This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer File: pRZKRoFl6caTvYGEw8pWbKcP1WA.cer (raw, json) Hash identifier: E573khCD1qH3q+ppcFa5xI2ituor8CbFZWVm5fuoERs= Subject key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8EE10286364083775D17A2C60E6FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39874 IP: 45.81.64.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ee:10:28:63:64:08:37:75:d1:7a:2c:60:e6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:87:4f:63:5e:38:44:73:be:fc:22:a5:d9: 7e:13:9c:69:1f:94:2e:1c:3a:47:53:ac:37:f2:04: d8:f8:3d:83:bb:45:8d:86:db:82:3a:17:94:3b:27: 3f:2a:f8:1a:b4:47:a2:05:46:b2:0d:0b:ca:47:d1: d7:25:e0:1b:3a:dd:f1:d8:47:12:a0:fd:60:62:ed: 34:ef:f2:44:29:79:fd:8f:d8:fd:6f:b3:fa:dc:e4: 9b:3d:cf:79:53:07:e1:a1:e8:90:9a:d4:eb:ee:76: 37:77:3a:ce:26:72:5e:4a:f3:de:8f:a9:f0:a5:38: 8e:c6:6d:12:4b:ea:60:39:27:d9:c0:b0:2e:53:a4: 2f:28:ce:c1:c2:b8:1c:04:9a:f6:27:45:a6:b1:08: 19:68:fa:3f:d3:7d:b5:a6:a5:06:03:0b:a9:5e:ab: 81:e6:6b:36:c2:3e:58:c2:b5:a8:76:4a:7f:8f:70: 2f:cd:8a:c6:f9:c4:88:77:4f:72:7c:e0:a5:43:b1: a4:7b:3d:43:db:46:6f:2a:10:9e:3d:bf:47:8f:82: 35:22:ff:2f:d1:9b:f0:30:c5:23:1a:cb:14:0d:9a: 0d:28:2a:bb:f4:2f:33:e9:84:0d:00:cd:eb:4e:b5: cf:08:9a:4e:1e:22:61:47:4e:dc:f8:92:2c:d3:6a: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39874 Signature Algorithm: sha256WithRSAEncryption 65:42:2d:bd:9c:fc:fa:9b:2c:11:6d:61:ba:ec:3c:d8:b5:c1: 64:e1:97:60:91:77:0a:e9:78:d3:9a:6b:00:ad:6d:d7:86:d9: 46:d5:cd:8f:3e:3d:70:33:d1:e9:d6:4c:d8:93:49:87:06:2f: dc:e0:cb:9a:59:57:5e:e2:d0:a1:2a:04:ca:3f:fa:64:d7:03: 98:ec:3a:e9:27:79:02:3c:f9:07:35:1c:ac:c0:18:0b:fb:67: 26:25:c8:5d:c3:6f:8d:90:77:58:01:5d:1b:c5:1a:b1:f3:c3: ac:4f:cd:40:dc:2a:c8:23:9e:5a:ea:fe:0a:33:b1:96:03:5a: 71:11:ed:b1:aa:8a:80:c1:9f:5e:fc:15:24:9f:93:27:cc:02: db:4a:b0:ee:fa:7b:74:99:7c:89:38:44:d5:b6:14:57:16:35: 7f:c1:94:7a:4b:f2:4d:a7:cd:82:c3:e4:9b:ff:9e:8a:9c:26: 00:b6:5c:17:96:70:59:71:00:c6:cc:51:fd:6a:85:2a:b7:76: ba:e4:1b:ff:76:c6:7f:e3:65:4f:1d:3b:e1:c6:f8:b9:37:7e: 20:25:85:1d:dd:7e:24:ef:24:a5:d2:c4:66:96:2e:14:3c:fc: 30:88:77:26:55:70:28:95:8f:41:2a:94:69:7d:07:45:47:ae: e1:5e:48:f7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yO4QKGNkCDd10XosYOb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTE2NGE0NjgxNjVlOWM2OTNiZDgxODRjM2NhNTY2Y2E3MGZkNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVmHT2NeOERzvvwipdl+E5xpH5Qu HDpHU6w38gTY+D2Du0WNhtuCOheUOyc/KvgatEeiBUayDQvKR9HXJeAbOt3x2EcS oP1gYu007/JEKXn9j9j9b7P63OSbPc95UwfhoeiQmtTr7nY3dzrOJnJeSvPej6nw pTiOxm0SS+pgOSfZwLAuU6QvKM7BwrgcBJr2J0WmsQgZaPo/0321pqUGAwupXquB 5ms2wj5YwrWodkp/j3AvzYrG+cSId09yfOClQ7Gkez1D20ZvKhCePb9Hj4I1Iv8v 0ZvwMMUjGssUDZoNKCq79C8z6YQNAM3rTrXPCJpOHiJhR07c+JIs02rd0QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKUWSkaBZenGk72BhMPKVmynD9VgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzFmY2Zi YS1jZGEwLTRhZDMtOTg5My05NDU4N2Q4MzMxZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMWZjZmJh LWNkYTAtNGFkMy05ODkzLTk0NTg3ZDgzMzFmOS8xL3BSWktSb0ZsNmNhVHZZR0V3 OHBXYktjUDFXQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVFAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCbwjANBgkqhkiG9w0BAQsFAAOCAQEAZUItvZz8+pssEW1huuw82LXBZOGXYJF3 Cul405prAK1t14bZRtXNjz49cDPR6dZM2JNJhwYv3ODLmllXXuLQoSoEyj/6ZNcD mOw66Sd5Ajz5BzUcrMAYC/tnJiXIXcNvjZB3WAFdG8UasfPDrE/NQNwqyCOeWur+ CjOxlgNacRHtsaqKgMGfXvwVJJ+TJ8wC20qw7vp7dJl8iThE1bYUVxY1f8GUekvy TafNgsPkm/+eipwmALZcF5ZwWXEAxsxR/WqFKrd2uuQb/3bGf+NlTx074cb4uTd+ ICWFHd1+JO8kpdLEZpYuFDz8MIh3JlVwKJWPQSqUaX0HRUeu4V5I9w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:28 2026 by rpki-client