This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer File: pnQBXVCbXU85bqNjNp6ddP-tdZM.cer (raw, json) Hash identifier: AFmot2Zvp1tFGs5uKXnAlJuhgcP4h36X7G5qWBrM9J4= Subject key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F70697DA808FA2D23898448D5B99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200804 IP: 185.94.112.0/22 IP: 2a04:c280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f7:06:97:da:80:8f:a2:d2:38:98:44:8d:5b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a674015d509b5d4f396ea363369e9d74ffad7593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:f9:35:b0:c3:1c:ba:16:fa:60:0a:88:7a: 73:21:d1:63:65:c2:99:5d:e6:08:da:a4:c6:09:17: 21:92:46:7e:ea:8a:b7:b5:c4:de:56:bc:58:a9:b7: 97:7c:b3:23:d8:dd:05:07:ae:96:8f:09:b8:f1:ab: b5:0f:6e:e3:70:ea:a4:d8:2a:e4:d2:a6:84:f5:12: f6:2f:78:d6:ee:0b:f8:9c:c7:34:23:a6:a7:63:b9: fb:ff:8a:a7:a2:58:6e:8a:bc:e6:33:e9:72:3a:11: a2:38:9b:03:74:52:10:41:a0:60:31:ec:7d:75:8d: 25:64:53:33:60:1b:ec:a6:ac:d9:46:d5:ba:fa:80: bf:fb:8e:60:52:d5:22:82:b2:51:11:86:f4:e5:d9: 31:42:ae:7f:10:17:69:b5:ed:bf:8a:1f:87:b7:76: 78:e4:f6:67:41:ea:c9:bf:2a:a8:c7:cb:82:41:20: c3:45:7a:c2:16:9e:2d:90:ae:b9:61:5f:97:f8:e8: 9b:e6:6b:84:70:b0:b6:4e:5b:1b:9b:c6:e5:7f:52: 4e:34:e8:54:ac:6d:5c:17:dc:9f:b0:a7:af:74:a5: d0:96:78:ba:69:ec:be:1a:17:80:b8:4e:86:6b:68: bb:52:6e:57:ea:90:43:b0:15:bd:08:ba:de:12:98: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.112.0/22 IPv6: 2a04:c280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200804 Signature Algorithm: sha256WithRSAEncryption 52:59:06:73:12:c8:cd:a2:86:e7:4c:6e:cf:55:37:24:de:d6: 8f:16:cb:df:6d:32:fd:43:9f:f2:4a:a9:25:09:b8:52:b4:63: 9e:d9:36:8c:53:41:22:d5:cd:b6:a3:e5:fd:ed:aa:1c:f4:48: 36:3e:fa:30:68:a0:c7:85:8d:98:be:7b:17:ec:78:3d:57:f9: ee:5c:fd:b0:e9:23:71:3b:01:f7:07:9d:47:3c:c5:99:0e:e3: d2:78:f9:d7:20:43:80:89:95:8b:af:c5:25:b8:1a:7c:b1:56: 74:c4:99:eb:98:26:d4:0f:1a:a6:d6:44:27:64:c7:58:87:79: 9a:8e:bd:0f:9d:dd:9b:25:5c:31:64:50:f9:c2:19:3b:ed:0b: c1:de:24:ef:fd:f9:63:35:7f:1a:b2:74:83:5a:e0:d4:f2:0e: ee:07:25:b4:e3:e0:57:3c:3d:be:28:ed:91:57:46:4a:96:c7: ab:6c:22:c4:72:83:7c:c5:b4:6c:91:39:c3:40:cb:b8:70:cc: 57:ee:08:8c:92:68:c9:72:10:4b:83:2a:d2:aa:81:63:f4:cc: 21:97:9e:bc:9d:f0:7d:01:06:1b:99:d4:aa:d4:2b:de:6a:43: 5f:7e:22:0f:7c:1a:ed:6e:06:9c:16:09:1a:f2:d8:8b:b1:5d: eb:e3:3b:9f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FfcGl9qAj6LSOJhEjVuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjc0MDE1ZDUwOWI1ZDRmMzk2ZWEzNjMzNjllOWQ3NGZmYWQ3NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgT5NbDDHLoW+mAKiHpzIdFjZcKZ XeYI2qTGCRchkkZ+6oq3tcTeVrxYqbeXfLMj2N0FB66Wjwm48au1D27jcOqk2Crk 0qaE9RL2L3jW7gv4nMc0I6anY7n7/4qnolhuirzmM+lyOhGiOJsDdFIQQaBgMex9 dY0lZFMzYBvspqzZRtW6+oC/+45gUtUigrJREYb05dkxQq5/EBdpte2/ih+Ht3Z4 5PZnQerJvyqox8uCQSDDRXrCFp4tkK65YV+X+Oib5muEcLC2Tlsbm8blf1JONOhU rG1cF9yfsKevdKXQlni6aey+GheAuE6Ga2i7Um5X6pBDsBW9CLreEph7FwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKZ0AV1Qm11POW6jYzaenXT/rXWTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzY4OWU3 MC1lMzhkLTRmZjEtYTk3Mi00MTEzZDY4NmRkNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNjg5ZTcw LWUzOGQtNGZmMS1hOTcyLTQxMTNkNjg2ZGQ2Ni8xL3BuUUJYVkNiWFU4NWJxTmpO cDZkZFAtdGRaTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuV5wMA0EAgACMAcDBQMqBMKAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMQZDANBgkqhkiG9w0BAQsFAAOCAQEAUlkGcxLIzaKG 50xuz1U3JN7WjxbL320y/UOf8kqpJQm4UrRjntk2jFNBItXNtqPl/e2qHPRINj76 MGigx4WNmL57F+x4PVf57lz9sOkjcTsB9wedRzzFmQ7j0nj51yBDgImVi6/FJbga fLFWdMSZ65gm1A8aptZEJ2THWId5mo69D53dmyVcMWRQ+cIZO+0Lwd4k7/35YzV/ GrJ0g1rg1PIO7gcltOPgVzw9vijtkVdGSpbHq2wixHKDfMW0bJE5w0DLuHDMV+4I jJJoyXIQS4Mq0qqBY/TMIZeevJ3wfQEGG5nUqtQr3mpDX34iD3wa7W4GnBYJGvLY i7Fd6+M7nw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:41 2026 by rpki-client