This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer (raw, json) Hash identifier: bLeAVeIDNkNk8pCzwFojdG4REjMhF3hUIF+tzh+uCQs= Subject key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83422B0F0B1A86418121CF276F532C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50324 AS: 202499 IP: 109.205.194.0/24 IP: 176.106.184.0/21 IP: 176.126.216.0/22 IP: 178.19.208.0/20 IP: 185.28.184.0/22 IP: 193.142.188.0/22 IP: 195.216.208.0/23 IP: 2a04:a40::/29 IP: 2a0c:9b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:42:2b:0f:0b:1a:86:41:81:21:cf:27:6f:53:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:63:99:53:17:45:5f:64:87:e9:00:26:14: 21:98:85:f3:4f:5a:77:b9:fd:a1:fe:45:64:50:89: ab:aa:c8:fe:bc:9f:08:44:2e:cf:41:82:12:02:4f: 38:14:14:91:70:f0:4d:a9:80:48:10:19:78:fb:87: be:ce:c4:d6:5d:84:81:37:22:1e:f4:2f:36:10:65: fb:57:2b:09:da:81:46:c5:65:b9:13:3f:e0:3f:1a: 78:0b:8f:4c:85:df:d8:c8:07:7d:ef:b3:a7:5a:2c: 4a:09:57:63:fc:63:3c:04:0c:d5:20:08:cb:44:c2: b8:d1:f1:f8:67:4b:f6:b4:0b:93:2c:25:d2:66:3c: f7:12:f0:1f:c8:95:37:df:15:12:7f:82:13:56:63: a0:54:b3:56:66:9e:26:be:66:a3:98:96:7f:c0:63: 87:80:67:6b:ef:36:a9:e5:f8:0a:3d:9f:d8:12:19: 5e:79:60:f0:c8:23:b6:83:a1:e8:41:b7:d1:69:74: 4d:4e:85:5d:96:df:9c:59:f4:a0:47:de:7e:cb:97: 9b:83:ad:46:31:51:2e:a7:fb:a2:28:ef:2f:ec:73: f3:3e:54:e2:2d:50:1f:2e:3a:11:6a:22:8f:68:a7: 95:8b:3e:9b:52:81:6b:00:c5:3e:6d:fc:e6:cd:73: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.194.0/24 176.106.184.0/21 176.126.216.0/22 178.19.208.0/20 185.28.184.0/22 193.142.188.0/22 195.216.208.0/23 IPv6: 2a04:a40::/29 2a0c:9b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50324 202499 Signature Algorithm: sha256WithRSAEncryption 4b:02:03:97:ad:5c:94:b5:1e:6d:58:2c:25:73:df:4d:3f:38: 49:6b:12:65:8f:80:ff:4d:28:83:94:79:40:f8:73:20:e7:e6: ea:5e:79:08:b0:f3:0c:dd:57:f1:30:9e:60:9c:3c:fc:f6:98: 4d:bf:02:66:b4:bf:3e:52:5b:89:ff:63:8d:a2:30:7b:66:d3: 9a:4c:8a:17:6e:23:21:94:d0:31:dc:ce:d9:c6:cb:8c:eb:23: a9:b7:70:26:48:6c:18:ee:0d:fe:91:eb:99:72:70:f4:3c:90: 87:da:92:b3:e4:60:27:b3:b1:41:cb:5f:7d:54:99:29:09:ba: 0c:fb:8c:e5:56:69:89:a7:7f:3a:5f:a1:96:41:72:a2:aa:9e: 0f:6c:3d:7e:f2:7c:23:ac:0c:76:d8:a4:58:e8:9b:fb:63:52: c8:39:ba:15:cb:57:69:6b:2c:6e:7a:37:5d:e2:37:10:1d:1f: eb:22:8f:53:eb:22:db:d9:55:a5:a7:7f:1a:12:44:06:fa:07: 27:aa:7f:8f:a6:f0:3d:2d:64:e1:32:87:71:1a:eb:73:c2:5f: 09:56:95:c6:73:fe:db:50:23:21:29:d5:a5:e9:e7:57:f9:c4: c5:bf:92:23:e7:64:37:72:43:85:ba:05:9f:74:66:84:a2:d5: 77:1a:d4:7f -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt/g0IrDwsahkGBIc8nb1MsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjk0ZjAwNWY1OTc3YzMyM2VjZGJlYTljNWY4Y2NhMzY5ZTY1YzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssxjmVMXRV9kh+kAJhQhmIXzT1p3 uf2h/kVkUImrqsj+vJ8IRC7PQYISAk84FBSRcPBNqYBIEBl4+4e+zsTWXYSBNyIe 9C82EGX7VysJ2oFGxWW5Ez/gPxp4C49Mhd/YyAd977OnWixKCVdj/GM8BAzVIAjL RMK40fH4Z0v2tAuTLCXSZjz3EvAfyJU33xUSf4ITVmOgVLNWZp4mvmajmJZ/wGOH gGdr7zap5fgKPZ/YEhleeWDwyCO2g6HoQbfRaXRNToVdlt+cWfSgR95+y5ebg61G MVEup/uiKO8v7HPzPlTiLVAfLjoRaiKPaKeViz6bUoFrAMU+bfzmzXP0ewIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFKaU8AX1l3wyPs2+qcX4zKNp5lxnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2M3OTE4 Ny0wZDdhLTQ5MGItOTJiMC0xYjUyN2NlMTY1MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvYzc5MTg3 LTBkN2EtNDkwYi05MmIwLTFiNTI3Y2UxNjUxMS8xL3BwVHdCZldYZkRJLXpiNnB4 ZmpNbzJubVhHYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQAbc3CAwQDsGq4AwQCsH7YAwQEshPQAwQCuRy4 AwQCwY68AwQBw9jQMBQEAgACMA4DBQMqBApAAwUDKgybQDAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMAxJQCAwMXAzANBgkqhkiG9w0BAQsFAAOCAQEASwIDl61clLUe bVgsJXPfTT84SWsSZY+A/00og5R5QPhzIOfm6l55CLDzDN1X8TCeYJw8/PaYTb8C ZrS/PlJbif9jjaIwe2bTmkyKF24jIZTQMdzO2cbLjOsjqbdwJkhsGO4N/pHrmXJw 9DyQh9qSs+RgJ7OxQctffVSZKQm6DPuM5VZpiad/Ol+hlkFyoqqeD2w9fvJ8I6wM dtikWOib+2NSyDm6FctXaWssbno3XeI3EB0f6yKPU+si29lVpad/GhJEBvoHJ6p/ j6bwPS1k4TKHcRrrc8JfCVaVxnP+21AjISnVpennV/nExb+SI+dkN3JDhboFn3Rm hKLVdxrUfw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:39:52 2026 by rpki-client