This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer (raw, json) Hash identifier: QNm6cYAbYXBMp9/E68MQFCcx9ghwuWgKrqD0KGhBNw0= Subject key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E969B53E3D220B223B607966812C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.157.48.0/22 IP: 2a07:a340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:96:9b:53:e3:d2:20:b2:23:b6:07:96:68:12:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:86:8b:5a:d2:e6:3d:77:e5:eb:0c:04:9c: 8b:3c:35:fd:28:e1:9f:37:5c:53:c6:e4:83:3d:92: 10:54:80:c8:3a:f3:41:67:0a:45:ad:fd:18:8a:62: 1c:fb:2a:02:55:4b:44:d6:9e:8a:bc:37:f2:8e:d2: a6:be:37:e2:01:18:ba:a1:0f:e2:ac:a0:1e:a3:0d: 2a:c8:fb:06:a1:57:c3:2c:70:0b:88:4a:3f:32:75: 5a:18:76:42:75:a6:c5:8f:55:c4:39:1c:fb:a8:7f: 71:84:ee:39:6c:9b:1b:29:f5:d7:32:85:7e:2e:9f: d4:66:ea:e3:df:02:a2:b1:c9:07:e3:ed:8b:dd:24: d9:c4:71:bc:9f:87:dd:a9:ca:cc:58:59:13:73:5f: 0d:62:78:12:1c:a8:9e:e8:0d:b4:cd:1a:80:12:22: 94:f7:62:ce:78:cd:e9:8e:82:d3:37:97:63:e9:b4: ec:db:d7:56:61:d2:be:87:ca:c1:bf:12:ca:cf:2e: fb:8e:59:3b:52:f1:de:77:2a:97:eb:81:9c:66:fa: cf:22:78:f4:de:7b:15:ea:62:97:f5:ed:86:9d:6b: 94:f1:6b:94:d8:ec:0d:c9:cc:b2:be:8a:23:6a:08: 58:73:9b:05:e0:9d:90:f6:51:a9:2d:73:48:3e:32: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.48.0/22 IPv6: 2a07:a340::/29 Signature Algorithm: sha256WithRSAEncryption 6b:96:aa:a3:9e:c0:23:9e:cd:c5:d2:8b:78:b4:bc:64:82:67: fd:6f:16:1c:a2:5c:91:ce:82:d3:05:b2:14:d0:a6:99:df:c7: b5:a1:fa:91:80:2e:1f:e1:15:a1:84:16:1f:cd:8b:e6:fc:b4: e4:f9:bd:36:ca:54:ad:8f:54:c3:5d:92:95:82:e5:ee:cf:94: 4d:88:e4:eb:07:56:20:9f:30:49:5c:d7:71:58:b4:8a:1d:59: b4:fd:ee:e3:77:b9:20:9a:d9:57:3b:8d:0b:99:52:5b:30:b8: 7e:21:82:d4:6b:a5:84:5a:db:2e:48:ea:f0:5b:5d:ec:37:51: 1e:cf:3b:db:fa:c2:9a:4c:2e:37:0f:c9:be:b0:c9:12:e9:a4: 05:be:46:cd:db:59:fb:dc:4d:8f:de:99:78:58:1e:85:5d:2f: 18:6c:92:e9:9f:34:07:8c:57:05:17:58:34:80:84:c4:0c:c5: f8:4d:aa:e6:24:f1:b4:a6:1d:06:cd:22:14:c6:17:1f:54:cf: 0d:10:e7:4b:b9:64:7f:a8:bc:e4:50:85:0b:8d:c6:44:b3:98: 5d:27:9c:81:23:8a:ca:89:ae:ed:f6:f5:36:76:d7:21:64:87: c7:f4:65:98:bc:1c:f9:e5:05:6f:bd:1d:4b:61:97:d3:e6:4a: e3:d2:7e:ee -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fpabU+PSILIjtgeWaBLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzFhMmEyZGI0ZDc0MThlOWJmNGY5M2M4YzA0NmEwMTYxNjYzYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSqGi1rS5j135esMBJyLPDX9KOGf N1xTxuSDPZIQVIDIOvNBZwpFrf0YimIc+yoCVUtE1p6KvDfyjtKmvjfiARi6oQ/i rKAeow0qyPsGoVfDLHALiEo/MnVaGHZCdabFj1XEORz7qH9xhO45bJsbKfXXMoV+ Lp/UZurj3wKisckH4+2L3STZxHG8n4fdqcrMWFkTc18NYngSHKie6A20zRqAEiKU 92LOeM3pjoLTN5dj6bTs29dWYdK+h8rBvxLKzy77jlk7UvHedyqX64GcZvrPInj0 3nsV6mKX9e2GnWuU8WuU2OwNycyyvoojaghYc5sF4J2Q9lGpLXNIPjIhtQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKcaKi2010GOm/T5PIwEagFhZjxiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2I3YWJk Zi0zYmUxLTQ2NDItOWYzZS1mMWYwYjk1OThmMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYjdhYmRm LTNiZTEtNDY0Mi05ZjNlLWYxZjBiOTU5OGYzMi8xL3B4b3FMYlRYUVk2YjlQazhq QVJxQVdGbVBHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ0wMA0EAgACMAcDBQMqB6NAMA0GCSqGSIb3 DQEBCwUAA4IBAQBrlqqjnsAjns3F0ot4tLxkgmf9bxYcolyRzoLTBbIU0KaZ38e1 ofqRgC4f4RWhhBYfzYvm/LTk+b02ylStj1TDXZKVguXuz5RNiOTrB1YgnzBJXNdx WLSKHVm0/e7jd7kgmtlXO40LmVJbMLh+IYLUa6WEWtsuSOrwW13sN1Eezzvb+sKa TC43D8m+sMkS6aQFvkbN21n73E2P3pl4WB6FXS8YbJLpnzQHjFcFF1g0gITEDMX4 TarmJPG0ph0GzSIUxhcfVM8NEOdLuWR/qLzkUIULjcZEs5hdJ5yBI4rKia7t9vU2 dtchZIfH9GWYvBz55QVvvR1LYZfT5krj0n7u -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:17 2026 by rpki-client