This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer File: PBJHYkowBcb89mErrJnKsExgEmo.cer (raw, json) Hash identifier: pjY1TVX7J+eJHe/Vu+SIXv7nHpWEVgUY/JSWyoCzlVM= Subject key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0C2068E9728A083AF346321BF6F8C68D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 11 Dec 2025 06:36:49 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 195.242.196.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:20:68:e9:72:8a:08:3a:f3:46:32:1b:f6:f8:c6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 11 06:36:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c1247624a3005c6fcf6612bac99cab04c60126a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:14:d8:70:e9:95:0f:7d:6d:3d:2d:ba:93:a1: 6d:d6:03:4c:28:36:91:c5:68:57:b5:51:ce:e9:45: c4:df:d3:a2:36:61:51:5f:43:89:9b:a6:56:88:4a: 96:9d:60:92:09:21:a8:86:8d:9d:f1:08:b9:2f:0a: 28:be:fa:dd:1a:8b:72:b4:2b:d7:0b:e7:a6:3e:86: 35:ec:68:e9:39:0d:47:b0:a2:3b:db:4e:5c:69:2c: 75:60:99:26:bc:33:69:f3:d1:32:33:9e:e4:82:25: 2e:d8:9d:fc:e1:85:ef:8a:b6:1c:53:71:a2:1f:a5: b3:35:6b:b0:05:d1:89:6e:71:32:84:59:b7:f1:b2: d8:03:16:04:b0:aa:02:a7:5a:5f:45:ac:38:53:6c: cd:1b:c1:91:08:83:c8:01:0d:7b:04:b7:34:a0:58: f1:9a:24:18:f4:4a:b6:26:e8:e7:53:a7:83:2a:cd: c2:5b:6d:30:85:ff:8a:d4:e5:ac:c5:12:18:a3:3b: 54:3c:78:f9:58:3b:fa:4f:b1:85:fd:f0:e9:8d:3d: 3b:59:31:30:14:f9:54:c9:ef:cf:ea:00:ec:39:73: 51:d4:d9:55:b2:0e:b6:5b:b2:d9:6d:27:f7:c1:fa: 43:6c:1c:20:fb:54:80:4c:09:a9:f7:63:ee:2a:4b: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.196.0/22 Signature Algorithm: sha256WithRSAEncryption ab:0f:5d:b3:02:af:dd:9b:a0:be:76:fb:97:2b:83:ac:f1:6b: c6:bc:09:20:95:44:d3:cb:16:a5:b2:32:1d:f2:3b:36:27:90: 34:6e:d8:39:04:65:25:cd:66:3c:a4:ee:92:b2:3b:52:3f:69: 0c:64:74:f1:20:43:d7:f5:74:47:40:c2:d0:0b:a3:ae:10:0d: 0f:39:47:0a:a4:f0:12:8f:63:e0:18:83:f7:6f:82:de:dd:45: 1d:13:da:ce:b7:e6:d8:3a:3d:34:45:6e:58:a6:19:c3:00:09: a3:23:a1:6a:ea:ae:ef:91:75:7a:4e:0c:e3:5d:ae:85:3a:f1: ec:f4:54:29:20:57:06:e1:69:8a:8d:09:55:11:25:e8:5f:b9: ad:6a:ee:b0:cf:44:35:90:30:9d:02:56:b6:3e:52:5b:9c:dc: a6:8f:2a:78:2f:02:d2:0a:ab:6a:e9:9d:71:04:f2:e3:ad:62: b8:47:f1:b5:73:de:be:11:1c:ee:c6:bd:5f:d6:b8:70:ec:44: 0a:28:be:39:2b:19:c7:50:8c:a3:f8:62:0f:99:98:48:01:5f: ee:da:94:1d:20:01:af:ba:45:53:0d:69:e2:13:c5:8a:2c:a6: 65:ae:66:c1:fb:71:15:74:68:c3:c4:25:94:81:95:cf:15:fc: 4d:08:14:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZsMIGjpcooIOvNGMhv2+MaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjExMDYzNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzEyNDc2MjRhMzAwNWM2ZmNmNjYxMmJhYzk5Y2FiMDRjNjAxMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BTYcOmVD31tPS26k6Ft1gNMKDaR xWhXtVHO6UXE39OiNmFRX0OJm6ZWiEqWnWCSCSGoho2d8Qi5LwoovvrdGotytCvX C+emPoY17GjpOQ1HsKI7205caSx1YJkmvDNp89EyM57kgiUu2J384YXvirYcU3Gi H6WzNWuwBdGJbnEyhFm38bLYAxYEsKoCp1pfRaw4U2zNG8GRCIPIAQ17BLc0oFjx miQY9Eq2JujnU6eDKs3CW20whf+K1OWsxRIYoztUPHj5WDv6T7GF/fDpjT07WTEw FPlUye/P6gDsOXNR1NlVsg62W7LZbSf3wfpDbBwg+1SATAmp92PuKksREQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDwSR2JKMAXG/PZhK6yZyrBMYBJqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzAzNjNm MC1lYzBkLTQ4YTYtOWNlYi1lOGJkMmRiYTk3YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvMDM2M2Yw LWVjMGQtNDhhNi05Y2ViLWU4YmQyZGJhOTdhYi8xL1BCSkhZa293QmNiODltRXJy Sm5Lc0V4Z0Vtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw/LEMA0GCSqGSIb3DQEBCwUAA4IBAQCrD12z Aq/dm6C+dvuXK4Os8WvGvAkglUTTyxalsjId8js2J5A0btg5BGUlzWY8pO6SsjtS P2kMZHTxIEPX9XRHQMLQC6OuEA0POUcKpPASj2PgGIP3b4Le3UUdE9rOt+bYOj00 RW5YphnDAAmjI6Fq6q7vkXV6TgzjXa6FOvHs9FQpIFcG4WmKjQlVESXoX7mtau6w z0Q1kDCdAla2PlJbnNymjyp4LwLSCqtq6Z1xBPLjrWK4R/G1c96+ERzuxr1f1rhw 7EQKKL45KxnHUIyj+GIPmZhIAV/u2pQdIAGvukVTDWniE8WKLKZlrmbB+3EVdGjD xCWUgZXPFfxNCBSf -----END CERTIFICATE-----Generated at Sun Dec 14 18:59:56 2025 by rpki-client