This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer File: pPAKrld-dFH4jqYEv2ozc0zQMAk.cer (raw, json) Hash identifier: N8sG26qscxWhvxTmnLYc6YSxwl8sFe2NOOmssN6M0e0= Subject key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ACF28004DC2DF67799EDD35581D76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.237.78.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cf:28:00:4d:c2:df:67:79:9e:dd:35:58:1d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4f00aae577e7451f88ea604bf6a33734cd03009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:8e:54:a6:75:2f:a0:a0:67:e6:b0:66:f2: da:17:b2:e4:95:41:22:de:97:2f:67:42:c7:61:9a: fe:83:3c:d2:97:3e:30:6d:90:f5:2f:5a:4e:d8:a3: ae:bb:d3:f6:75:fa:ca:04:19:2d:ca:6d:f9:7f:3b: 94:27:5d:33:ec:9b:cc:be:6c:64:8a:a5:3b:83:90: df:da:4d:43:7a:fa:36:52:d9:c9:0b:ec:b9:cc:e4: 42:d3:90:c4:d8:3f:24:97:60:a6:d1:fa:99:60:5f: ca:4e:e3:b1:89:4a:3b:06:11:3a:a6:cd:18:14:2a: ae:0c:1a:87:6f:68:4d:00:68:d2:96:48:09:73:91: b9:f8:ba:7c:39:98:c1:5f:7a:d7:5c:2b:6e:69:8e: 93:f3:36:dd:48:b6:10:cb:33:fb:00:00:a8:82:b7: 6d:77:8a:dd:3a:0a:bc:c5:29:61:12:13:3e:73:01: 82:6c:a2:73:cc:51:8f:50:09:37:44:72:ab:ef:19: ae:65:6d:1b:fb:b7:98:3b:61:49:f4:56:a2:d2:42: 6e:8b:42:5f:d3:58:74:fb:43:91:fc:94:06:7f:fd: 35:f5:da:7b:f2:e0:aa:a1:38:5c:40:68:89:6b:d8: f6:65:cb:1d:96:cd:85:6a:13:2e:0f:ec:fc:1c:99: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.78.0/24 Signature Algorithm: sha256WithRSAEncryption 47:f2:cf:af:9d:09:c7:03:16:c2:00:4a:34:1a:ad:dc:ab:f6: e7:19:1b:7d:66:0d:f3:10:89:e4:fd:6f:2c:43:99:56:84:4a: 38:c8:03:86:ef:32:b3:c3:70:9b:c5:5b:45:52:73:e6:a6:fd: 7c:eb:49:f6:fa:19:9b:cd:c2:32:bb:39:a1:2a:75:79:a4:36: dd:2d:d5:f0:84:6d:aa:d8:5b:65:31:5b:24:c1:0e:d2:c8:0e: c4:88:2e:d7:e8:c9:9d:b2:1b:d8:56:19:38:9c:f5:5f:a0:f3: 1e:74:8d:3d:ed:04:37:52:04:3d:3b:85:8b:84:fc:a8:8c:00: ab:1f:18:70:77:61:a2:a9:2c:e2:72:36:33:12:a4:37:51:0f: d8:d0:7c:65:ef:6f:2a:67:34:d7:a4:46:ac:47:8f:15:13:e6: 8a:c7:35:f5:1a:9e:b7:c5:02:dd:a2:ec:b0:f0:cf:1d:91:bb: f2:b1:87:72:b9:48:8d:4d:f4:f1:43:5a:bc:9d:9a:79:c1:3d: 7a:69:e9:87:a0:4c:c7:c8:73:07:e9:91:5a:88:00:22:1d:05: 8a:87:f5:4e:11:62:a5:81:f6:c8:1e:cc:3d:6e:17:5e:bb:fe: 6c:9a:09:fd:5f:c8:17:f3:d1:03:a0:63:b7:b9:d8:f3:52:9b: cc:24:45:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6Ws8oAE3C32d5nt01WB12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGYwMGFhZTU3N2U3NDUxZjg4ZWE2MDRiZjZhMzM3MzRjZDAzMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvamOVKZ1L6CgZ+awZvLaF7LklUEi 3pcvZ0LHYZr+gzzSlz4wbZD1L1pO2KOuu9P2dfrKBBktym35fzuUJ10z7JvMvmxk iqU7g5Df2k1Devo2UtnJC+y5zORC05DE2D8kl2Cm0fqZYF/KTuOxiUo7BhE6ps0Y FCquDBqHb2hNAGjSlkgJc5G5+Lp8OZjBX3rXXCtuaY6T8zbdSLYQyzP7AACogrdt d4rdOgq8xSlhEhM+cwGCbKJzzFGPUAk3RHKr7xmuZW0b+7eYO2FJ9Fai0kJui0Jf 01h0+0OR/JQGf/019dp78uCqoThcQGiJa9j2Zcsdls2FahMuD+z8HJlAcQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKTwCq5XfnRR+I6mBL9qM3NM0DAJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzU4YTk0 YS05ZTI4LTQ3YTUtOWZkNi05YzkxYjFjNTE1OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvNThhOTRh LTllMjgtNDdhNS05ZmQ2LTljOTFiMWM1MTU4YS8xL3BQQUtybGQtZEZINGpxWUV2 Mm96YzB6UU1Bay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+1OMA0GCSqGSIb3DQEBCwUAA4IBAQBH8s+v nQnHAxbCAEo0Gq3cq/bnGRt9Zg3zEInk/W8sQ5lWhEo4yAOG7zKzw3CbxVtFUnPm pv1860n2+hmbzcIyuzmhKnV5pDbdLdXwhG2q2FtlMVskwQ7SyA7EiC7X6MmdshvY Vhk4nPVfoPMedI097QQ3UgQ9O4WLhPyojACrHxhwd2GiqSzicjYzEqQ3UQ/Y0Hxl 728qZzTXpEasR48VE+aKxzX1Gp63xQLdouyw8M8dkbvysYdyuUiNTfTxQ1q8nZp5 wT16aemHoEzHyHMH6ZFaiAAiHQWKh/VOEWKlgfbIHsw9bhdeu/5smgn9X8gX89ED oGO3udjzUpvMJEVd -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:32 2026 by rpki-client