This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer File: PflufaVJi3Djuxe24YoxE3EtMrY.cer (raw, json) Hash identifier: El2RmjJ0NVLsT5BHPDqZGHiyR50b/yFbUTrNfPaSm4E= Subject key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775924FFA52B5FDB72A06444125F974D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57474 IP: 91.240.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:24:ff:a5:2b:5f:db:72:a0:64:44:12:5f:97:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:58:6a:67:e3:fd:3f:50:d8:89:91:3f:1f: 29:25:8e:bd:8a:8f:92:20:ef:24:80:98:c5:02:0d: a4:ac:2f:20:0e:0e:d0:d3:6f:53:a9:a7:56:2d:7b: ec:95:a3:b6:1a:d8:b2:6a:c9:06:e9:11:fd:09:4b: ee:7f:f3:16:59:61:bd:8c:22:31:2e:40:92:cd:94: 0c:68:6c:48:2b:ca:45:8a:fc:7e:5d:7f:d4:8b:d1: b3:06:72:85:ab:5e:4b:ed:db:3c:52:96:2f:2b:e3: d6:3d:85:23:9a:2d:6f:97:da:1b:91:83:7a:11:c9: d2:2b:3a:79:a7:4a:7c:ef:1e:63:57:06:18:7a:dc: 9e:9b:20:52:fe:01:c5:84:8a:e1:22:b5:f4:70:31: 9a:eb:30:4f:58:51:1d:8f:11:73:6e:a4:bb:33:dc: 1c:29:a3:bf:36:95:ff:c2:62:44:cd:79:c6:f5:34: 41:83:0b:22:8b:e4:e6:c0:58:a7:78:e4:9f:7e:aa: 8c:da:1e:e8:ae:84:2c:4b:90:bf:55:84:5b:f3:12: 38:3d:1a:b3:9b:42:92:9d:1a:24:76:7d:f3:45:a4: 33:d4:22:8e:bc:e0:11:95:a5:1a:a5:ee:31:0d:40: 82:2a:e7:a3:e8:d3:73:32:7f:ff:8a:6a:b3:ac:05: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57474 Signature Algorithm: sha256WithRSAEncryption 33:b6:36:16:3e:7d:c0:40:3f:ae:68:9b:29:12:e2:da:ad:03: be:17:69:74:88:40:fc:df:8b:7c:95:52:db:69:26:8b:32:67: 64:72:7f:af:6c:7f:0c:1c:14:9e:e9:1e:af:2c:93:74:9e:6a: 1f:8f:42:e5:ce:16:f9:4e:00:29:e8:21:d1:38:8e:52:6c:39: 96:11:70:a3:f7:f7:12:05:b0:29:73:c6:ea:0f:c7:5e:2b:2c: 10:8a:85:7a:b2:e4:84:53:1c:6c:3c:98:77:c1:fd:60:2a:34: 86:6d:d6:fa:0a:5c:44:91:8d:84:8f:0d:cc:56:11:e5:67:cb: 96:f1:0d:12:0e:46:37:43:70:66:d2:4a:90:1a:2d:75:d1:b9: 2f:b9:bc:35:8d:98:ec:ad:c4:44:94:06:f4:cb:44:64:c6:cd: 4a:df:02:26:e4:0d:12:e7:46:f0:ae:12:02:05:bb:35:77:e8: fd:d6:40:fb:fb:f9:b8:9e:55:8d:e0:73:8d:04:42:2d:32:62: 63:7e:72:f9:c2:bf:db:05:98:d4:3e:bb:59:a5:62:c0:9f:7e: b8:9f:0f:ac:d6:5f:ab:b4:31:dd:0e:4b:98:c2:6b:56:76:0c: 67:79:bd:85:73:4f:f0:32:74:f1:aa:6b:93:8a:03:81:a6:7b: 75:f5:59:f8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WST/pStf23KgZEQSX5dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGY5NmU3ZGE1NDk4YjcwZTNiYjE3YjZlMThhMzExMzcxMmQzMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorJYamfj/T9Q2ImRPx8pJY69io+S IO8kgJjFAg2krC8gDg7Q029TqadWLXvslaO2GtiyaskG6RH9CUvuf/MWWWG9jCIx LkCSzZQMaGxIK8pFivx+XX/Ui9GzBnKFq15L7ds8UpYvK+PWPYUjmi1vl9obkYN6 EcnSKzp5p0p87x5jVwYYetyemyBS/gHFhIrhIrX0cDGa6zBPWFEdjxFzbqS7M9wc KaO/NpX/wmJEzXnG9TRBgwsii+TmwFineOSffqqM2h7oroQsS5C/VYRb8xI4PRqz m0KSnRokdn3zRaQz1CKOvOARlaUape4xDUCCKuej6NNzMn//imqzrAWX2wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFD35bn2lSYtw47sXtuGKMRNxLTK2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4Lzg4MzFk OS0zOTMzLTQ4M2EtYjlhZi0zNmU4ODUwNjY4MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvODgzMWQ5 LTM5MzMtNDgzYS1iOWFmLTM2ZTg4NTA2NjgwZS8xL1BmbHVmYVZKaTNEanV4ZTI0 WW94RTNFdE1yWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW/A8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDggjANBgkqhkiG9w0BAQsFAAOCAQEAM7Y2Fj59wEA/rmibKRLi2q0DvhdpdIhA /N+LfJVS22kmizJnZHJ/r2x/DBwUnukeryyTdJ5qH49C5c4W+U4AKegh0TiOUmw5 lhFwo/f3EgWwKXPG6g/HXissEIqFerLkhFMcbDyYd8H9YCo0hm3W+gpcRJGNhI8N zFYR5WfLlvENEg5GN0NwZtJKkBotddG5L7m8NY2Y7K3ERJQG9MtEZMbNSt8CJuQN EudG8K4SAgW7NXfo/dZA+/v5uJ5VjeBzjQRCLTJiY35y+cK/2wWY1D67WaViwJ9+ uJ8PrNZfq7Qx3Q5LmMJrVnYMZ3m9hXNP8DJ08aprk4oDgaZ7dfVZ+A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:47 2026 by rpki-client