This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer File: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer (raw, json) Hash identifier: 4JcfH2HhAxtpSo41n71oYfz1ZKnHoM1aQCCRsnFnYYs= Subject key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C76F8D18F3DCC50BBA24AD7F678BFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.152.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:8d:18:f3:dc:c5:0b:ba:24:ad:7f:67:8b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4b707300e869467be5e5273222d90e0b618f924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:7f:0e:6a:db:35:4d:ba:49:8a:d6:38:bf: a2:ed:9c:ac:a6:fb:d9:67:26:43:d2:7d:25:01:8f: 62:94:47:b6:e4:88:cc:6f:c5:a7:8d:df:58:da:e9: a8:9a:05:82:40:4d:8b:2f:a1:d4:d2:3d:39:91:d0: 33:62:d9:06:7c:7b:97:b7:8b:94:e8:53:7e:7e:01: 24:e6:bf:37:b0:d5:c3:47:62:79:23:ff:7b:4a:63: e6:88:08:25:33:bc:bf:5b:f1:b8:97:94:3a:a3:71: e8:99:54:e5:06:a2:c3:5c:12:e4:c5:39:87:bf:49: 85:9e:48:89:96:48:ef:1e:69:03:a0:3e:0f:7a:56: 97:2a:9a:20:a7:66:0c:75:3b:d0:84:0e:38:a4:da: fa:c9:71:b8:f3:7e:72:9d:fd:d1:64:69:de:42:6d: 6a:bd:5f:7a:6c:36:a2:3b:d7:5a:0c:04:7c:2f:79: b2:d9:61:ad:f5:5c:0c:60:cf:41:aa:fb:08:f5:d2: ed:e1:5b:64:5f:72:5d:d0:b3:05:47:24:d6:a3:11: ea:7b:6f:21:77:ce:25:2e:1c:00:0f:b6:c0:1c:91: e5:93:0a:96:43:9b:1c:e6:93:d9:49:7c:1b:fb:35: 87:7b:82:53:6e:a3:1e:72:36:86:b3:0d:01:1f:32: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.56.0/22 Signature Algorithm: sha256WithRSAEncryption 81:64:7c:8d:77:71:1f:cf:b4:ef:53:54:9a:81:b9:4e:31:26: 60:53:61:fc:2f:a6:cd:6a:0d:aa:01:38:67:8f:1a:b4:06:59: b8:23:20:6c:5c:e3:71:fc:93:4b:26:4c:3e:41:11:04:43:e5: c9:16:5c:3d:7b:45:1c:2b:42:72:05:e0:81:5e:b2:b2:e7:df: eb:19:23:13:5d:96:84:b7:07:c2:c0:70:4e:68:cc:d7:27:a5: 36:76:4b:ca:2a:c2:f8:8b:f5:07:14:ab:15:29:a5:11:77:57: 3a:a6:a4:64:0b:76:f0:f1:ff:41:5a:5d:0e:ea:a3:02:8e:9d: 56:46:56:59:ce:f7:f0:bb:1b:46:16:7c:9c:d5:58:64:05:a1: c7:b7:67:2c:dd:67:9e:a3:ff:a4:dd:33:7c:af:29:ad:20:ce: 68:17:9f:18:71:16:0e:88:1f:97:ee:cd:bb:b5:4e:72:2f:ac: 00:0f:ed:23:bc:ae:67:ce:93:b2:86:b3:18:de:ed:83:95:89: 05:49:42:78:14:02:7b:d0:90:45:92:48:b2:d0:b2:48:37:13: 6a:6a:50:22:ed:df:22:e7:ed:fb:7b:2f:68:b8:80:46:4b:7f: cb:e0:2d:54:0e:91:1e:6b:ac:bd:13:60:28:0f:bf:53:5e:ce: b7:95:9c:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3x2+NGPPcxQu6JK1/Z4v/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGI3MDczMDBlODY5NDY3YmU1ZTUyNzMyMjJkOTBlMGI2MThmOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv5/DmrbNU26SYrWOL+i7ZyspvvZ ZyZD0n0lAY9ilEe25IjMb8Wnjd9Y2umomgWCQE2LL6HU0j05kdAzYtkGfHuXt4uU 6FN+fgEk5r83sNXDR2J5I/97SmPmiAglM7y/W/G4l5Q6o3HomVTlBqLDXBLkxTmH v0mFnkiJlkjvHmkDoD4PelaXKpogp2YMdTvQhA44pNr6yXG4835ynf3RZGneQm1q vV96bDaiO9daDAR8L3my2WGt9VwMYM9BqvsI9dLt4VtkX3Jd0LMFRyTWoxHqe28h d84lLhwAD7bAHJHlkwqWQ5sc5pPZSXwb+zWHe4JTbqMecjaGsw0BHzK1iQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKS3BzAOhpRnvl5ScyItkOC2GPkkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2ZjODUx OS02MmU0LTQyODktOTkxNy0zZTU1YzQ5ZjJkNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmM4NTE5 LTYyZTQtNDI4OS05OTE3LTNlNTVjNDlmMmQ0ZS8xL3BMY0hNQTZHbEdlLVhsSnpJ aTJRNExZWS1TUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLZg4MA0GCSqGSIb3DQEBCwUAA4IBAQCBZHyN d3Efz7TvU1SagblOMSZgU2H8L6bNag2qAThnjxq0Blm4IyBsXONx/JNLJkw+QREE Q+XJFlw9e0UcK0JyBeCBXrKy59/rGSMTXZaEtwfCwHBOaMzXJ6U2dkvKKsL4i/UH FKsVKaURd1c6pqRkC3bw8f9BWl0O6qMCjp1WRlZZzvfwuxtGFnyc1VhkBaHHt2cs 3Weeo/+k3TN8rymtIM5oF58YcRYOiB+X7s27tU5yL6wAD+0jvK5nzpOyhrMY3u2D lYkFSUJ4FAJ70JBFkkiy0LJINxNqalAi7d8i5+37ey9ouIBGS3/L4C1UDpEea6y9 E2AoD79TXs63lZzl -----END CERTIFICATE-----Generated at Mon Jan 12 00:52:05 2026 by rpki-client