This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer File: pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer (raw, json) Hash identifier: fdRyZsSD0A8eO2Lisns37fr5RzZbRZh+kyRLvDBZhYk= Subject key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA34871BABF7DD550B28EC92D86FE19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208575 AS: 208608 AS: 208646 IP: 45.91.204.0/22 IP: 45.128.16.0/22 IP: 2a0e:1540::/29 IP: 2a0e:3bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:48:71:ba:bf:7d:d5:50:b2:8e:c9:2d:86:fe:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a566d8337776c98746bd231e69e185db2a9a5be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:d7:e5:b8:c7:c1:1f:1b:7e:41:b0:77:36: 8f:4c:e3:ef:88:3c:2d:0e:13:5d:39:16:c4:df:f8: e0:51:ea:f9:59:f2:8a:2a:b7:82:a7:fb:e3:9e:fb: 25:58:29:62:99:42:45:1d:08:bb:45:8d:71:1b:79: 64:8c:45:00:4b:90:0a:ac:96:f7:ea:6e:ab:83:bc: 2f:c6:1a:8c:b5:35:3f:d1:52:87:4a:4f:1d:5d:24: 3f:fc:b5:57:64:90:2a:cc:89:53:ce:8e:90:42:c9: 38:f2:72:e0:e7:bb:18:e1:86:1d:0d:68:67:29:0f: 63:28:5e:1e:d5:64:d7:d5:44:3e:95:8c:ce:96:8f: a9:a9:7a:c6:22:83:64:a7:a1:e2:1f:ba:43:57:49: df:f0:8c:f3:cb:2a:c4:e4:f2:21:af:64:6e:7f:15: 41:01:c5:84:54:2e:24:ae:33:94:fe:7b:3f:91:c2: 1f:47:1c:d4:ef:bc:a1:6e:e5:15:8f:8d:50:68:4c: b9:6d:d6:d7:79:8f:67:78:4e:75:6d:03:b8:63:65: 40:a7:8c:6b:b9:e3:c0:19:68:6c:8c:73:e0:75:ef: 10:3f:41:fd:36:74:34:42:45:3b:16:af:83:a6:21: 4d:a4:7f:bb:87:bd:5f:ba:d0:2a:c0:e1:70:cb:eb: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.204.0/22 45.128.16.0/22 IPv6: 2a0e:1540::/29 2a0e:3bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208575 208608 208646 Signature Algorithm: sha256WithRSAEncryption 5c:f5:cb:a3:f8:f8:bc:9c:7f:ab:7f:2c:65:61:27:d2:bc:fa: c1:d4:80:b1:8f:35:9b:1c:41:9a:e3:78:fd:68:81:44:54:23: 58:26:67:3b:5e:a3:fe:9f:dd:38:1c:ff:9f:26:bf:61:08:9f: 7b:ac:b3:70:6d:3e:b5:29:42:8c:29:3c:2b:ab:a5:6d:2c:25: 79:8e:9e:89:01:80:16:ae:de:e6:69:5a:1c:38:58:12:8d:98: f1:81:6c:af:39:2f:04:cb:d9:ab:35:e7:80:34:d5:4f:0e:64: 04:b7:e4:98:6f:8c:13:9c:c8:23:b8:ff:80:d9:6e:0d:23:40: 0a:50:5e:d1:2b:9d:72:89:51:1a:ec:f8:e0:80:a8:51:85:e4: f6:c6:68:39:8e:ef:a2:07:3f:7b:8f:4b:e5:76:d9:c4:dd:9a: 99:c0:b2:3a:7a:03:94:5a:ef:bc:1a:54:ec:56:18:f4:dd:42: be:73:fb:38:02:66:25:92:16:a9:62:e1:56:f0:eb:12:60:56: 78:49:8c:22:37:fb:2d:2c:4c:4b:ad:0c:86:2d:ed:fc:fe:68: 51:b6:07:16:25:5c:b3:a8:ab:f7:59:67:87:6c:bf:d9:4b:69: 65:74:70:68:20:bd:cf:80:bb:80:71:d4:01:38:da:eb:ce:a2: c7:49:12:47 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt7o0hxur991VCyjskthv4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTY2ZDgzMzc3NzZjOTg3NDZiZDIzMWU2OWUxODVkYjJhOWE1YmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YnX5bjHwR8bfkGwdzaPTOPviDwt DhNdORbE3/jgUer5WfKKKreCp/vjnvslWClimUJFHQi7RY1xG3lkjEUAS5AKrJb3 6m6rg7wvxhqMtTU/0VKHSk8dXSQ//LVXZJAqzIlTzo6QQsk48nLg57sY4YYdDWhn KQ9jKF4e1WTX1UQ+lYzOlo+pqXrGIoNkp6HiH7pDV0nf8IzzyyrE5PIhr2RufxVB AcWEVC4krjOU/ns/kcIfRxzU77yhbuUVj41QaEy5bdbXeY9neE51bQO4Y2VAp4xr uePAGWhsjHPgde8QP0H9NnQ0QkU7Fq+DpiFNpH+7h71futAqwOFwy+urJQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFKVm2DN3dsmHRr0jHmnhhdsqmlviMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzAxNjhh Yy0zNDJjLTRkZDAtOTFhOC0xYjc1ODY3ZThkZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvMDE2OGFj LTM0MmMtNGRkMC05MWE4LTFiNzU4NjdlOGRmZi8xL3BXYllNM2QyeVlkR3ZTTWVh ZUdGMnlxYVctSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLVvMAwQCLYAQMBQEAgACMA4DBQMqDhVAAwUD Kg47wDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDLr8CAwMu4AIDAy8GMA0GCSqG SIb3DQEBCwUAA4IBAQBc9cuj+Pi8nH+rfyxlYSfSvPrB1ICxjzWbHEGa43j9aIFE VCNYJmc7XqP+n904HP+fJr9hCJ97rLNwbT61KUKMKTwrq6VtLCV5jp6JAYAWrt7m aVocOFgSjZjxgWyvOS8Ey9mrNeeANNVPDmQEt+SYb4wTnMgjuP+A2W4NI0AKUF7R K51yiVEa7PjggKhRheT2xmg5ju+iBz97j0vldtnE3ZqZwLI6egOUWu+8GlTsVhj0 3UK+c/s4AmYlkhapYuFW8OsSYFZ4SYwiN/stLExLrQyGLe38/mhRtgcWJVyzqKv3 WWeHbL/ZS2lldHBoIL3PgLuAcdQBONrrzqLHSRJH -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:39 2026 by rpki-client