This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer File: pgzudYLpdZvgFskxqzTZKF0vyLQ.cer (raw, json) Hash identifier: 4UJkebhu+BfQJT3TpNHSfqyl3RYpxHlY+PnLgUTM6jY= Subject key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED637DD861A3B7ABEFC6A4DDFB472C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34078 AS: 47843 IP: 87.248.128.0/19 IP: 185.180.128.0/22 IP: 194.60.228.0/22 IP: 2a04:2d80::/29 IP: 2a0a:a480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:7d:d8:61:a3:b7:ab:ef:c6:a4:dd:fb:47:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:43:d9:39:cc:21:41:8d:6b:42:c3:28:ab: 87:43:de:37:ff:d2:16:8c:80:98:92:21:83:ea:3d: 04:22:76:06:ac:09:61:d0:8e:42:bb:7c:3b:b7:ef: ee:c7:f3:3a:53:c5:6e:2d:4d:b3:27:79:80:46:49: 42:81:9b:0d:a3:3b:74:30:d2:5f:f6:0e:97:95:16: 91:13:85:62:d6:2e:f0:1b:f7:a2:5a:17:f1:ed:1b: d5:f9:7c:50:d0:f4:9d:ab:59:ae:e7:38:2b:15:06: ed:cd:75:9c:76:29:c0:a1:48:ce:b3:89:58:f8:f1: dd:91:93:df:a6:ea:8b:b9:4e:23:60:14:ad:ad:5a: c8:cb:bf:7e:01:44:c9:e7:df:7a:5d:05:fb:49:ed: 01:eb:fa:9b:f7:a3:08:55:3a:94:c2:51:10:4e:ce: b1:8d:4d:5d:67:c2:4d:52:a6:36:82:80:b6:6d:f6: d6:03:33:ed:9c:e1:2b:2f:0a:9b:86:8a:e1:1e:ae: ff:1a:ca:e5:6e:07:43:f2:56:e2:4e:77:d6:cd:95: 52:b1:52:b5:3a:a3:d1:5e:00:8d:b3:49:31:e7:f3: 7d:06:c0:d7:38:6e:f0:5e:38:71:2a:81:7a:ba:62: 13:3f:92:58:0f:68:53:0c:c0:63:bb:d5:e7:7a:fe: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.128.0/19 185.180.128.0/22 194.60.228.0/22 IPv6: 2a04:2d80::/29 2a0a:a480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34078 47843 Signature Algorithm: sha256WithRSAEncryption 06:c0:05:38:0f:0b:24:3d:4b:7e:77:3b:ec:09:28:16:75:a2: 16:5f:ed:94:9b:b5:e3:1b:ec:53:54:78:f0:6d:7c:1d:9c:83: b4:f1:2e:49:23:22:9d:d7:d7:9f:b7:f3:50:40:9a:7d:8b:dd: 23:0c:31:ba:cd:55:85:06:db:1e:aa:fa:d2:44:5b:b2:89:49: ae:3c:3d:4e:bc:4d:3f:82:40:ee:9f:58:c8:74:db:b6:17:b0: 67:9c:f9:ff:33:a6:f8:e0:82:38:84:14:dd:03:c6:5b:27:61: c9:ea:24:f0:e1:e6:99:1f:ff:df:93:00:69:65:f1:78:1f:c2: 52:5f:61:2c:37:f5:9b:b9:2b:21:ec:67:2a:0c:d8:eb:7d:eb: b1:68:5f:09:e4:79:2d:21:86:de:c5:ee:7d:ad:a5:f1:63:2b: ca:0e:22:84:10:94:70:aa:82:67:54:f0:68:6e:7d:75:3f:80: d3:c0:ec:21:7b:8b:d0:b9:ef:d2:b2:7e:0a:b4:f4:7f:af:02: 16:7b:6e:17:6a:68:b7:10:53:95:06:3c:06:7e:63:29:92:52: 27:96:b9:51:ab:ab:42:66:5e:92:04:65:cd:14:09:d4:3b:1b: 93:9e:b2:9f:fa:1d:40:f5:1e:48:6a:d1:76:6a:eb:dc:e8:bd: 24:61:93:77 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt57WN92GGjt6vvxqTd+0csMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjBjZWU3NTgyZTk3NTliZTAxNmM5MzFhYjM0ZDkyODVkMmZjOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixD2TnMIUGNa0LDKKuHQ943/9IW jICYkiGD6j0EInYGrAlh0I5Cu3w7t+/ux/M6U8VuLU2zJ3mARklCgZsNozt0MNJf 9g6XlRaRE4Vi1i7wG/eiWhfx7RvV+XxQ0PSdq1mu5zgrFQbtzXWcdinAoUjOs4lY +PHdkZPfpuqLuU4jYBStrVrIy79+AUTJ5996XQX7Se0B6/qb96MIVTqUwlEQTs6x jU1dZ8JNUqY2goC2bfbWAzPtnOErLwqbhorhHq7/GsrlbgdD8lbiTnfWzZVSsVK1 OqPRXgCNs0kx5/N9BsDXOG7wXjhxKoF6umITP5JYD2hTDMBju9Xnev5cYwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFKYM7nWC6XWb4BbJMas02ShdL8i0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2RlY2Fk MC0yNmRhLTRiOWEtYjFhNy1kM2IzOGNlOWRjMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZGVjYWQw LTI2ZGEtNGI5YS1iMWE3LWQzYjM4Y2U5ZGMzNC8xL3BnenVkWUxwZFp2Z0Zza3hx elRaS0YwdnlMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQFV/iAAwQCubSAAwQCwjzkMBQEAgACMA4DBQMq BC2AAwUDKgqkgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAhR4CAwC64zANBgkq hkiG9w0BAQsFAAOCAQEABsAFOA8LJD1Lfnc77AkoFnWiFl/tlJu14xvsU1R48G18 HZyDtPEuSSMindfXn7fzUECafYvdIwwxus1VhQbbHqr60kRbsolJrjw9TrxNP4JA 7p9YyHTbthewZ5z5/zOm+OCCOIQU3QPGWydhyeok8OHmmR//35MAaWXxeB/CUl9h LDf1m7krIexnKgzY633rsWhfCeR5LSGG3sXufa2l8WMryg4ihBCUcKqCZ1TwaG59 dT+A08DsIXuL0Lnv0rJ+CrT0f68CFntuF2potxBTlQY8Bn5jKZJSJ5a5UaurQmZe kgRlzRQJ1Dsbk56yn/odQPUeSGrRdmrr3Oi9JGGTdw== -----END CERTIFICATE-----Generated at Mon Jan 19 18:19:50 2026 by rpki-client