This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer File: pl-8tOowipiwk5diXmOGY4PBbdA.cer (raw, json) Hash identifier: W/gQsCuDA2/Nc+cFuK1Q61ts7nYOCi6F+zDZiSZ3RnY= Subject key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F04A314B9AF78B913604EA974257C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 32708 AS: 38237 AS: 50193 IP: 45.65.44.0/22 IP: 85.92.100.0/22 IP: 103.91.56.0/22 IP: 103.108.188.0/23 IP: 103.115.204.0/23 IP: 103.143.86.0/23 IP: 103.211.0.0/22 IP: 123.253.104.0/22 IP: 185.211.78.0/24 IP: 2a0d:b8c0::/29 IP: 2a11:b000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:04:a3:14:b9:af:78:b9:13:60:4e:a9:74:25:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:57:f0:bf:05:52:54:0c:12:29:35:ec:9e: 9b:cb:fd:ca:6e:e3:ba:ec:45:e5:a8:36:9d:97:6e: 9f:88:e3:e9:33:90:93:dc:3b:a0:1f:34:3a:0a:8d: 45:ac:b6:23:59:e8:0c:22:2f:9b:b1:8c:1c:f0:a0: b2:c5:19:4f:24:da:7c:5a:62:96:c3:8d:6a:78:6e: 00:65:e0:ba:af:bf:e2:13:c8:e1:5d:24:b0:ac:99: f6:de:15:c4:d4:36:3a:b7:89:6c:17:22:40:ef:e4: de:ee:06:da:aa:03:97:e5:d6:c4:2f:d5:0f:fe:c6: 22:d3:06:92:23:fa:79:79:9d:c6:a8:16:84:17:0d: 9e:17:7b:64:ab:6a:48:29:52:b2:5c:e1:b0:94:5a: a4:d5:b0:05:f6:56:22:6d:f9:64:27:b3:7f:8f:21: 66:6b:09:e2:fb:b7:5e:27:da:61:33:17:2e:46:d7: b5:b8:7a:51:c1:02:ab:6c:0e:0f:bb:f1:50:cc:0d: df:29:1e:ef:57:69:c4:27:ec:9a:9b:e9:3c:47:b0: 7b:4c:30:d2:8b:3e:e9:d0:b9:b2:88:e8:bb:fe:04: 76:ce:ce:1a:28:d7:5c:a3:a6:d3:85:0e:12:c0:7e: 19:20:2e:7c:ac:59:65:21:97:c8:08:2f:36:aa:3f: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.44.0/22 85.92.100.0/22 103.91.56.0/22 103.108.188.0/23 103.115.204.0/23 103.143.86.0/23 103.211.0.0/22 123.253.104.0/22 185.211.78.0/24 IPv6: 2a0d:b8c0::/29 2a11:b000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32708 38237 50193 Signature Algorithm: sha256WithRSAEncryption 4b:fe:74:3c:bb:bb:d4:47:db:53:8e:5e:dd:44:d5:7b:2a:dd: 2a:11:e4:f0:93:84:80:35:4a:70:0a:70:e8:a7:94:e2:31:4c: d5:ed:4e:92:95:b9:94:4e:08:3f:65:7e:99:23:7e:28:fa:33: 88:a0:2f:76:d9:54:f1:00:7e:3f:2d:44:48:4c:f7:a4:87:fa: 26:9d:bc:c2:c4:08:3e:63:54:1d:ee:4b:6e:2b:e0:a6:97:12: d1:cd:59:44:77:f4:1b:8a:94:ae:39:d6:0a:71:6f:92:7f:e1: c5:b2:01:41:67:bc:3f:a3:99:78:a7:6b:fb:9f:3c:5e:b8:79: 87:c7:4e:42:5b:db:b1:5d:7d:79:78:f2:4b:f5:9f:c6:80:a0: b9:c5:d8:79:62:c3:7b:5c:36:a8:83:84:ca:80:c7:56:00:1e: ee:38:be:f0:88:fb:8d:fb:e4:ef:ef:7c:79:b8:29:aa:57:7b: 9c:98:5b:b4:5a:3a:c6:cc:09:29:13:6b:24:08:07:91:14:c4: 8e:11:44:ea:83:0a:2e:76:9a:f4:43:d1:46:16:a0:e7:d5:1a: 18:59:3a:a8:2f:7a:8e:29:7d:3b:88:28:39:8a:d9:01:e2:d0: e9:da:84:0a:86:18:c8:37:f2:6b:60:0a:74:da:7a:33:30:4c: 97:53:0f:45 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt5fwSjFLmveLkTYE6pdCV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjVmYmNiNGVhMzA4YTk4YjA5Mzk3NjI1ZTYzODY2MzgzYzE2ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5JX8L8FUlQMEik17J6by/3KbuO6 7EXlqDadl26fiOPpM5CT3DugHzQ6Co1FrLYjWegMIi+bsYwc8KCyxRlPJNp8WmKW w41qeG4AZeC6r7/iE8jhXSSwrJn23hXE1DY6t4lsFyJA7+Te7gbaqgOX5dbEL9UP /sYi0waSI/p5eZ3GqBaEFw2eF3tkq2pIKVKyXOGwlFqk1bAF9lYibflkJ7N/jyFm awni+7deJ9phMxcuRte1uHpRwQKrbA4Pu/FQzA3fKR7vV2nEJ+yam+k8R7B7TDDS iz7p0LmyiOi7/gR2zs4aKNdco6bThQ4SwH4ZIC58rFllIZfICC82qj+LQwIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFKZfvLTqMIqYsJOXYl5jhmODwW3QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2Y3MjMx ZC1jNTYxLTRhYTItYjgwZS02MmQ0MmZlNmZkM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvZjcyMzFk LWM1NjEtNGFhMi1iODBlLTYyZDQyZmU2ZmQzYy8xL3BsLTh0T293aXBpd2s1ZGlY bU9HWTRQQmJkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF BwEHAQH/BFYwVDA8BAIAATA2AwQCLUEsAwQCVVxkAwQCZ1s4AwQBZ2y8AwQBZ3PM AwQBZ49WAwQCZ9MAAwQCe/1oAwQAudNOMBQEAgACMA4DBQMqDbjAAwUDKhGwADAj BggrBgEFBQcBCAEB/wQUMBKgEDAOAgJ/xAIDAJVdAgMAxBEwDQYJKoZIhvcNAQEL BQADggEBAEv+dDy7u9RH21OOXt1E1Xsq3SoR5PCThIA1SnAKcOinlOIxTNXtTpKV uZROCD9lfpkjfij6M4igL3bZVPEAfj8tREhM96SH+iadvMLECD5jVB3uS24r4KaX EtHNWUR39BuKlK451gpxb5J/4cWyAUFnvD+jmXina/ufPF64eYfHTkJb27FdfXl4 8kv1n8aAoLnF2Hliw3tcNqiDhMqAx1YAHu44vvCI+4375O/vfHm4KapXe5yYW7Ra OsbMCSkTayQIB5EUxI4RROqDCi52mvRD0UYWoOfVGhhZOqgveo4pfTuIKDmK2QHi 0OnahAqGGMg38mtgCnTaejMwTJdTD0U= -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:16 2026 by rpki-client