This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer File: pqBDS-vl36Y92njCSk68HSzXNp0.cer (raw, json) Hash identifier: zeMwL+GTIWUiNRue9VW944h8VJyQmZWZPSP3gjSzCtw= Subject key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B61AC9C0B5D67178C649885CF167 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42649 AS: 208583 AS: 209437 IP: 128.76.64.0/18 IP: 178.239.48.0/20 IP: 185.24.248.0/22 IP: 185.149.56.0/22 IP: 185.195.92.0/22 IP: 2a0a:56c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b6:1a:c9:c0:b5:d6:71:78:c6:49:88:5c:f1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:ad:fe:3b:d9:fc:87:5b:8e:a6:06:65:fc: 14:09:93:c8:4f:99:ce:bb:c6:db:dd:55:74:a2:6f: d5:0e:2c:28:8a:cc:54:29:5d:c2:cd:41:81:30:2d: dc:51:1d:f1:bc:4c:c9:dd:1e:74:1d:01:cd:9d:b9: 76:da:fc:a9:b3:b9:ce:56:bd:57:04:88:5e:8a:e2: 56:75:44:57:6d:16:ea:af:c4:f5:ea:1e:d1:0c:57: 61:59:be:65:72:0d:c0:73:8d:26:a4:71:83:ff:81: e4:fc:33:8d:55:95:5a:25:a8:f9:ba:a6:d5:ab:f7: d7:f8:01:fd:4c:b0:84:d1:ee:2d:45:2c:9a:2d:57: 22:3b:68:ea:cf:d3:e0:21:aa:c0:b7:d2:15:e3:eb: c1:0a:85:bb:29:ad:01:0d:86:32:3e:01:a1:14:74: 14:28:d9:97:57:8e:99:a7:49:79:df:68:31:cb:14: 06:66:39:d5:9e:02:85:26:48:00:5b:e9:c2:2e:ee: fd:f0:de:00:c0:c9:c1:a2:57:76:e8:fb:f4:0a:cd: c3:36:bf:49:61:0b:a2:8a:51:01:62:42:01:95:ba: fc:b4:88:09:cc:c1:05:a9:ca:f7:38:8c:af:0b:1a: 66:43:b6:a0:88:ca:41:5c:14:e7:2c:96:4d:9d:ed: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.76.64.0/18 178.239.48.0/20 185.24.248.0/22 185.149.56.0/22 185.195.92.0/22 IPv6: 2a0a:56c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42649 208583 209437 Signature Algorithm: sha256WithRSAEncryption 43:72:1a:b0:cf:d5:be:cb:ec:51:9d:ee:f0:a8:e7:90:6f:e0: 47:75:dc:95:ab:96:33:dd:01:ee:01:99:57:df:c5:7f:dc:24: 5f:5e:eb:1c:eb:3f:85:12:b7:c3:ac:d9:cb:22:7e:8d:4f:22: 67:3d:3a:f8:4c:e2:53:47:23:93:87:2f:fc:c8:37:76:33:7a: 81:3a:d9:71:e7:19:e2:32:f8:b0:52:90:e9:42:05:e6:d3:f5: e9:f1:80:57:ff:3f:9e:29:24:87:77:3e:15:6e:b1:c7:17:43: 72:80:0d:1e:ee:58:85:be:2f:38:70:8e:54:00:6c:9b:2f:c1: c8:8c:f2:bd:d6:21:5f:31:7a:38:e4:9b:d4:c5:fb:62:12:c6: c6:a1:b5:dc:ab:8d:66:71:a8:2e:f1:27:42:32:01:d9:03:b7: 5e:21:70:ed:74:28:d2:a5:d6:90:67:9d:6e:23:8a:11:84:59: 4a:7a:52:75:1f:d8:d1:65:2d:36:dc:e3:44:c9:5c:56:66:e7: d2:63:13:ab:da:1c:cd:08:dc:4e:23:2f:d3:a9:a0:c7:ce:c4: ec:7e:b1:01:5e:e0:8a:77:b9:cd:ff:64:6a:6b:46:7c:68:dd: 89:62:c1:05:5c:84:a6:4f:c6:96:f4:5d:6e:71:98:32:14:e6: df:e0:a9:2c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt5ELYaycC11nF4xkmIXPFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmEwNDM0YmViZTVkZmE2M2RkYTc4YzI0YTRlYmMxZDJjZDczNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEWt/jvZ/IdbjqYGZfwUCZPIT5nO u8bb3VV0om/VDiwoisxUKV3CzUGBMC3cUR3xvEzJ3R50HQHNnbl22vyps7nOVr1X BIheiuJWdURXbRbqr8T16h7RDFdhWb5lcg3Ac40mpHGD/4Hk/DONVZVaJaj5uqbV q/fX+AH9TLCE0e4tRSyaLVciO2jqz9PgIarAt9IV4+vBCoW7Ka0BDYYyPgGhFHQU KNmXV46Zp0l532gxyxQGZjnVngKFJkgAW+nCLu798N4AwMnBold26Pv0Cs3DNr9J YQuiilEBYkIBlbr8tIgJzMEFqcr3OIyvCxpmQ7agiMpBXBTnLJZNne0dnwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFKagQ0vr5d+mPdp4wkpOvB0s1zadMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2Q4Mzk4 ZS0yMzJjLTQ1YzItYjhlMC05Y2U0NzY3ZGEyYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDgzOThl LTIzMmMtNDVjMi1iOGUwLTljZTQ3NjdkYTJjMS8xL3BxQkRTLXZsMzZZOTJuakNT azY4SFN6WE5wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQGgExAAwQEsu8wAwQCuRj4AwQCuZU4AwQCucNc MA0EAgACMAcDBQMqClbAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCmmQIDAy7H AgMDMh0wDQYJKoZIhvcNAQELBQADggEBAENyGrDP1b7L7FGd7vCo55Bv4Ed13JWr ljPdAe4BmVffxX/cJF9e6xzrP4USt8Os2csifo1PImc9OvhM4lNHI5OHL/zIN3Yz eoE62XHnGeIy+LBSkOlCBebT9enxgFf/P54pJId3PhVusccXQ3KADR7uWIW+Lzhw jlQAbJsvwciM8r3WIV8xejjkm9TF+2ISxsahtdyrjWZxqC7xJ0IyAdkDt14hcO10 KNKl1pBnnW4jihGEWUp6UnUf2NFlLTbc40TJXFZm59JjE6vaHM0I3E4jL9OpoMfO xOx+sQFe4Ip3uc3/ZGprRnxo3YliwQVchKZPxpb0XW5xmDIU5t/gqSw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:16 2026 by rpki-client