This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer File: PJMfJlqEcdMs6ESdnhhvDccRSno.cer (raw, json) Hash identifier: SxSi25ZZ4rTHtbmtTYX1l/JkHzCF+hb+4nWIQaPFC00= Subject key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834838625F2AC7CE4A2597FB871FB10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41865 IP: 94.158.128.0/20 IP: 193.34.0.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:83:86:25:f2:ac:7c:e4:a2:59:7f:b8:71:fb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:52:7c:96:5d:cb:11:f6:ef:cd:1e:7d:ac: af:f0:1e:ec:6f:4f:1f:78:6e:83:99:28:5f:ef:39: 6f:b3:ae:28:0a:f5:ca:85:e5:1a:6d:c7:c1:aa:38: c4:eb:fb:8b:f4:8e:cc:8d:75:92:6f:8b:4f:2c:3f: 80:4c:f7:d0:dd:46:e5:18:f5:d6:59:45:ef:90:d2: fe:4d:e4:79:64:84:f5:0b:93:54:e7:95:09:b0:b9: 55:21:da:c4:b3:c8:35:5b:0a:6b:8d:ff:ed:b9:59: 0d:a3:3a:bf:24:6e:d8:c0:fc:9a:f0:f6:a6:76:b3: 69:ee:08:8d:cd:49:18:4c:78:53:1a:ac:8b:2f:c4: ab:d4:96:48:05:73:41:44:8a:07:37:4b:ce:d5:3f: 13:a7:37:08:6e:3d:2a:08:16:a7:d9:4d:9e:b9:85: bd:a5:5f:2a:6a:23:a1:a5:5c:21:9b:b9:28:fb:75: 0d:cb:f6:67:bf:65:74:71:4b:29:3f:ec:0a:57:ae: 13:73:a4:55:01:40:74:61:e5:7b:00:ba:b4:99:8d: 14:37:d3:67:d2:1a:f9:fe:33:aa:8a:4a:3e:f8:db: 39:3c:f9:0f:e6:c7:63:8c:12:12:45:c8:3f:1f:69: d1:0a:59:d1:18:fa:5d:1f:83:5b:7c:48:66:d1:66: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.128.0/20 193.34.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41865 Signature Algorithm: sha256WithRSAEncryption 75:e5:64:7e:69:3b:12:ad:60:73:53:d8:10:89:d9:aa:2e:b9: 28:7a:77:af:7a:0c:4e:49:37:39:e3:7e:50:84:fb:c7:be:43: 3e:ba:c0:91:e5:01:d2:8b:68:34:7b:7a:40:9f:da:df:11:b6: 8c:6e:51:58:12:a8:e0:ba:ca:b4:8e:b7:9d:4b:10:7e:35:0b: c6:33:de:21:cd:31:09:16:47:75:de:3a:58:e5:bf:82:c3:ca: 46:b0:25:8f:56:fa:11:af:1d:ca:6d:7d:b7:f1:ea:de:97:da: cf:17:8e:e9:21:76:17:90:25:3c:e5:87:87:4d:d4:a7:dd:2b: 9c:e1:34:da:a5:06:86:cb:69:4d:85:a7:60:01:fa:d0:0e:ed: fe:ea:e6:d5:e7:5a:98:57:72:be:f0:54:26:ca:a6:20:0c:c8: 41:30:db:54:32:8f:5b:01:a6:df:ed:e2:60:71:cd:44:69:1c: 1d:a9:bf:3d:f3:74:c5:90:b5:36:1d:69:cc:25:05:85:ec:11: de:c5:04:58:10:a3:c0:11:5d:13:d5:e5:d0:c1:d0:8f:18:ec: f6:f4:fe:5d:04:15:69:10:c7:c1:d1:84:5c:4e:34:76:95:38: 63:b6:7a:ca:e9:f6:75:44:fa:d4:dc:c3:69:bf:a7:2c:ff:5f: 6e:78:bb:fd -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4NIOGJfKsfOSiWX+4cfsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzkzMWYyNjVhODQ3MWQzMmNlODQ0OWQ5ZTE4NmYwZGM3MTE0YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn9SfJZdyxH2780efayv8B7sb08f eG6DmShf7zlvs64oCvXKheUabcfBqjjE6/uL9I7MjXWSb4tPLD+ATPfQ3UblGPXW WUXvkNL+TeR5ZIT1C5NU55UJsLlVIdrEs8g1Wwprjf/tuVkNozq/JG7YwPya8Pam drNp7giNzUkYTHhTGqyLL8Sr1JZIBXNBRIoHN0vO1T8TpzcIbj0qCBan2U2euYW9 pV8qaiOhpVwhm7ko+3UNy/Znv2V0cUspP+wKV64Tc6RVAUB0YeV7ALq0mY0UN9Nn 0hr5/jOqiko++Ns5PPkP5sdjjBISRcg/H2nRClnRGPpdH4NbfEhm0WZfCwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2I1MGJk YS02ODk5LTRlZWYtYTIzMS01ZTAwMjYzMDM2MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvYjUwYmRh LTY4OTktNGVlZi1hMjMxLTVlMDAyNjMwMzYyOS8xL1BKTWZKbHFFY2RNczZFU2Ru aGh2RGNjUlNuby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQEXp6AAwQCwSIAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCjiTANBgkqhkiG9w0BAQsFAAOCAQEAdeVkfmk7Eq1gc1PYEInZqi65 KHp3r3oMTkk3OeN+UIT7x75DPrrAkeUB0otoNHt6QJ/a3xG2jG5RWBKo4LrKtI63 nUsQfjULxjPeIc0xCRZHdd46WOW/gsPKRrAlj1b6Ea8dym19t/Hq3pfazxeO6SF2 F5AlPOWHh03Up90rnOE02qUGhstpTYWnYAH60A7t/urm1edamFdyvvBUJsqmIAzI QTDbVDKPWwGm3+3iYHHNRGkcHam/PfN0xZC1Nh1pzCUFhewR3sUEWBCjwBFdE9Xl 0MHQjxjs9vT+XQQVaRDHwdGEXE40dpU4Y7Z6yun2dUT61NzDab+nLP9fbni7/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:06 2026 by rpki-client