This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer (raw, json) Hash identifier: r0xNUF+SUU+OrYVgL3orhERUOEQb9wJ1A6Yd9eHUuYU= Subject key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70F6CE57B2573D6B441B6D67283AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200462 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:6c:e5:7b:25:73:d6:b4:41:b6:d6:72:83:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:6f:ec:b4:88:d9:90:a1:2f:3c:44:7e:aa: e7:17:e9:c6:c7:10:32:97:76:ae:47:d2:36:c5:78: 8c:bd:61:25:ef:81:9a:ab:a0:41:cc:04:2c:92:90: e9:99:75:85:0d:ae:12:49:d3:01:7b:a3:73:99:d3: 3a:ff:12:47:25:5c:1b:e9:ed:f9:c3:cc:53:af:7d: 04:f4:b2:a0:12:d0:ab:80:d2:39:55:01:86:08:69: ac:cb:11:52:0d:4b:01:37:34:82:f9:a6:48:79:b2: 3d:0a:e0:cd:39:1f:c3:19:bd:39:70:72:97:aa:43: 47:d9:bc:ee:31:8a:c7:b1:b1:ea:93:d2:b9:17:21: d1:4d:6c:2b:2e:69:ce:8b:2e:9f:8e:c5:3c:05:ef: 99:39:6d:79:36:f0:4f:ad:1b:3a:4f:01:55:07:c9: e0:bc:4a:93:cf:af:f2:b8:45:0f:a5:5b:46:f3:5f: d4:f5:03:0e:2c:4a:60:c6:7c:b0:73:9b:e0:34:e8: f5:39:14:26:ac:b4:0d:95:af:17:dc:21:b1:fe:7c: 39:8f:da:3a:fb:2e:cc:e0:be:11:5f:d1:d4:82:73: ca:64:1f:7b:ef:67:7c:b5:8b:33:ac:ef:5b:88:7a: 30:66:bb:04:38:5a:04:3f:7d:64:20:5e:77:cc:1c: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200462 Signature Algorithm: sha256WithRSAEncryption 15:28:8c:2c:59:8b:85:81:ac:55:b5:a7:02:39:c7:a5:ec:7f: 3f:34:27:2d:8d:63:73:cf:7c:12:c4:37:9b:67:0a:94:18:dd: f3:05:f2:c0:e1:cb:e7:61:a6:b4:95:42:53:62:f0:f9:09:8d: e5:89:65:2c:c5:d0:36:35:2e:b1:3f:fb:6c:14:28:fb:63:99: f0:ba:fe:9b:87:0c:a8:2a:48:51:2a:a9:bc:c9:57:c1:66:76: 17:6c:93:6b:50:34:79:b3:f6:8c:c0:b0:a3:62:9b:db:0d:f8: 15:30:36:fa:27:d6:ba:39:86:cd:99:60:25:78:a8:dd:32:4a: 7c:08:b6:d7:c6:11:76:12:35:bd:b4:5f:07:c3:cb:a5:c2:9d: ca:bf:e6:49:cc:1c:df:5a:2e:85:07:e4:2c:ac:3d:af:2a:93: 8c:1b:5d:5f:7a:f8:95:0b:cc:8d:a0:5c:c7:f9:c6:91:6b:df: 45:17:d4:f2:e9:71:79:29:a5:37:5f:ed:c7:66:55:8e:e2:72: 7b:c9:88:d6:d0:cf:f3:b6:ed:6b:ba:2d:54:31:23:79:0a:5c: 05:90:7a:25:a0:e7:2b:4b:3b:62:94:b7:b5:6c:b9:d2:fb:6d: 89:ac:f5:65:f9:ce:7f:96:e3:14:9a:b2:16:6a:9b:56:84:6c: d6:a1:f5:12 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xw9s5Xslc9a0QbbWcoOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDcyYTVmNGJmNzQ2NmE2MTQ2MmFjYjg4ODA4YzdmMDM2ZDRkNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio9v7LSI2ZChLzxEfqrnF+nGxxAy l3auR9I2xXiMvWEl74Gaq6BBzAQskpDpmXWFDa4SSdMBe6NzmdM6/xJHJVwb6e35 w8xTr30E9LKgEtCrgNI5VQGGCGmsyxFSDUsBNzSC+aZIebI9CuDNOR/DGb05cHKX qkNH2bzuMYrHsbHqk9K5FyHRTWwrLmnOiy6fjsU8Be+ZOW15NvBPrRs6TwFVB8ng vEqTz6/yuEUPpVtG81/U9QMOLEpgxnywc5vgNOj1ORQmrLQNla8X3CGx/nw5j9o6 +y7M4L4RX9HUgnPKZB9772d8tYszrO9biHowZrsEOFoEP31kIF53zByPqwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFD1ypfS/dGamFGKsuIgIx/A21NbYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2U4OWFh OS1hM2NiLTRmNzUtYTQ0Mi04MGMwZjE0ZWRhZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZTg5YWE5 LWEzY2ItNGY3NS1hNDQyLTgwYzBmMTRlZGFlMS8xL1BYS2w5TDkwWnFZVVlxeTRp QWpIOERiVTF0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPDjANBgkqhkiG9w0BAQsFAAOCAQEAFSiMLFmLhYGs VbWnAjnHpex/PzQnLY1jc898EsQ3m2cKlBjd8wXywOHL52GmtJVCU2Lw+QmN5Yll LMXQNjUusT/7bBQo+2OZ8Lr+m4cMqCpIUSqpvMlXwWZ2F2yTa1A0ebP2jMCwo2Kb 2w34FTA2+ifWujmGzZlgJXio3TJKfAi218YRdhI1vbRfB8PLpcKdyr/mScwc31ou hQfkLKw9ryqTjBtdX3r4lQvMjaBcx/nGkWvfRRfU8ulxeSmlN1/tx2ZVjuJye8mI 1tDP87bta7otVDEjeQpcBZB6JaDnK0s7YpS3tWy50vttiaz1ZfnOf5bjFJqyFmqb VoRs1qH1Eg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:14:24 2026 by rpki-client