This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer File: pcJJ62-mtduvarnes6d3juDrNIc.cer (raw, json) Hash identifier: luSFCiLsU0SuyvzsHaRjMnCkhluOQeBQRZldpLh3Zx0= Subject key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84F552F58FA3F473835790768B4545 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215489 IP: 170.237.0.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f5:52:f5:8f:a3:f4:73:83:57:90:76:8b:45:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:53:01:a5:2c:4d:bb:56:05:7e:0c:73:48: 3c:63:88:db:80:8b:4d:e1:a7:91:e5:4f:f7:55:0b: de:d4:23:32:a3:cd:7f:26:a6:25:1e:b9:60:ce:f3: ac:6e:3b:37:25:dc:43:ee:6c:db:96:af:4c:53:f1: fc:1d:0b:89:be:ef:58:f6:eb:62:09:e8:d0:f7:3d: 3e:f0:4d:f9:33:5b:cc:c4:c4:5e:bf:8b:0d:24:41: ee:b3:81:ae:e0:6d:18:6f:a2:30:5e:b6:2d:13:7c: 3c:aa:f6:99:c6:c7:33:41:91:41:96:6c:7b:7d:6b: 68:b6:90:29:af:7f:a8:41:e4:fd:75:36:20:f2:4b: f0:c7:55:38:ff:08:a0:07:1d:18:37:01:b2:27:51: eb:06:f5:16:e1:49:50:09:0b:40:ff:bd:54:d2:0a: 93:3b:ca:4f:56:6a:9e:6f:c1:13:6f:76:c4:2c:19: 9a:cc:28:5c:81:e7:5d:ac:6c:4a:8d:fd:6a:fa:4a: f1:6b:d5:94:f7:79:ed:f7:5d:34:d2:7a:00:a4:cf: 0f:38:f7:40:4c:a0:66:a5:42:1f:6c:dd:5d:7e:52: 05:d5:47:af:c6:3e:7d:1f:71:af:69:b5:c3:99:ad: 47:c5:fe:b3:03:86:59:e1:eb:24:65:7d:64:af:4b: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.237.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215489 Signature Algorithm: sha256WithRSAEncryption a2:5d:3c:36:56:90:e3:4a:31:08:ee:de:da:cd:41:ec:14:6a: 95:2e:f4:48:1b:77:7b:9d:a7:b8:76:0e:ed:83:aa:cb:1f:99: df:a7:38:c9:4d:a2:09:2c:4f:be:61:b7:a5:bd:6b:20:8d:95: e9:68:28:1c:ac:c1:d5:09:f7:c5:6a:5a:8e:42:76:9c:e7:86: 86:f3:00:d1:a1:85:c8:8a:96:03:b3:b3:79:39:0c:7f:9c:9c: 77:69:b4:4b:d3:0f:71:3a:e1:ec:9e:d0:39:e3:67:d7:8c:78: c2:2e:d7:bf:7c:bf:07:69:68:ce:ca:32:30:5d:38:f1:a7:99: 70:e2:89:17:ec:99:02:64:54:5b:c1:1f:e1:dc:64:f1:65:85: 03:b1:8e:d7:7c:da:39:1a:30:64:5c:83:f1:4f:16:eb:c7:60: 0e:9f:29:84:a7:72:0a:21:94:db:f9:0c:2c:b2:df:90:e1:ab: f4:97:4b:e5:63:dd:fe:b8:dd:e7:9e:16:f0:48:5c:d1:c8:46: 57:1a:c0:3f:4c:9c:99:34:58:fd:4e:cd:9a:c2:18:df:94:a8: 4f:b6:85:3f:e7:7c:9d:a7:2b:a6:68:7d:90:b9:a1:81:ae:1c: de:3b:bf:f8:38:45:2f:46:ee:29:30:f8:7c:7d:63:c4:93:59: c4:a5:c8:e9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hPVS9Y+j9HODV5B2i0VFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWMyNDllYjZmYTZiNWRiYWY2YWI5ZGViM2E3Nzc4ZWUwZWIzNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+NTAaUsTbtWBX4Mc0g8Y4jbgItN 4aeR5U/3VQve1CMyo81/JqYlHrlgzvOsbjs3JdxD7mzblq9MU/H8HQuJvu9Y9uti CejQ9z0+8E35M1vMxMRev4sNJEHus4Gu4G0Yb6IwXrYtE3w8qvaZxsczQZFBlmx7 fWtotpApr3+oQeT9dTYg8kvwx1U4/wigBx0YNwGyJ1HrBvUW4UlQCQtA/71U0gqT O8pPVmqeb8ETb3bELBmazChcgeddrGxKjf1q+krxa9WU93nt91000noApM8POPdA TKBmpUIfbN1dflIF1Uevxj59H3GvabXDma1Hxf6zA4ZZ4eskZX1kr0tWfQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKXCSetvprXbr2q53rOnd47g6zSHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzQ1MzE5 OS02MzQzLTRjNjctYjg3ZS0zMmViM2E0ZWFkNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNDUzMTk5 LTYzNDMtNGM2Ny1iODdlLTMyZWIzYTRlYWQ0My8xL3BjSko2Mi1tdGR1dmFybmVz NmQzanVEck5JYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEqu0AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNJwTANBgkqhkiG9w0BAQsFAAOCAQEAol08NlaQ40oxCO7e2s1B7BRqlS70SBt3 e52nuHYO7YOqyx+Z36c4yU2iCSxPvmG3pb1rII2V6WgoHKzB1Qn3xWpajkJ2nOeG hvMA0aGFyIqWA7OzeTkMf5ycd2m0S9MPcTrh7J7QOeNn14x4wi7Xv3y/B2lozsoy MF048aeZcOKJF+yZAmRUW8Ef4dxk8WWFA7GO13zaORowZFyD8U8W68dgDp8phKdy CiGU2/kMLLLfkOGr9JdL5WPd/rjd554W8Ehc0chGVxrAP0ycmTRY/U7NmsIY35So T7aFP+d8nacrpmh9kLmhga4c3ju/+DhFL0buKTD4fH1jxJNZxKXI6Q== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:34 2026 by rpki-client