This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer File: PjMt0plMbuiUNhWKLqwfSCkizSo.cer (raw, json) Hash identifier: pMjuMUuyqYZdZxcTTWMr1XbQFzwyVCO0OsevraaU0SE= Subject key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3668637637AA4C6AAC53C282439FC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205049 AS: 216098 IP: 185.230.40.0/22 IP: 2a13:3680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:68:63:76:37:aa:4c:6a:ac:53:c2:82:43:9f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:9b:f2:00:d3:33:20:75:61:3c:fd:e1:0a: c8:0b:a9:37:90:4d:59:ff:97:6c:ae:2d:96:48:8a: be:48:f8:9d:b2:3a:65:b9:6c:01:5e:ba:aa:0f:46: 4b:48:d8:e9:ef:63:fc:0f:1e:33:38:1b:c8:c6:fb: ca:af:69:d0:90:a0:5e:5b:b2:7a:5b:b2:88:ee:0d: 9a:e6:fc:e2:03:18:d7:c9:c6:f0:3c:9d:ff:d0:a2: f0:e5:2c:38:48:19:ba:c3:32:c0:ef:7c:a6:02:7b: 80:a7:74:46:50:4b:1b:ef:81:31:25:c6:a5:67:f9: 47:d9:39:5a:59:bc:95:9f:ea:53:a9:58:dd:03:68: 62:a8:db:03:8b:e3:e1:00:e7:de:99:45:dd:de:1a: 3c:c2:4c:bb:30:cd:4d:e9:1c:4f:25:b5:75:8c:28: f5:ed:a2:d6:7a:49:a6:d4:e6:bb:55:37:10:9f:ac: c6:c8:3f:05:bb:9c:45:cf:df:90:7f:93:ab:5d:0d: b4:49:d6:cb:df:e9:ab:e8:d4:e5:8e:40:8d:e3:5c: c0:87:4d:90:20:ae:ef:77:57:fd:49:46:ba:8a:94: a8:e5:80:ef:50:97:de:c8:8d:06:86:af:07:3b:5a: c4:81:ed:26:a0:f3:0a:ba:f7:ce:c5:76:eb:8e:33: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.40.0/22 IPv6: 2a13:3680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205049 216098 Signature Algorithm: sha256WithRSAEncryption 9c:90:57:17:21:ff:c7:64:b3:75:2e:a3:92:d8:cd:00:17:98: 5f:d6:92:11:70:37:ff:68:e5:94:ac:72:e8:4e:40:2a:01:23: 7c:71:b3:ea:fb:37:dd:9b:7f:0c:ee:b6:61:b2:ac:18:b0:45: 2e:f2:63:c3:cb:cb:03:a8:39:84:9b:11:6f:58:eb:21:50:3f: 22:24:26:9a:f9:c7:1c:6f:e0:a0:52:af:14:85:2f:5d:32:e0: 68:4f:0c:9a:8c:19:cf:8c:f9:24:f5:b5:cd:a5:d4:c8:47:1b: f7:64:64:48:aa:58:f4:fd:3d:9c:b9:fc:d8:2c:64:01:73:45: f4:4e:cf:c5:05:d3:18:59:60:20:27:a7:3f:e3:e2:80:31:2b: 4e:2a:83:29:53:e5:56:2d:fc:75:37:19:e2:6b:da:64:99:e7: fc:f1:f9:64:f4:14:0d:49:75:d9:37:ab:7f:96:c8:b0:a8:a8: 29:35:49:53:76:a6:7c:44:c4:d5:f3:e2:a3:23:4b:0e:92:e4: f9:47:58:65:5c:2d:2c:cb:34:06:69:01:da:0c:5b:1e:88:23: 7b:31:44:8b:2a:c3:da:10:95:8b:10:8c:37:1d:5e:71:50:62: 73:ec:d6:07:9d:64:2a:a4:fd:37:74:a2:19:3f:9f:97:fe:a2: 83:91:45:aa -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7NmhjdjeqTGqsU8KCQ5/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTMzMmRkMjk5NGM2ZWU4OTQzNjE1OGEyZWFjMWY0ODI5MjJjZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTKb8gDTMyB1YTz94QrIC6k3kE1Z /5dsri2WSIq+SPidsjpluWwBXrqqD0ZLSNjp72P8Dx4zOBvIxvvKr2nQkKBeW7J6 W7KI7g2a5vziAxjXycbwPJ3/0KLw5Sw4SBm6wzLA73ymAnuAp3RGUEsb74ExJcal Z/lH2TlaWbyVn+pTqVjdA2hiqNsDi+PhAOfemUXd3ho8wky7MM1N6RxPJbV1jCj1 7aLWekmm1Oa7VTcQn6zGyD8Fu5xFz9+Qf5OrXQ20SdbL3+mr6NTljkCN41zAh02Q IK7vd1f9SUa6ipSo5YDvUJfeyI0Ghq8HO1rEge0moPMKuvfOxXbrjjO4VQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFD4zLdKZTG7olDYVii6sH0gpIs0qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzYwOGUy MS02YTQwLTQ3MTEtOWM4My1kMDI0YWQ0YjdiZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNjA4ZTIx LTZhNDAtNDcxMS05YzgzLWQwMjRhZDRiN2JlYi8xL1BqTXQwcGxNYnVpVU5oV0tM cXdmU0NraXpTby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueYoMA0EAgACMAcDBQMqEzaAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMg+QIDA0wiMA0GCSqGSIb3DQEBCwUAA4IBAQCckFcX If/HZLN1LqOS2M0AF5hf1pIRcDf/aOWUrHLoTkAqASN8cbPq+zfdm38M7rZhsqwY sEUu8mPDy8sDqDmEmxFvWOshUD8iJCaa+cccb+CgUq8UhS9dMuBoTwyajBnPjPkk 9bXNpdTIRxv3ZGRIqlj0/T2cufzYLGQBc0X0Ts/FBdMYWWAgJ6c/4+KAMStOKoMp U+VWLfx1Nxnia9pkmef88flk9BQNSXXZN6t/lsiwqKgpNUlTdqZ8RMTV8+KjI0sO kuT5R1hlXC0syzQGaQHaDFseiCN7MUSLKsPaEJWLEIw3HV5xUGJz7NYHnWQqpP03 dKIZP5+X/qKDkUWq -----END CERTIFICATE-----Generated at Tue Jan 20 04:34:41 2026 by rpki-client