This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer File: pb7DLWxk_7YB4nDO280-__XOekA.cer (raw, json) Hash identifier: Kh0iUPpYIHcfwbxZ1RSdeZI867pJkXoaIKbinNx1RWc= Subject key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FDABDFE600AC8126D87CC6B6A13A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 156.14.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:da:bd:fe:60:0a:c8:12:6d:87:cc:6b:6a:13:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:db:6f:f9:7f:08:a9:c6:1f:47:bd:f3:ed: bf:ba:6d:0c:3c:37:a9:7c:e9:32:a0:1f:6b:af:d8: 28:9a:49:50:2e:cf:16:c0:70:fa:d5:8f:13:1c:07: 21:3b:e3:77:b9:8b:f3:9f:6a:dd:4a:b4:6d:77:50: 59:30:9a:52:dc:19:66:b9:c3:b8:0e:e5:03:aa:a0: b3:ee:00:72:90:fa:ae:40:37:28:53:17:1b:ab:96: 41:c4:95:8a:91:52:f1:03:b5:97:df:8a:77:89:fd: 74:cb:ae:f1:6a:fd:7c:0b:c1:2b:d1:b2:33:2e:42: 59:ac:f1:8c:b3:8d:1e:76:61:69:79:ee:0e:b4:81: 1f:02:c2:4d:cc:11:c7:75:c5:45:33:3c:bc:ac:d1: 17:1a:8d:4a:49:1e:b8:25:b8:19:23:08:cc:4e:0d: 2d:37:d9:9f:c7:8f:2e:d2:5b:ef:70:52:6c:90:ff: fe:17:88:c9:7b:1c:ad:80:ab:52:0d:e0:e2:b2:4b: 79:75:ea:07:01:15:13:8d:ff:25:dc:cd:9e:d7:85: 31:0e:ac:5c:29:6a:dd:ad:88:b5:7b:d9:a8:c5:9c: 0e:b9:94:14:d2:d9:54:9c:bf:73:58:ec:bc:2a:5c: 99:a4:47:c8:6c:04:a8:c5:76:82:95:a6:8c:2e:9b: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:2a:c9:58:4f:44:5e:00:da:78:7b:79:c0:db:05:28:e5:bd: d8:36:3b:84:10:62:f3:cf:1c:bf:5e:55:1f:c5:83:d3:32:60: 12:f7:aa:b5:c0:dd:12:5c:92:9b:62:98:97:11:07:9b:79:59: 99:6c:90:e2:fc:e8:1f:60:06:95:63:bf:be:24:b1:71:68:0e: ba:99:81:08:b0:89:7d:c7:7b:1d:9f:01:15:99:0d:cb:b9:6f: e0:27:aa:01:3d:00:22:ea:29:47:d9:43:0c:f5:ff:87:1a:64: 8e:ae:e1:a6:6c:73:3f:27:50:0c:76:74:2a:79:f3:b0:57:8c: 65:f7:69:f7:62:89:a3:ca:47:2d:ac:10:58:6a:0a:27:69:04: d0:4a:da:06:a0:a2:f3:9f:01:62:d3:56:a3:ef:ea:3e:9b:ba: 73:73:6e:df:51:c0:35:77:fb:08:fd:4b:08:97:6e:d5:41:89: 37:b5:5b:dd:67:47:39:69:7f:53:63:60:32:11:27:91:cf:a1: 5b:e4:75:4d:c2:bd:c7:78:29:ae:12:00:6d:23:15:1d:5c:4e: 23:d2:9a:09:11:25:63:bc:a3:4d:96:68:a2:e2:1e:12:ac:ba: c9:d7:3b:ac:d5:a7:08:87:6e:50:7b:d2:63:91:91:78:7c:7a: 9c:1e:93:36 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt8f9q9/mAKyBJth8xrahOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWJlYzMyZDZjNjRmZmI2MDFlMjcwY2VkYmNkM2VmZmY1Y2U3YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxDbb/l/CKnGH0e98+2/um0MPDep fOkyoB9rr9gomklQLs8WwHD61Y8THAchO+N3uYvzn2rdSrRtd1BZMJpS3BlmucO4 DuUDqqCz7gBykPquQDcoUxcbq5ZBxJWKkVLxA7WX34p3if10y67xav18C8Er0bIz LkJZrPGMs40edmFpee4OtIEfAsJNzBHHdcVFMzy8rNEXGo1KSR64JbgZIwjMTg0t N9mfx48u0lvvcFJskP/+F4jJexytgKtSDeDiskt5deoHARUTjf8l3M2e14UxDqxc KWrdrYi1e9moxZwOuZQU0tlUnL9zWOy8KlyZpEfIbASoxXaClaaMLpuGiQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFKW+wy1sZP+2AeJwztvNPv/1znpAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzdkNjRm MS0zZDY0LTQyZWItYTI3NS0yMTc5NjQ0ZjM3ODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvN2Q2NGYx LTNkNjQtNDJlYi1hMjc1LTIxNzk2NDRmMzc4OC8xL3BiN0RMV3hrXzdZQjRuRE8y ODAtX19YT2VrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnA4wDQYJKoZIhvcNAQELBQADggEBAK4qyVhP RF4A2nh7ecDbBSjlvdg2O4QQYvPPHL9eVR/Fg9MyYBL3qrXA3RJckptimJcRB5t5 WZlskOL86B9gBpVjv74ksXFoDrqZgQiwiX3Hex2fARWZDcu5b+AnqgE9ACLqKUfZ Qwz1/4caZI6u4aZscz8nUAx2dCp587BXjGX3afdiiaPKRy2sEFhqCidpBNBK2gag ovOfAWLTVqPv6j6bunNzbt9RwDV3+wj9SwiXbtVBiTe1W91nRzlpf1NjYDIRJ5HP oVvkdU3Cvcd4Ka4SAG0jFR1cTiPSmgkRJWO8o02WaKLiHhKsusnXO6zVpwiHblB7 0mORkXh8epwekzY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:41 2026 by rpki-client