This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer (raw, json) Hash identifier: tpKnpd+x761UPA2BgbS3OyJPf+hmQVssoH3aamjbOXw= Subject key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15A5BCE755A662D10928BBA6B328F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.170.152.0/24 IP: 185.170.155.0/24 IP: 185.207.132.0/24 IP: 185.207.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a5:bc:e7:55:a6:62:d1:09:28:bb:a6:b3:28:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:f3:46:98:8d:a0:78:34:4a:e0:e9:8d:fc: 7f:dc:0e:42:04:59:d0:9d:39:a7:e0:9c:04:14:f9: ba:cd:68:df:62:2d:df:fe:80:dd:a8:d3:28:6d:17: b2:cf:b2:9a:80:8b:ad:24:92:53:23:cf:76:2c:dd: f5:f0:ec:10:a9:4e:3d:58:89:dd:b4:86:1e:c7:b7: 5e:b8:e7:d0:49:c9:a9:13:67:98:28:29:46:db:16: 9a:e4:e6:7c:c0:d0:47:16:de:f6:6e:11:8d:ff:dd: 96:1c:ad:33:7f:a4:ea:4a:97:25:0b:57:6f:54:b0: 8a:37:c2:e0:b9:b6:c0:50:1d:9a:b6:dd:b7:6a:f8: ed:c0:8e:e8:1f:44:59:cc:13:9d:d0:96:9e:fd:a9: bc:88:80:69:5d:90:fe:6c:f2:c8:34:88:c2:d2:f3: 68:05:92:c8:cb:9f:26:1e:22:06:33:6e:b1:01:85: bd:75:6e:4d:46:4c:75:e2:55:e5:5f:f0:2e:48:d1: 59:78:f2:e2:38:b4:87:d7:f8:6c:89:e1:fe:31:7f: 17:65:10:56:5a:23:4f:28:53:0d:98:67:4b:14:36: 7e:bd:74:2c:8e:72:7c:0d:3e:d1:9a:9c:ac:66:86: 1e:5a:08:02:76:fe:c9:99:55:42:98:03:a1:0d:e9: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.152.0/24 185.170.155.0/24 185.207.132.0/24 185.207.134.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:b3:81:c8:bd:de:2f:b6:5c:20:b6:ca:f2:7b:01:01:b4:c5: 82:7a:79:07:f7:e9:a9:a2:9b:ed:7a:84:23:66:fd:f4:af:80: 3f:85:aa:77:3c:cc:64:7b:03:7f:13:d8:d0:5a:9a:87:35:28: 3a:f7:9c:27:5a:e8:b7:73:98:31:72:a1:87:a7:25:d1:79:1d: dc:90:6d:e0:12:33:fa:9e:94:1e:81:d2:85:41:51:d1:17:87: de:ff:f3:83:74:d5:0c:6a:28:44:16:6f:ba:77:33:d5:60:15: b8:9e:88:5f:b8:70:98:c1:a4:92:bd:c0:58:5a:99:9f:cd:49: d9:e5:f2:5a:cc:76:73:23:b7:f8:fe:ab:fc:58:0f:bf:37:d2: 94:a9:53:8d:24:6e:b9:42:63:a2:c2:8e:56:5a:52:73:3b:a0: 59:f3:ed:cd:01:01:bc:0e:5e:d3:03:bc:33:c7:d7:bb:e2:c5: c8:fd:d4:72:84:89:fd:32:8b:4e:92:1a:a6:50:b5:d2:ce:73: 93:8c:ff:d7:55:bf:26:47:8d:f2:de:44:8b:15:89:7b:c9:21: 21:b5:63:ef:57:61:9b:15:fa:32:e3:e2:08:b9:23:2e:82:af: 05:f2:b6:74:30:18:0c:87:62:b5:2f:f0:d3:f8:ce:58:d2:48: 51:68:af:0e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt/FaW851WmYtEJKLumsyjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjQ3ODkzZmI1YjM0OGU2OGE2NmQ1NWEyOGYyNzhjYmYzOTMxZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2HzRpiNoHg0SuDpjfx/3A5CBFnQ nTmn4JwEFPm6zWjfYi3f/oDdqNMobReyz7KagIutJJJTI892LN318OwQqU49WInd tIYex7deuOfQScmpE2eYKClG2xaa5OZ8wNBHFt72bhGN/92WHK0zf6TqSpclC1dv VLCKN8LgubbAUB2att23avjtwI7oH0RZzBOd0Jae/am8iIBpXZD+bPLINIjC0vNo BZLIy58mHiIGM26xAYW9dW5NRkx14lXlX/AuSNFZePLiOLSH1/hsieH+MX8XZRBW WiNPKFMNmGdLFDZ+vXQsjnJ8DT7RmpysZoYeWggCdv7JmVVCmAOhDenOcQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFKZHiT+1s0jmimbVWijyeMvzkx30MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2RhOGNi MS0xYmZjLTQzZmQtYTBkMi1kNjI0NDk2ZGRjYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvZGE4Y2Ix LTFiZmMtNDNmZC1hMGQyLWQ2MjQ0OTZkZGNjOC8xL3BrZUpQN1d6U09hS1p0VmFL UEo0eV9PVEhmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAuaqYAwQAuaqbAwQAuc+EAwQAuc+GMA0GCSqG SIb3DQEBCwUAA4IBAQAOs4HIvd4vtlwgtsryewEBtMWCenkH9+mpopvteoQjZv30 r4A/hap3PMxkewN/E9jQWpqHNSg695wnWui3c5gxcqGHpyXReR3ckG3gEjP6npQe gdKFQVHRF4fe//ODdNUMaihEFm+6dzPVYBW4nohfuHCYwaSSvcBYWpmfzUnZ5fJa zHZzI7f4/qv8WA+/N9KUqVONJG65QmOiwo5WWlJzO6BZ8+3NAQG8Dl7TA7wzx9e7 4sXI/dRyhIn9MotOkhqmULXSznOTjP/XVb8mR43y3kSLFYl7ySEhtWPvV2GbFfoy 4+IIuSMugq8F8rZ0MBgMh2K1L/DT+M5Y0khRaK8O -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:12 2026 by rpki-client