This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer File: PZlE6PVlGxvS8KngBoZfOmuB62E.cer (raw, json) Hash identifier: GBJZbvRwtActzdVdMbarU7gw0BKE04zFKjglec8bsak= Subject key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12984F603148FD58DB997B72AE103B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57249 IP: 193.22.81.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:98:4f:60:31:48:fd:58:db:99:7b:72:ae:10:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:c3:aa:21:e4:b4:37:92:5a:ae:8e:55:e4: 73:e4:e0:19:ef:7f:66:5f:00:f8:fb:ad:c8:9d:2d: 09:d2:49:31:6e:6a:2e:1c:13:bc:39:77:38:a8:4e: c6:a8:5e:16:04:56:44:f0:e0:dc:ff:9b:87:4c:7a: cc:c1:86:00:6a:dc:dc:8c:fb:a2:25:0c:a5:dd:8a: b2:b2:5b:b7:75:44:e5:9f:e4:98:92:75:f8:d3:66: 8f:7b:b2:30:72:97:5c:eb:16:f4:e8:1b:59:b4:98: fb:37:ec:02:81:47:13:3b:a1:ed:b3:1c:77:6e:5f: 1d:c6:01:6b:3e:8b:2f:54:ad:4a:92:47:2d:28:1b: 30:0c:fd:cf:85:1a:8e:47:0f:fb:0d:16:14:b2:7e: db:67:34:7b:48:74:3e:5b:19:ae:e8:52:4b:10:a7: 88:01:55:91:b9:fd:75:c7:0c:c0:97:84:e2:cf:40: e5:15:7d:cd:8c:c4:fa:34:41:16:a4:f6:fe:82:fc: 72:2a:ae:cf:ea:9f:0f:6f:ff:f9:67:3e:6c:b9:41: 3a:19:db:9f:67:e4:c6:e5:b8:64:80:53:b8:28:54: 07:ea:2c:f1:f6:60:12:bf:b5:6e:57:aa:e4:37:f3: a4:40:c2:ae:27:41:b1:aa:04:46:94:af:52:ef:de: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.81.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57249 Signature Algorithm: sha256WithRSAEncryption 08:0d:4b:77:4d:72:6f:91:21:f3:8c:a3:ae:20:9b:4b:88:4a: 50:83:25:39:6e:57:a7:6c:d3:99:65:ee:e3:67:3c:7a:42:c8: e2:dc:13:f7:6f:f3:d6:55:71:67:e3:e0:f1:8b:f7:2e:4e:5f: b0:36:9d:43:06:fc:e1:45:c1:41:08:79:a5:df:6f:74:34:93: fa:ff:ce:f0:30:e4:30:7f:55:81:0d:77:49:69:7b:59:65:f1: 9c:ff:89:85:82:56:42:d3:1b:5e:d3:1b:34:de:13:99:73:3a: 19:97:ea:a0:aa:c5:47:e7:7d:8c:3f:5f:ff:1d:31:25:4e:ea: 05:ed:06:f5:5d:6e:96:bd:70:9b:0f:2a:45:b3:d3:eb:46:a5: 19:3f:e3:d8:ac:d3:41:5e:47:f6:df:04:ad:6e:39:9a:9b:8c: 7d:b3:7d:53:9d:90:ed:4d:3d:30:75:53:4b:c0:f2:d7:5f:24: 16:9f:d4:6e:8e:b3:fc:d6:83:18:15:a1:ed:71:6c:26:fa:d6: 02:5c:0f:2a:cb:0e:72:c1:8c:c9:46:68:e8:3c:1b:7c:fa:95: 7a:2c:3e:42:5e:2d:4b:2d:ae:89:51:22:fe:49:23:c6:a4:88: 1c:17:21:31:c1:f0:4b:1e:c9:b4:f0:f4:2b:3b:a5:6a:ee:80: 20:ab:93:6d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EphPYDFI/VjbmXtyrhA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk5NDRlOGY1NjUxYjFiZDJmMGE5ZTAwNjg2NWYzYTZiODFlYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2LDqiHktDeSWq6OVeRz5OAZ739m XwD4+63InS0J0kkxbmouHBO8OXc4qE7GqF4WBFZE8ODc/5uHTHrMwYYAatzcjPui JQyl3Yqyslu3dUTln+SYknX402aPe7Iwcpdc6xb06BtZtJj7N+wCgUcTO6Htsxx3 bl8dxgFrPosvVK1KkkctKBswDP3PhRqORw/7DRYUsn7bZzR7SHQ+Wxmu6FJLEKeI AVWRuf11xwzAl4Tiz0DlFX3NjMT6NEEWpPb+gvxyKq7P6p8Pb//5Zz5suUE6Gduf Z+TG5bhkgFO4KFQH6izx9mASv7VuV6rkN/OkQMKuJ0GxqgRGlK9S796vaQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFD2ZROj1ZRsb0vCp4AaGXzprgethMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0LzRiZmY3 Mi1iYTViLTQ1MjgtOGM0Mi03ZjZiOWYxMDQwZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvNGJmZjcy LWJhNWItNDUyOC04YzQyLTdmNmI5ZjEwNDBmZC8xL1BabEU2UFZsR3h2UzhLbmdC b1pmT211QjYyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRZRMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDfoTANBgkqhkiG9w0BAQsFAAOCAQEACA1Ld01yb5Eh84yjriCbS4hKUIMlOW5X p2zTmWXu42c8ekLI4twT92/z1lVxZ+Pg8Yv3Lk5fsDadQwb84UXBQQh5pd9vdDST +v/O8DDkMH9VgQ13SWl7WWXxnP+JhYJWQtMbXtMbNN4TmXM6GZfqoKrFR+d9jD9f /x0xJU7qBe0G9V1ulr1wmw8qRbPT60alGT/j2KzTQV5H9t8ErW45mpuMfbN9U52Q 7U09MHVTS8Dy118kFp/Ubo6z/NaDGBWh7XFsJvrWAlwPKssOcsGMyUZo6DwbfPqV eiw+Ql4tSy2uiVEi/kkjxqSIHBchMcHwSx7JtPD0Kzulau6AIKuTbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:07 2026 by rpki-client