This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer File: pnac0wPoTc03o3XW52tgKfzDZ7Q.cer (raw, json) Hash identifier: kYr2sEQwJ5cfKH7w7UvYFlORy12C4driCzt9Uw4TKRc= Subject key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14D3C46A80ACB547888DC8C717F337 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.45.151.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d3:c4:6a:80:ac:b5:47:88:8d:c8:c7:17:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:72:80:25:a3:21:22:cf:3c:5e:a3:b5:1b: d5:82:7a:36:f9:95:2b:73:6f:c6:7d:da:0e:46:52: 3a:9b:e4:64:b6:f1:10:45:a0:7b:6c:ff:17:8c:fb: 31:26:c6:86:ab:7e:5c:8d:29:b3:bc:94:b2:a6:a9: c5:a0:7d:69:e2:01:6b:f4:d8:d7:2e:fb:3f:6b:38: bb:57:75:51:e6:90:1c:5e:d4:b7:b8:84:b8:30:2f: 93:45:b3:82:95:cc:30:4d:15:d4:61:98:d1:81:95: 95:25:b4:b3:c1:c5:8d:2f:ce:79:4c:68:e7:0b:55: e0:21:eb:11:e0:e0:be:cb:ee:0c:27:58:f6:77:46: 1b:b0:8d:96:7d:49:f7:99:ce:20:e3:b2:56:c3:4c: a7:02:d9:6f:6e:90:f6:ad:b2:ae:06:ba:e3:41:58: 30:e7:48:67:fa:59:28:e0:62:2d:6d:c2:7f:b7:7f: a0:7b:af:c8:e0:a6:b0:bd:1b:d7:fb:0b:d0:cd:cd: 55:73:00:3d:95:48:28:6b:31:16:b9:31:b1:35:23: 26:0e:49:3d:68:2a:8d:4a:13:3e:74:0c:27:84:2e: 7f:e5:e7:4b:4c:b5:7e:cc:0f:5a:c9:bb:21:6c:92: 4c:95:de:0e:bc:e3:bf:00:e4:41:12:14:cd:1f:2f: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.151.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:83:0c:7e:d6:34:9f:ba:ef:b9:f3:82:9b:08:d8:2b:ea:0c: 49:6f:55:ea:68:23:23:57:aa:e6:4a:5f:6d:ec:aa:64:9b:12: d3:31:44:b7:6c:cf:6c:d9:08:79:4f:0f:a5:d2:9a:67:66:62: c4:17:71:3e:e6:13:73:9e:82:93:b5:cc:65:42:2e:6e:c0:49: a8:c5:38:5f:bb:55:b3:85:64:81:0b:b2:59:90:25:d5:31:cb: af:bd:2d:7c:b8:f9:0b:c1:92:f7:7f:f0:38:1a:5e:dc:79:5b: ac:c1:09:a1:03:74:0c:35:3b:6f:21:83:e5:e9:77:08:8c:4e: da:11:ac:e9:fa:ad:c6:a2:41:3a:4a:4e:11:97:bf:13:41:d2: 42:91:83:b5:09:9b:06:46:0d:fe:48:91:65:84:a6:ce:a5:b6: 28:75:6b:fc:50:a6:df:ad:80:15:c6:22:03:c3:4d:7b:26:5a: 72:55:38:00:c8:37:e6:5c:42:2f:bc:f8:72:b3:44:65:9d:a3: 21:00:54:87:af:4c:65:67:c8:ae:cd:af:4f:c0:a6:80:9a:6a: 9e:7e:26:70:00:ec:54:f7:cf:de:41:30:f8:5f:c2:d5:4d:62: 89:23:0a:4c:c6:c9:5b:d9:a9:f4:a0:f2:f1:8f:20:2a:9f:b1: 39:2b:27:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FNPEaoCstUeIjcjHF/M3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjc2OWNkMzAzZTg0ZGNkMzdhMzc1ZDZlNzZiNjAyOWZjYzM2N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWBygCWjISLPPF6jtRvVgno2+ZUr c2/GfdoORlI6m+RktvEQRaB7bP8XjPsxJsaGq35cjSmzvJSypqnFoH1p4gFr9NjX Lvs/azi7V3VR5pAcXtS3uIS4MC+TRbOClcwwTRXUYZjRgZWVJbSzwcWNL855TGjn C1XgIesR4OC+y+4MJ1j2d0YbsI2WfUn3mc4g47JWw0ynAtlvbpD2rbKuBrrjQVgw 50hn+lko4GItbcJ/t3+ge6/I4KawvRvX+wvQzc1VcwA9lUgoazEWuTGxNSMmDkk9 aCqNShM+dAwnhC5/5edLTLV+zA9aybshbJJMld4OvOO/AORBEhTNHy+y1wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKZ2nNMD6E3NN6N11udrYCn8w2e0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzAyMzdi Yy05ZDVkLTRkYjQtYWY5Yi05N2E3YjkzMjc3ODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMDIzN2Jj LTlkNWQtNGRiNC1hZjliLTk3YTdiOTMyNzc4Ny8xL3BuYWMwd1BvVGMwM28zWFc1 MnRnS2Z6RFo3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuS2XMA0GCSqGSIb3DQEBCwUAA4IBAQB9gwx+ 1jSfuu+584KbCNgr6gxJb1XqaCMjV6rmSl9t7KpkmxLTMUS3bM9s2Qh5Tw+l0ppn ZmLEF3E+5hNznoKTtcxlQi5uwEmoxThfu1WzhWSBC7JZkCXVMcuvvS18uPkLwZL3 f/A4Gl7ceVuswQmhA3QMNTtvIYPl6XcIjE7aEazp+q3GokE6Sk4Rl78TQdJCkYO1 CZsGRg3+SJFlhKbOpbYodWv8UKbfrYAVxiIDw017JlpyVTgAyDfmXEIvvPhys0Rl naMhAFSHr0xlZ8iuza9PwKaAmmqefiZwAOxU98/eQTD4X8LVTWKJIwpMxslb2an0 oPLxjyAqn7E5Kydv -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:53 2026 by rpki-client