This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer File: pZrIMj67a-IPronQmMokE4-MkAU.cer (raw, json) Hash identifier: EVA71IzuZIGUU5UEKese2tDCfeEqwAOAaO5i7n2wSSs= Subject key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFCF876537EF1509E0F14AA149275 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24595 AS: 34663 IP: 85.159.96.0/21 IP: 185.94.120.0/22 IP: 2a02:a08::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fc:f8:76:53:7e:f1:50:9e:0f:14:aa:14:92:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f9:87:40:37:14:99:8a:f0:9f:ac:1b:d5:3a: c4:9e:9b:bb:80:29:89:95:b5:19:33:20:f5:61:18: 49:80:ec:8a:72:6e:f0:07:02:76:fc:21:36:62:d0: c3:5f:f5:f2:27:a5:d6:fe:41:68:30:92:4e:d6:3e: db:2f:24:f0:3d:49:9d:9b:c7:1a:10:9e:b1:b3:0c: 42:de:05:00:8c:47:85:ed:e8:b7:ec:8a:09:61:21: 05:16:82:ad:32:6f:0d:b2:d1:83:1d:87:96:75:e6: e0:b4:36:f8:ce:b8:5e:d0:71:4c:5b:ca:c7:13:e6: 0c:b2:9a:f2:83:c4:43:5d:eb:7e:83:72:f1:80:ec: d2:2b:bf:d8:11:7e:94:3f:4f:17:bb:d1:db:62:01: 36:b6:6a:8f:8e:20:27:34:b0:e9:a1:df:aa:1c:2a: 75:ad:23:c5:34:86:9a:01:27:0f:f9:a1:cc:49:23: e0:5f:94:12:d8:f2:b1:3d:18:6c:c0:71:a3:e3:bf: 08:aa:77:cf:41:82:c6:05:51:fd:e9:70:92:ec:58: 2a:17:09:55:a8:da:da:d9:48:ad:4e:42:90:2c:34: 5e:6c:08:ba:99:31:ad:28:f6:ef:06:10:5d:b8:72: 36:2b:58:44:58:a7:8b:b5:bc:22:3c:22:16:15:d5: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.96.0/21 185.94.120.0/22 IPv6: 2a02:a08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24595 34663 Signature Algorithm: sha256WithRSAEncryption 81:b9:85:79:4a:e0:09:41:c3:a1:50:9c:7a:b2:36:22:49:86: eb:95:56:d2:bb:03:f1:76:18:4e:2f:cb:a4:80:90:b6:7e:e3: b8:20:12:7c:79:e1:67:b2:47:db:29:ff:bb:3f:a2:fa:d5:73: 1b:27:95:6d:75:a6:9b:47:a3:51:a4:3c:53:41:8e:63:5c:dc: 15:b5:ea:72:5a:58:a0:f1:95:c5:96:ad:33:61:67:86:b1:20: 5e:03:6a:4b:60:54:76:5c:1b:56:3d:89:3c:4c:d1:04:6a:01: 10:c2:fa:19:11:14:c5:7c:88:dd:f4:91:06:30:45:77:3a:9b: 25:c3:0f:69:a3:5f:16:42:7a:7d:7a:24:9e:9a:2a:66:e1:59: 8e:49:cd:c9:fd:93:51:6d:d6:f1:e0:f0:95:78:8f:a6:06:c4: d0:81:ad:eb:28:e6:a9:02:cc:da:bc:82:bd:45:db:0c:6c:fa: e2:28:08:7b:ea:2a:ca:70:77:2d:b2:44:e5:e6:b8:12:00:32: 58:d1:9f:5b:7b:06:28:68:ec:97:7a:29:3e:8c:39:6f:70:8c: 42:9e:e0:0c:8d:92:ea:75:82:57:53:56:41:71:9e:72:38:f0: 49:d1:ec:d5:86:53:0c:18:99:65:8f:83:a3:fe:f4:c7:54:15: 10:bd:aa:d1 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt9Wvz4dlN+8VCeDxSqFJJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTlhYzgzMjNlYmI2YmUyMGZhZTg5ZDA5OGNhMjQxMzhmOGM5MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fmHQDcUmYrwn6wb1TrEnpu7gCmJ lbUZMyD1YRhJgOyKcm7wBwJ2/CE2YtDDX/XyJ6XW/kFoMJJO1j7bLyTwPUmdm8ca EJ6xswxC3gUAjEeF7ei37IoJYSEFFoKtMm8NstGDHYeWdebgtDb4zrhe0HFMW8rH E+YMspryg8RDXet+g3LxgOzSK7/YEX6UP08Xu9HbYgE2tmqPjiAnNLDpod+qHCp1 rSPFNIaaAScP+aHMSSPgX5QS2PKxPRhswHGj478IqnfPQYLGBVH96XCS7FgqFwlV qNra2UitTkKQLDRebAi6mTGtKPbvBhBduHI2K1hEWKeLtbwiPCIWFdUx3wIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFKWayDI+u2viD66J0JjKJBOPjJAFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2EwMWY4 Mi05MTkzLTQxOTktOTVhOC04M2FlNWQ5YzgzMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvYTAxZjgy LTkxOTMtNDE5OS05NWE4LTgzYWU1ZDljODMyZi8xL3BacklNajY3YS1JUHJvblFt TW9rRTQtTWtBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDVZ9gAwQCuV54MA0EAgACMAcDBQAqAgoIMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAmATAgMAh2cwDQYJKoZIhvcNAQELBQADggEB AIG5hXlK4AlBw6FQnHqyNiJJhuuVVtK7A/F2GE4vy6SAkLZ+47ggEnx54WeyR9sp /7s/ovrVcxsnlW11pptHo1GkPFNBjmNc3BW16nJaWKDxlcWWrTNhZ4axIF4Daktg VHZcG1Y9iTxM0QRqARDC+hkRFMV8iN30kQYwRXc6myXDD2mjXxZCen16JJ6aKmbh WY5Jzcn9k1Ft1vHg8JV4j6YGxNCBreso5qkCzNq8gr1F2wxs+uIoCHvqKspwdy2y ROXmuBIAMljRn1t7Biho7Jd6KT6MOW9wjEKe4AyNkup1gldTVkFxnnI48EnR7NWG UwwYmWWPg6P+9MdUFRC9qtE= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:40 2026 by rpki-client