This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer (raw, json) Hash identifier: d++Jxr+Mvuw7F2a6cA9n/cxjFcxGqFIoQw1A244LKmc= Subject key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A346D48C382411F7B66658A17DDB65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24670 IP: 192.94.58.0/24 IP: 193.150.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:46:d4:8c:38:24:11:f7:b6:66:58:a1:7d:db:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:63:cf:49:61:59:91:c2:82:2f:93:5a:77: b5:8e:d3:56:90:0d:2d:63:9a:51:2c:30:1c:49:c6: 97:a3:61:ed:d8:64:81:7e:70:46:d3:66:2b:28:5f: ae:06:a4:8b:47:df:e3:fc:b2:d0:cf:53:83:5d:d7: 5f:f1:75:8e:9c:74:2c:1e:93:5b:b3:93:93:40:36: 68:09:e4:5a:22:4c:1d:10:b8:17:1c:f3:95:84:8d: ec:45:05:5a:ea:be:93:05:1d:87:c5:cd:68:b0:d0: b6:07:72:a3:cd:fc:08:f4:67:9f:27:cf:05:d5:7e: d5:93:08:a2:49:9c:e1:42:c4:f2:71:a7:13:bd:c9: f4:d1:7d:e3:da:99:6f:20:03:fd:1f:b8:06:7b:34: 42:31:74:c6:86:1a:c5:a4:8a:32:7d:75:26:5d:eb: 83:99:35:7c:8d:66:e7:68:dc:f2:3d:fc:7a:68:b2: 24:ab:6d:4a:8e:df:af:1b:2f:2b:23:35:f1:c8:81: 8d:72:80:30:61:4a:a1:ad:bc:88:06:82:b8:87:7f: 7b:22:43:28:c3:dd:82:f0:3d:0d:25:e2:ab:43:94: 5d:77:5a:e6:c6:78:c7:7a:62:f3:8d:53:7a:f4:b9: 07:cf:03:c4:a3:4f:14:e3:e1:8b:d8:78:b0:45:3a: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.94.58.0/24 193.150.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24670 Signature Algorithm: sha256WithRSAEncryption 51:03:35:9b:45:ed:2e:53:3a:7d:6e:52:0a:d3:ae:cb:33:84: 72:8b:5d:35:58:c7:d5:e5:c3:ce:21:1a:93:bf:c6:c2:e7:d5: b4:04:01:b7:89:25:23:74:f0:60:23:d7:5e:42:14:14:a5:2e: d8:5e:69:77:24:29:91:3c:46:b2:e8:c9:53:f3:05:05:00:56: 87:a8:9f:d5:33:e3:97:b2:8e:bc:4f:4b:6c:3f:50:0b:9c:10: 4a:5c:05:2a:90:0a:31:a6:61:12:49:2a:ef:1d:1b:4b:1c:1f: 1a:56:e3:39:ac:4f:2b:9d:c4:ad:85:b1:07:3e:57:f3:fb:92: 25:64:ed:a8:18:63:24:85:44:31:19:73:ab:8e:0f:6f:bc:04: a3:ed:3c:af:ee:0d:56:c0:4a:26:94:11:84:e1:31:e5:97:5f: 45:d4:ce:c4:74:2e:69:c8:8b:69:9a:a1:4e:4a:ce:c6:e2:8e: fd:f8:57:6f:2e:73:7b:3e:3d:c0:b7:79:4f:2f:97:9c:81:0f: a4:4d:5c:51:d4:80:ba:79:82:d9:54:56:ad:4d:a7:df:a9:28: 09:d6:6e:92:3a:32:50:54:93:60:ef:74:0d:64:86:8b:c8:2e: fc:71:80:75:ee:34:5f:7c:ee:71:2f:69:05:a5:38:b2:42:05: 2f:27:41:fb -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt4o0bUjDgkEfe2ZlihfdtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWIwYzA1NzMxZWZhNGJiZTVjMmEzMGFlNTE4OWY3Nzg1ZDJkNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQljz0lhWZHCgi+TWne1jtNWkA0t Y5pRLDAcScaXo2Ht2GSBfnBG02YrKF+uBqSLR9/j/LLQz1ODXddf8XWOnHQsHpNb s5OTQDZoCeRaIkwdELgXHPOVhI3sRQVa6r6TBR2Hxc1osNC2B3KjzfwI9GefJ88F 1X7VkwiiSZzhQsTycacTvcn00X3j2plvIAP9H7gGezRCMXTGhhrFpIoyfXUmXeuD mTV8jWbnaNzyPfx6aLIkq21Kjt+vGy8rIzXxyIGNcoAwYUqhrbyIBoK4h397IkMo w92C8D0NJeKrQ5Rdd1rmxnjHemLzjVN69LkHzwPEo08U4+GL2HiwRTp4PQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFKWwwFcx76S75cKjCuUYn3eF0tSZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzI1MTQ5 Yy0wOTMyLTQ2ODMtOGFiOC1kMTVmZWJkZjVlY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMjUxNDlj LTA5MzItNDY4My04YWI4LWQxNWZlYmRmNWVjZi8xL3BiREFWekh2cEx2bHdxTUs1 UmlmZDRYUzFKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwF46AwQCwZa8MBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAmBeMA0GCSqGSIb3DQEBCwUAA4IBAQBRAzWbRe0uUzp9blIK067LM4Ry i101WMfV5cPOIRqTv8bC59W0BAG3iSUjdPBgI9deQhQUpS7YXml3JCmRPEay6MlT 8wUFAFaHqJ/VM+OXso68T0tsP1ALnBBKXAUqkAoxpmESSSrvHRtLHB8aVuM5rE8r ncSthbEHPlfz+5IlZO2oGGMkhUQxGXOrjg9vvASj7Tyv7g1WwEomlBGE4THll19F 1M7EdC5pyItpmqFOSs7G4o79+FdvLnN7Pj3At3lPL5ecgQ+kTVxR1IC6eYLZVFat TaffqSgJ1m6SOjJQVJNg73QNZIaLyC78cYB17jRffO5xL2kFpTiyQgUvJ0H7 -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:40 2026 by rpki-client