This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer File: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer (raw, json) Hash identifier: qqUmbXVObIpbQm56lCNT4WXNI0fXNwePG/dggqJENyE= Subject key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB7E82AFCF83495E1A10EA06224E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62269 IP: 193.56.133.0/24 IP: 2a11:5b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b7:e8:2a:fc:f8:34:95:e1:a1:0e:a0:62:24:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65f995603663a569430ccc617287e919df144a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:c2:0c:41:7b:6d:02:d2:fc:06:bf:1b:01: 1f:37:c3:7a:61:b3:61:ba:18:18:2e:6c:82:1a:0f: 4d:bb:15:68:30:fd:24:79:40:a7:e1:6c:c8:85:1d: c6:b7:9c:0d:ce:0b:97:5c:01:76:19:9d:65:e3:ad: 93:f2:03:96:3d:6d:42:6b:30:32:ea:4b:21:e3:b0: 1e:ba:5d:aa:94:d4:9e:52:20:48:ae:f5:ac:82:62: 12:49:ed:f6:0a:57:e7:2f:cf:cc:c1:42:e2:c5:aa: 31:f5:0a:ba:2f:3d:17:d2:a0:b2:2a:5d:6c:f4:f3: 08:da:ab:84:47:c1:1b:d5:e4:a1:9c:a8:34:99:af: d6:98:4e:88:67:51:b6:ac:20:1c:5f:19:1f:58:7e: 9a:78:67:a1:f7:c7:97:f4:cb:00:d3:c9:16:74:37: c5:a1:28:ba:48:ec:4a:7b:47:a9:6a:ed:d6:72:5b: 67:e6:bc:90:16:ff:3d:b5:ee:90:f7:78:1c:30:c5: 1c:73:79:8e:2f:bb:15:d8:a0:b3:c9:dc:a5:23:de: 25:05:52:78:d7:79:70:f8:57:16:dc:6a:92:17:6e: 00:56:89:cd:92:8f:c5:ae:09:51:b4:6b:82:b1:40: 7a:0f:d3:06:99:dc:d4:50:e6:ae:ad:c2:20:19:20: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.133.0/24 IPv6: 2a11:5b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62269 Signature Algorithm: sha256WithRSAEncryption 86:d8:e1:a7:a7:f7:3b:ad:3b:86:59:90:d2:fb:60:87:01:74: 77:0b:6e:e0:70:d8:19:99:36:41:74:14:32:57:e9:1d:7d:6e: c8:04:53:c5:89:a1:bc:db:7e:80:6b:ce:48:2b:fc:c1:dc:65: 4d:3f:cc:d6:c0:b5:c8:03:58:27:51:05:13:11:a3:a6:76:04: be:8f:c8:c0:38:65:35:22:ae:a1:fa:09:29:d3:ec:18:aa:36: 64:6e:97:15:9a:58:f8:42:6f:bc:02:34:42:2d:fd:59:08:b2: 20:62:99:58:f7:bb:fb:f8:e5:04:7d:1d:69:6d:48:99:b1:74: 18:d7:97:4c:47:31:99:17:db:6b:3b:7e:60:98:64:4c:8f:8c: 1c:6a:bd:bb:2e:27:2b:5f:44:ee:8b:24:37:cb:e4:6c:fd:f6: 93:26:01:bc:b2:6d:10:50:65:41:34:f7:e9:b5:64:b1:c1:ee: 2e:9e:dd:8d:ee:07:41:4a:e0:06:27:78:d8:8b:42:53:ec:9e: 15:4c:b7:c8:5b:70:ba:32:4f:73:5d:d1:4a:fb:b0:1d:74:ff: a0:2d:b4:46:b9:cf:4b:63:ef:ed:f5:b0:3b:33:2e:fd:e0:72: 69:ee:06:84:65:70:a4:b3:6a:11:24:d3:82:d8:01:04:7b:b1: 42:22:89:3f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XLfoKvz4NJXhoQ6gYiTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjVmOTk1NjAzNjYzYTU2OTQzMGNjYzYxNzI4N2U5MTlkZjE0NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuLCDEF7bQLS/Aa/GwEfN8N6YbNh uhgYLmyCGg9NuxVoMP0keUCn4WzIhR3Gt5wNzguXXAF2GZ1l462T8gOWPW1CazAy 6ksh47Aeul2qlNSeUiBIrvWsgmISSe32ClfnL8/MwULixaox9Qq6Lz0X0qCyKl1s 9PMI2quER8Eb1eShnKg0ma/WmE6IZ1G2rCAcXxkfWH6aeGeh98eX9MsA08kWdDfF oSi6SOxKe0epau3Wcltn5ryQFv89te6Q93gcMMUcc3mOL7sV2KCzydylI94lBVJ4 13lw+FcW3GqSF24AVonNko/FrglRtGuCsUB6D9MGmdzUUOaurcIgGSBm/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKZfmVYDZjpWlDDMxhcofpGd8USgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzU4YTE5 Yi03MGM0LTRhMGUtYjhhYi01OGMzZjQxOGYzZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNThhMTli LTcwYzQtNGEwZS1iOGFiLTU4YzNmNDE4ZjNmZC8xL3BsLVpWZ05tT2xhVU1NekdG eWgta1ozeFJLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwTiFMA0EAgACMAcDBQMqEVsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzPTANBgkqhkiG9w0BAQsFAAOCAQEAhtjhp6f3O607 hlmQ0vtghwF0dwtu4HDYGZk2QXQUMlfpHX1uyARTxYmhvNt+gGvOSCv8wdxlTT/M 1sC1yANYJ1EFExGjpnYEvo/IwDhlNSKuofoJKdPsGKo2ZG6XFZpY+EJvvAI0Qi39 WQiyIGKZWPe7+/jlBH0daW1ImbF0GNeXTEcxmRfbazt+YJhkTI+MHGq9uy4nK19E 7oskN8vkbP32kyYBvLJtEFBlQTT36bVkscHuLp7dje4HQUrgBid42ItCU+yeFUy3 yFtwujJPc13RSvuwHXT/oC20RrnPS2Pv7fWwOzMu/eByae4GhGVwpLNqESTTgtgB BHuxQiKJPw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:26 2026 by rpki-client