:ed:2c:b8:6f:5d:2e:92: ad:8e:3b:19:66:d7:2d:be:64:13:3b:bc:e9:1a:3e: 13:ca:00:a8:e9:25:b4:ff:c3:73:5c:19:7f:ca:d4: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.39.0/24 IPv6: 2a13:5a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208058 Signature Algorithm: sha256WithRSAEncryption 6f:25:b5:71:4b:fa:33:3d:81:ed:65:19:b0:27:0c:a1:55:21: 7c:eb:2a:ad:8c:1d:36:3a:de:a2:ae:18:1c:21:ec:63:12:7d: 78:c7:5e:15:3a:dd:9f:16:ff:c6:de:30:c9:b7:45:db:74:75: b7:9d:cd:43:a6:3d:25:3b:36:0e:8b:36:0f:81:14:95:58:60: fc:e1:0a:9e:f3:46:06:32:a7:38:8c:f5:d0:91:29:a4:74:f1: ea:6e:f5:e2:c3:be:d7:71:89:c6:5c:c0:67:da:20:02:c7:d2: 74:41:10:53:5a:7c:85:f6:0f:7c:d1:f2:b3:6e:50:d0:58:ec: 4f:b9:27:a8:a0:c9:f5:12:67:b8:b5:b7:bd:8c:ff:09:7c:3d: 6e:ad:01:9a:ad:0e:cd:17:19:1b:10:e4:e0:92:3a:d7:b9:3d: f2:3d:06:0a:8c:44:10:0b:88:8d:0c:14:9c:7f:c3:78:67:46: be:fb:b6:55:eb:7d:d9:0c:f2:b7:10:a2:03:6a:34:50:82:20: bb:c4:2b:16:60:68:c8:d7:18:6b:9a:6e:d0:2f:27:d7:e2:56: 47:f2:24:95:70:66:ec:88:6b:f8:7b:cb:57:63:71:15:bf:c0: 4c:03:6c:62:91:8a:6a:32:c1:5c:92:12:e7:5e:48:97:f3:8b: 4d:10:b8:73 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EROrqCY6f2J1pJwt4M0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTVjZjg5ZWU1NjI3OTdlNzc1YWE0ZDFkMWY3ZTQ1ZjQ2NmE3M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8FVvvRym+9mXFQtxM0W73EbvDsA CSUL4EYjjUBEYuIoOOF4tShY+luJNnYSpkDcimNDkEiFFOWSNKjwHAC06dYkKtZ4 aesVypvSiriN4RsJ9jgglpY1CLwARAWxK9wWw+z1hBkZj++xmJ4t+VoHZQ4PDEkU uxVVQN4U8Csjg+S4tXf4Fl1AOhq9+uISJe71trjf78UQz7MpK4jPg5eIOCilg4h+ eIN3PkOIRLnhh0Z1961pVh2A1dOQBUaFfAt3ThsJDzV+byQwWCD8cPEiz+gF66Kt OuurV+0suG9dLpKtjjsZZtctvmQTO7zpGj4TygCo6SW0/8NzXBl/ytTO1QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKVc+J7lYnl+d1qk0dH35F9GanPDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2I3MmNi MC0wZTU3LTQ2OGMtODlmMC1hYmNiMWU3NTgyYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYjcyY2Iw LTBlNTctNDY4Yy04OWYwLWFiY2IxZTc1ODJiMy8xL3BWejRudVZpZVg1M1dxVFIw ZmZrWDBacWM4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALZEnMA0EAgACMAcDBQMqE1pAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsujANBgkqhkiG9w0BAQsFAAOCAQEAbyW1cUv6Mz2B 7WUZsCcMoVUhfOsqrYwdNjreoq4YHCHsYxJ9eMdeFTrdnxb/xt4wybdF23R1t53N Q6Y9JTs2Dos2D4EUlVhg/OEKnvNGBjKnOIz10JEppHTx6m714sO+13GJxlzAZ9og AsfSdEEQU1p8hfYPfNHys25Q0FjsT7knqKDJ9RJnuLW3vYz/CXw9bq0Bmq0OzRcZ GxDk4JI617k98j0GCoxEEAuIjQwUnH/DeGdGvvu2Vet92QzytxCiA2o0UIIgu8Qr FmBoyNcYa5pu0C8n1+JWR/IklXBm7Ihr+HvLV2NxFb/ATANsYpGKajLBXJIS515I l/OLTRC4cw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:16 2026 by rpki-client