This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer File: pTJy83vudp-iPqZUueOPsCNGjZI.cer (raw, json) Hash identifier: BQtlLoOtXLLWkEfVi0KVUdu8y1Rz/yRxTbVxO9wque0= Subject key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA3FB5D191024D095592E0EE81AF16E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213715 IP: 82.115.14.0/24 IP: 194.76.185.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:3f:b5:d1:91:02:4d:09:55:92:e0:ee:81:af:16:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53272f37bee769fa23ea654b9e38fb023468d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:58:d7:64:eb:d7:5f:8d:a8:7e:59:80:ed: fa:f1:0b:68:12:25:b7:b8:c9:a2:3c:e2:50:7c:71: e0:00:b8:f8:4f:ba:94:bd:5e:f9:09:ae:53:ee:f5: 1a:f7:ca:9a:f5:3b:63:f6:1b:b1:83:78:1a:3c:1b: 49:9a:82:6a:04:bc:70:5d:be:48:15:a0:34:de:8a: 65:f9:c4:ca:0b:54:cb:ef:d1:cb:36:8f:c1:08:0f: 5b:00:1d:49:c8:21:d0:1c:37:5a:0d:4f:ed:68:88: a3:95:8f:7e:89:7f:55:a5:73:d1:bc:ab:0a:92:74: 2b:b5:d5:75:e6:ff:c2:71:ce:49:5e:43:71:2d:33: 32:ac:16:32:42:97:31:19:78:cc:80:9c:56:cf:f9: f4:87:bc:18:8f:af:6b:17:9a:52:1c:7f:d5:4a:41: 9b:30:53:38:3a:dd:a6:b5:bc:38:a6:3d:36:a9:ce: ef:5d:02:ae:3f:0d:91:c6:a9:da:2a:19:7a:8b:c0: 36:cb:61:ea:c2:d3:b4:b8:9e:ae:70:a4:a7:63:f6: ce:08:7e:86:b9:23:8a:5e:32:39:b4:a9:0d:a9:b7: 42:ca:08:41:2e:5e:88:9b:64:b4:b8:45:ee:9f:f1: 4a:3a:d5:c6:30:ab:06:0e:37:1e:a9:9a:f8:41:50: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.14.0/24 194.76.185.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213715 Signature Algorithm: sha256WithRSAEncryption 96:fd:a1:79:fc:f7:d5:93:c8:09:e4:6b:40:e0:96:25:71:99: d8:08:31:42:5b:81:52:15:07:9c:bd:b5:e4:bf:1d:27:81:fb: 54:80:f8:46:44:ed:7b:fc:4f:2f:a3:ef:09:cd:cb:5b:80:5d: ff:f8:a3:9a:b6:16:dc:c1:ce:70:c5:e3:8b:73:4e:d9:78:ed: 91:4d:a5:94:8f:16:c0:5e:75:c6:1a:e0:2a:e0:8d:98:d1:ab: 60:1f:02:0f:f6:80:ad:66:0e:ee:2d:8b:b2:de:03:7e:15:14: 8a:9e:b6:f7:9b:bc:b6:e2:7c:79:af:1e:c8:c7:56:7d:d6:d2: 32:d5:89:aa:44:12:e2:ce:cd:0a:b3:f8:0e:8d:43:7c:26:d9: 00:53:21:f4:c5:48:94:e5:9e:df:eb:b3:a9:fd:84:c2:23:14: ef:49:17:c9:79:e0:d6:bf:b1:40:7b:16:d6:0a:bb:da:76:0d: 39:5e:9c:8a:fa:57:1d:f0:fb:90:2f:cc:09:05:f2:62:9f:77: 22:cb:ab:4c:0e:d7:f4:8c:4f:1e:c8:aa:89:6f:42:cd:82:a5: 5e:c3:43:b1:9b:b0:53:d0:01:d9:3f:77:fc:74:c9:44:a2:46: de:60:14:05:0c:ad:97:d8:f7:aa:5b:1b:c9:0f:ca:ec:a7:e5: 89:c7:75:26 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZv6P7XRkQJNCVWS4O6BrxblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTMyNzJmMzdiZWU3NjlmYTIzZWE2NTRiOWUzOGZiMDIzNDY4ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCRY12Tr11+NqH5ZgO368QtoEiW3 uMmiPOJQfHHgALj4T7qUvV75Ca5T7vUa98qa9Ttj9huxg3gaPBtJmoJqBLxwXb5I FaA03opl+cTKC1TL79HLNo/BCA9bAB1JyCHQHDdaDU/taIijlY9+iX9VpXPRvKsK knQrtdV15v/Ccc5JXkNxLTMyrBYyQpcxGXjMgJxWz/n0h7wYj69rF5pSHH/VSkGb MFM4Ot2mtbw4pj02qc7vXQKuPw2RxqnaKhl6i8A2y2HqwtO0uJ6ucKSnY/bOCH6G uSOKXjI5tKkNqbdCyghBLl6Im2S0uEXun/FKOtXGMKsGDjceqZr4QVDRgwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKUycvN77nafoj6mVLnjj7AjRo2SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2YzZjA2 ZC00YjI3LTQ5ODEtOTVjNi0yZjU2YTVhOWE3NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvZjNmMDZk LTRiMjctNDk4MS05NWM2LTJmNTZhNWE5YTc1Ni8xL3BUSnk4M3Z1ZHAtaVBxWlV1 ZU9Qc0NOR2paSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAUnMOAwQAwky5MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwNC0zANBgkqhkiG9w0BAQsFAAOCAQEAlv2hefz31ZPICeRrQOCWJXGZ 2AgxQluBUhUHnL215L8dJ4H7VID4RkTte/xPL6PvCc3LW4Bd//ijmrYW3MHOcMXj i3NO2XjtkU2llI8WwF51xhrgKuCNmNGrYB8CD/aArWYO7i2Lst4DfhUUip6295u8 tuJ8ea8eyMdWfdbSMtWJqkQS4s7NCrP4Do1DfCbZAFMh9MVIlOWe3+uzqf2EwiMU 70kXyXng1r+xQHsW1gq72nYNOV6civpXHfD7kC/MCQXyYp93IsurTA7X9IxPHsiq iW9CzYKlXsNDsZuwU9AB2T93/HTJRKJG3mAUBQytl9j3qlsbyQ/K7Kflicd1Jg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:21 2026 by rpki-client