This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer (raw, json) Hash identifier: r6lm7ZksnfVvOIbRKMUgPK2af2u9tPfTTKGuRfV4ZJo= Subject key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA97934FFD32594C4C6634D8C99CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41054 IP: 185.84.164.0/22 IP: 2a05:a2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:79:34:ff:d3:25:94:c4:c6:63:4d:8c:99:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:fe:45:9a:96:9c:0d:47:c4:6a:07:24:f2: c3:a5:4f:5b:1c:2b:47:13:97:a9:a6:38:ac:27:c0: 58:ed:cc:74:5f:da:6f:73:62:b3:12:4b:e0:f8:5d: 8a:a5:49:d9:52:f6:02:6b:92:b3:6a:64:77:da:79: 34:88:28:07:a6:46:ba:ae:00:a2:0c:2b:99:57:fd: 0a:49:c4:95:c2:64:29:e9:61:da:e2:12:de:9e:10: e3:21:f8:6c:0a:c3:63:33:40:15:31:cb:e7:15:58: ca:74:f2:c1:99:99:34:a3:e8:86:21:98:e9:cd:f0: 86:70:ef:02:5a:fc:7b:4a:27:b3:6b:12:fb:65:52: e1:97:2a:36:5b:76:14:00:00:ce:51:bb:14:42:64: 26:62:d4:98:a7:6d:98:dd:80:d5:de:1a:f1:70:b0: 48:5c:22:ac:07:7b:6b:3d:c5:84:e6:ee:38:2b:19: 43:d2:cf:c0:b5:63:a4:cf:36:07:ca:be:e6:b6:28: d4:95:ed:25:f4:af:83:d1:f1:8d:15:91:70:d6:13: 31:df:a8:1d:29:e3:af:c4:28:68:fb:79:f4:d7:11: 1d:ad:18:7f:19:34:22:b0:e1:7c:32:e4:bb:dd:af: 88:af:79:2a:85:aa:8c:a0:09:d8:1f:fe:19:f5:7a: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.164.0/22 IPv6: 2a05:a2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41054 Signature Algorithm: sha256WithRSAEncryption 1b:3e:5b:cd:04:66:ec:48:62:9b:5e:6e:64:51:14:10:96:2b: 49:1d:b2:97:73:cb:8a:26:34:66:a6:4b:d4:78:2c:b4:2f:02: 4e:80:54:4d:07:ee:74:b0:9b:11:ff:6f:2e:9d:2c:24:34:d5: 2b:24:71:05:3c:6b:05:84:9a:b1:29:48:20:e4:f8:74:59:d4: 12:c5:4b:5b:87:81:5a:50:49:8f:b6:85:b5:e6:ee:3f:79:43: 81:2c:b5:ef:93:5b:fe:cd:7d:1e:e1:9c:c9:25:67:db:b3:55: c8:41:63:cf:4a:22:16:26:76:8c:9f:92:8e:6e:b4:bd:2b:68: ea:02:7e:2e:8b:34:11:b4:61:11:15:d7:e1:d2:af:61:20:91: 82:ad:94:b6:17:1c:e4:49:2e:2d:27:ba:57:21:9e:a6:ae:16: 49:a9:47:a4:ba:34:0b:f9:39:8b:16:e9:2c:be:ec:be:c4:a0: 25:55:40:55:2f:5e:d1:12:e1:12:dd:b9:93:0d:0a:c7:34:0b: d0:0b:76:3c:3b:e8:da:96:4e:a9:ec:50:18:b9:5e:02:8a:be: d3:a6:e6:f1:8b:6f:27:80:dc:71:e8:a2:4d:47:8e:68:11:36: ea:e0:81:30:9a:18:6b:9e:44:71:7d:7b:9b:b6:0c:40:f2:da: 42:2a:9e:1b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fql5NP/TJZTExmNNjJnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjBhZDRiMTVlNWMxY2ZlYzBhZmIxZjgxOGE3NmEwOGYxODYzODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzb+RZqWnA1HxGoHJPLDpU9bHCtH E5eppjisJ8BY7cx0X9pvc2KzEkvg+F2KpUnZUvYCa5KzamR32nk0iCgHpka6rgCi DCuZV/0KScSVwmQp6WHa4hLenhDjIfhsCsNjM0AVMcvnFVjKdPLBmZk0o+iGIZjp zfCGcO8CWvx7SiezaxL7ZVLhlyo2W3YUAADOUbsUQmQmYtSYp22Y3YDV3hrxcLBI XCKsB3trPcWE5u44KxlD0s/AtWOkzzYHyr7mtijUle0l9K+D0fGNFZFw1hMx36gd KeOvxCho+3n01xEdrRh/GTQisOF8MuS73a+Ir3kqhaqMoAnYH/4Z9XoolwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKYK1LFeXBz+wK+x+BinagjxhjhtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2NjYmQ0 NC02M2IzLTQxMDUtYjM5ZC0xYTU1NTlmZGQ0ZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvY2NiZDQ0 LTYzYjMtNDEwNS1iMzlkLTFhNTU1OWZkZDRkZi8xL3BnclVzVjVjSFA3QXI3SDRH S2RxQ1BHR09HMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVSkMA0EAgACMAcDBQMqBaLAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCgXjANBgkqhkiG9w0BAQsFAAOCAQEAGz5bzQRm7Ehi m15uZFEUEJYrSR2yl3PLiiY0ZqZL1HgstC8CToBUTQfudLCbEf9vLp0sJDTVKyRx BTxrBYSasSlIIOT4dFnUEsVLW4eBWlBJj7aFtebuP3lDgSy175Nb/s19HuGcySVn 27NVyEFjz0oiFiZ2jJ+Sjm60vSto6gJ+Los0EbRhERXX4dKvYSCRgq2Uthcc5Eku LSe6VyGepq4WSalHpLo0C/k5ixbpLL7svsSgJVVAVS9e0RLhEt25kw0KxzQL0At2 PDvo2pZOqexQGLleAoq+06bm8YtvJ4DcceiiTUeOaBE26uCBMJoYa55EcX17m7YM QPLaQiqeGw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:36 2026 by rpki-client