This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer (raw, json) Hash identifier: +ZBG58FZNzIAmUKvW0hUD8l/xpwepkQwmhkkUiN+bzI= Subject key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE895DC13A75CAF7EEC832046C9B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.41.218.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e8:95:dc:13:a7:5c:af:7e:ec:83:20:46:c9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:01:03:2a:69:ef:8d:a8:b2:1e:b8:18:ac: 81:08:e5:73:21:fc:d4:e2:ea:77:2c:a9:6e:b1:bb: ce:da:39:a4:c9:46:2d:ec:25:76:9e:9e:20:4f:13: 21:1f:60:2f:da:37:75:1a:28:3a:f6:b7:ce:82:35: 61:83:d8:ed:fb:63:36:0f:92:1d:80:46:18:ad:fe: 8a:00:bc:4e:23:26:63:6e:e9:7e:c0:e9:f4:fd:da: 04:2e:8f:73:88:9b:df:ca:94:88:b1:99:ef:26:44: 8a:aa:db:be:a1:8a:32:fb:3e:1d:b9:55:ee:db:59: fb:8a:7d:98:79:66:87:98:62:ba:11:f0:fc:16:7b: 4d:92:5b:3c:bb:1e:27:68:82:95:6a:3a:e7:87:c6: d5:be:d4:ee:3f:f1:ac:c8:b5:df:58:e6:21:3b:81: 71:8f:08:e7:a3:07:d8:35:52:6d:83:4d:45:c5:ac: bb:f9:2a:36:98:4f:e3:61:b4:64:89:18:00:63:fe: 1b:5f:42:c6:26:ed:1e:b7:11:81:47:52:9a:15:3a: 3b:74:ac:bc:85:d7:7b:a8:ca:82:ed:43:13:4f:cf: 74:8e:65:b0:b4:df:7f:9b:95:1f:cb:9c:a1:08:19: 1a:f0:ce:ed:4d:9d:01:59:ea:e0:3e:83:63:cc:b8: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.41.218.0/24 Signature Algorithm: sha256WithRSAEncryption 61:05:bc:67:ab:fb:7f:0a:f8:e2:cc:67:c9:3f:8b:90:ec:5a: 03:80:c6:84:c1:ff:60:e1:be:1d:69:08:a7:06:75:eb:63:2c: be:1d:cb:c6:f6:0a:00:3d:e0:d0:53:8b:15:80:9a:38:c8:28: 14:f4:90:f8:e9:6b:7a:59:46:98:4f:dc:75:15:bf:00:aa:91: e0:e8:94:34:46:39:87:9d:a5:01:85:7f:a8:34:39:74:19:0a: 0c:55:30:b8:8b:1e:39:df:6d:36:23:8e:a2:9b:34:09:b5:1f: 6d:d6:f1:cb:1b:ca:3b:04:8b:19:42:a3:ba:ce:16:eb:3b:bf: f2:91:29:40:ae:7d:36:c6:2b:57:c7:2d:b2:a4:51:c8:62:10: 8d:6c:7e:fe:63:f4:79:69:89:ca:b7:04:a5:7e:7d:ff:7e:9c: e2:d0:c7:71:d1:e8:c0:dc:1e:d3:0b:66:cc:f1:a0:0e:1c:0f: 45:58:c3:59:64:8c:35:df:3d:47:dd:14:97:f3:f1:62:3b:a1: 40:50:d9:6d:b5:20:d9:dc:ea:de:82:08:b8:aa:3f:80:a2:da: 92:6e:c6:d4:5d:46:9d:91:fa:27:55:77:00:2b:a3:de:2f:de: bb:29:db:08:da:da:6b:c0:d4:21:2b:2d:55:4d:82:5a:81:d8: 2d:b8:2e:92 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87OiV3BOnXK9+7IMgRsm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjMwNzVjYmI3ZWIxNjkzZWU3MWJjOTBlNWY3M2RhZGMyMjVkOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ABAypp742osh64GKyBCOVzIfzU 4up3LKlusbvO2jmkyUYt7CV2np4gTxMhH2Av2jd1Gig69rfOgjVhg9jt+2M2D5Id gEYYrf6KALxOIyZjbul+wOn0/doELo9ziJvfypSIsZnvJkSKqtu+oYoy+z4duVXu 21n7in2YeWaHmGK6EfD8FntNkls8ux4naIKVajrnh8bVvtTuP/GsyLXfWOYhO4Fx jwjnowfYNVJtg01Fxay7+So2mE/jYbRkiRgAY/4bX0LGJu0etxGBR1KaFTo7dKy8 hdd7qMqC7UMTT890jmWwtN9/m5Ufy5yhCBka8M7tTZ0BWergPoNjzLgqrQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKYwdcu36xaT7nG8kOX3Pa3CJdkaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2JiZTlm Zi0yMzY1LTQ5YzgtOThkNi1lNzFjMzE3YTNmYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvYmJlOWZm LTIzNjUtNDljOC05OGQ2LWU3MWMzMTdhM2ZhOC8xL3BqQjF5N2ZyRnBQdWNieVE1 ZmM5cmNJbDJSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwCnaMA0GCSqGSIb3DQEBCwUAA4IBAQBhBbxn q/t/CvjizGfJP4uQ7FoDgMaEwf9g4b4daQinBnXrYyy+HcvG9goAPeDQU4sVgJo4 yCgU9JD46Wt6WUaYT9x1Fb8AqpHg6JQ0RjmHnaUBhX+oNDl0GQoMVTC4ix453202 I46imzQJtR9t1vHLG8o7BIsZQqO6zhbrO7/ykSlArn02xitXxy2ypFHIYhCNbH7+ Y/R5aYnKtwSlfn3/fpzi0Mdx0ejA3B7TC2bM8aAOHA9FWMNZZIw13z1H3RSX8/Fi O6FAUNlttSDZ3Oreggi4qj+AotqSbsbUXUadkfonVXcAK6PeL967KdsI2tprwNQh Ky1VTYJagdgtuC6S -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:03 2026 by rpki-client