This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer File: pqBDS-vl36Y92njCSk68HSzXNp0.cer (raw, json) Hash identifier: jmkin0dq0Z6+bTGjNggzsXUDhCiQgo5qXHuRWvgQLkM= Subject key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE8E30D1B6205130F258737BAF06B3E2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 10:23:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42649 AS: 208583 AS: 209437 IP: 128.76.64.0/18 IP: 178.239.48.0/20 IP: 185.24.248.0/22 IP: 185.149.56.0/22 IP: 185.195.92.0/22 IP: 2a0a:56c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:e3:0d:1b:62:05:13:0f:25:87:37:ba:f0:6b:3e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 10:23:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:ad:fe:3b:d9:fc:87:5b:8e:a6:06:65:fc: 14:09:93:c8:4f:99:ce:bb:c6:db:dd:55:74:a2:6f: d5:0e:2c:28:8a:cc:54:29:5d:c2:cd:41:81:30:2d: dc:51:1d:f1:bc:4c:c9:dd:1e:74:1d:01:cd:9d:b9: 76:da:fc:a9:b3:b9:ce:56:bd:57:04:88:5e:8a:e2: 56:75:44:57:6d:16:ea:af:c4:f5:ea:1e:d1:0c:57: 61:59:be:65:72:0d:c0:73:8d:26:a4:71:83:ff:81: e4:fc:33:8d:55:95:5a:25:a8:f9:ba:a6:d5:ab:f7: d7:f8:01:fd:4c:b0:84:d1:ee:2d:45:2c:9a:2d:57: 22:3b:68:ea:cf:d3:e0:21:aa:c0:b7:d2:15:e3:eb: c1:0a:85:bb:29:ad:01:0d:86:32:3e:01:a1:14:74: 14:28:d9:97:57:8e:99:a7:49:79:df:68:31:cb:14: 06:66:39:d5:9e:02:85:26:48:00:5b:e9:c2:2e:ee: fd:f0:de:00:c0:c9:c1:a2:57:76:e8:fb:f4:0a:cd: c3:36:bf:49:61:0b:a2:8a:51:01:62:42:01:95:ba: fc:b4:88:09:cc:c1:05:a9:ca:f7:38:8c:af:0b:1a: 66:43:b6:a0:88:ca:41:5c:14:e7:2c:96:4d:9d:ed: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.76.64.0/18 178.239.48.0/20 185.24.248.0/22 185.149.56.0/22 185.195.92.0/22 IPv6: 2a0a:56c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42649 208583 209437 Signature Algorithm: sha256WithRSAEncryption 97:8c:9f:f6:e7:82:6f:ce:19:76:ea:6c:ed:7c:3c:5d:4b:92: 77:dc:23:95:20:bd:45:f6:42:72:a9:7b:ef:1b:7c:11:08:68: 24:31:67:0c:38:4b:cb:15:ea:1d:90:f9:d6:1a:24:66:64:6f: 37:ea:ce:40:5f:81:5c:57:61:9f:d1:d2:37:ac:50:19:18:22: c8:41:1f:f8:84:2f:6c:0f:a5:07:9b:28:d5:0c:9c:d6:3e:ed: 09:6e:bc:b5:3a:c5:89:0d:f1:30:75:90:81:d1:b2:8a:44:11: 07:45:c4:0f:8b:c1:9c:d2:72:f9:c8:08:3b:2f:d6:c1:b0:cc: a4:4b:f1:66:ba:33:24:35:ce:41:e6:99:f6:45:5a:e9:56:88: c7:87:64:74:90:10:89:ef:25:d6:59:83:54:40:70:18:0b:87: 84:1b:bc:29:3f:ec:64:dd:f5:b1:d7:89:12:6b:66:de:d7:c4: a0:db:c4:15:0f:3e:ae:85:18:bf:3d:c3:4d:5a:4a:2e:ae:d2: 7c:80:93:74:2a:d3:50:03:ce:ad:4b:ca:d2:52:06:20:eb:f3: f9:e7:63:c0:8c:77:70:2f:45:ff:fb:97:fc:20:cc:9f:4e:69: b3:f2:0a:22:c6:78:b5:31:bf:fe:d1:84:56:0a:48:d4:3e:81: a6:e7:3f:cc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZro4w0bYgUTDyWHN7rwaz4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTAyMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmEwNDM0YmViZTVkZmE2M2RkYTc4YzI0YTRlYmMxZDJjZDczNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEWt/jvZ/IdbjqYGZfwUCZPIT5nO u8bb3VV0om/VDiwoisxUKV3CzUGBMC3cUR3xvEzJ3R50HQHNnbl22vyps7nOVr1X BIheiuJWdURXbRbqr8T16h7RDFdhWb5lcg3Ac40mpHGD/4Hk/DONVZVaJaj5uqbV q/fX+AH9TLCE0e4tRSyaLVciO2jqz9PgIarAt9IV4+vBCoW7Ka0BDYYyPgGhFHQU KNmXV46Zp0l532gxyxQGZjnVngKFJkgAW+nCLu798N4AwMnBold26Pv0Cs3DNr9J YQuiilEBYkIBlbr8tIgJzMEFqcr3OIyvCxpmQ7agiMpBXBTnLJZNne0dnwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFKagQ0vr5d+mPdp4wkpOvB0s1zadMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2Q4Mzk4 ZS0yMzJjLTQ1YzItYjhlMC05Y2U0NzY3ZGEyYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDgzOThl LTIzMmMtNDVjMi1iOGUwLTljZTQ3NjdkYTJjMS8xL3BxQkRTLXZsMzZZOTJuakNT azY4SFN6WE5wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQGgExAAwQEsu8wAwQCuRj4AwQCuZU4AwQCucNc MA0EAgACMAcDBQMqClbAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCmmQIDAy7H AgMDMh0wDQYJKoZIhvcNAQELBQADggEBAJeMn/bngm/OGXbqbO18PF1LknfcI5Ug vUX2QnKpe+8bfBEIaCQxZww4S8sV6h2Q+dYaJGZkbzfqzkBfgVxXYZ/R0jesUBkY IshBH/iEL2wPpQebKNUMnNY+7QluvLU6xYkN8TB1kIHRsopEEQdFxA+LwZzScvnI CDsv1sGwzKRL8Wa6MyQ1zkHmmfZFWulWiMeHZHSQEInvJdZZg1RAcBgLh4QbvCk/ 7GTd9bHXiRJrZt7XxKDbxBUPPq6FGL89w01aSi6u0nyAk3Qq01ADzq1LytJSBiDr 8/nnY8CMd3AvRf/7l/wgzJ9OabPyCiLGeLUxv/7RhFYKSNQ+gabnP8w= -----END CERTIFICATE-----Generated at Sat Dec 6 06:54:41 2025 by rpki-client