This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer (raw, json) Hash identifier: +AAyWV1iy7Ss9kZW6IfomDR31Q31U2v5fXkgseZr83Q= Subject key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2C4B43F9FD3E419CD24AF016192B2A64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 12:31:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.60.57.0/24 IP: 2a0e:3200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:4b:43:f9:fd:3e:41:9c:d2:4a:f0:16:19:2b:2a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 12:31:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c1affe59d58621d945b897fe6b7947d562529b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:b5:42:25:b2:56:c6:75:75:b9:ca:1d:f0: 35:71:76:ad:fb:d9:90:eb:5a:bd:5d:da:02:02:a9: 70:e6:c1:e5:68:3c:a6:b0:8c:48:4a:7f:16:c6:c2: 1d:59:4a:a1:36:e7:17:d0:8d:6e:50:ac:1b:16:d2: ab:16:80:de:e1:2c:ee:75:75:6f:73:99:1b:ce:6c: c4:f3:18:58:b6:85:b8:ea:f9:19:8d:ac:8e:05:6d: de:89:1b:de:84:59:73:23:2e:01:d9:2d:7f:ff:f1: cb:65:92:de:c7:24:ed:65:ff:7a:68:6c:66:41:a1: 34:4f:e6:a7:1c:55:7e:63:11:51:ba:99:40:a6:20: 10:b5:33:c3:08:20:f8:4d:0f:2d:2c:58:e5:e6:01: 3b:bb:d9:ed:09:eb:3a:ae:d2:d7:5a:f8:0e:25:b1: b4:39:2c:81:d7:02:e2:13:8f:23:7e:53:93:e3:39: 06:ec:9e:5c:1a:0e:b4:81:11:21:fc:47:24:d3:ba: 6e:4a:83:cd:dd:87:b2:19:cc:96:d9:dc:6e:a1:46: 25:41:3e:28:23:ef:89:3a:ac:ac:e8:6f:55:ed:c3: f2:0c:bb:4c:b6:3b:d9:e9:12:c9:ab:7e:e2:8d:cc: ed:13:fe:49:0a:e1:4d:0f:26:cb:2a:d2:d7:be:6d: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.57.0/24 IPv6: 2a0e:3200::/29 Signature Algorithm: sha256WithRSAEncryption 1f:a0:76:5d:b2:be:2b:2e:f6:b2:bf:38:4d:7a:ab:37:7b:23: 0c:8d:c6:68:a2:9c:28:0e:71:e1:f2:f5:bb:c0:cc:4f:b8:1a: c3:45:10:83:3b:f6:df:87:07:2e:f2:3e:5c:72:52:aa:8b:4e: 70:6c:a4:ed:15:e2:5e:c9:06:9f:8e:b0:b9:a3:54:06:c9:af: 6b:f3:8d:c2:9c:0a:c6:eb:bf:28:88:6b:36:23:45:a3:10:0e: c1:b6:bd:a0:9d:e1:d1:ab:e5:15:aa:55:dd:7e:6e:58:a7:59: 3d:fc:0c:36:87:e1:7f:40:5b:92:2d:b1:4a:cf:85:47:2b:95: f7:cb:01:3d:56:75:46:59:96:01:85:f9:b2:e5:00:4e:59:1a: 74:84:e7:c4:3e:d8:fa:16:bc:a3:86:e0:6f:d8:38:00:2e:2a: 4c:e9:cd:b3:12:73:b5:cd:f4:87:73:eb:99:a7:4d:9b:38:1b: 27:51:b5:ce:f7:93:bf:46:b4:53:69:fd:c7:6e:4e:0e:a1:00: d5:57:f2:30:0b:38:66:f7:b8:63:eb:cd:85:69:d5:89:f5:56: f4:a4:fa:2e:03:91:6f:1b:78:93:13:60:2a:d8:72:d5:0c:42: 1b:84:5f:4b:84:0f:31:26:db:26:99:2d:91:ea:fc:58:4f:37: 5d:43:e3:94 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZssS0P5/T5BnNJK8BYZKypkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MTIzMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzFhZmZlNTlkNTg2MjFkOTQ1Yjg5N2ZlNmI3OTQ3ZDU2MjUyOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11e1QiWyVsZ1dbnKHfA1cXat+9mQ 61q9XdoCAqlw5sHlaDymsIxISn8WxsIdWUqhNucX0I1uUKwbFtKrFoDe4SzudXVv c5kbzmzE8xhYtoW46vkZjayOBW3eiRvehFlzIy4B2S1///HLZZLexyTtZf96aGxm QaE0T+anHFV+YxFRuplApiAQtTPDCCD4TQ8tLFjl5gE7u9ntCes6rtLXWvgOJbG0 OSyB1wLiE48jflOT4zkG7J5cGg60gREh/Eck07puSoPN3YeyGcyW2dxuoUYlQT4o I++JOqys6G9V7cPyDLtMtjvZ6RLJq37ijcztE/5JCuFNDybLKtLXvm0HnwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDwa/+WdWGIdlFuJf+a3lH1WJSm4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2VlOTU4 Yy1jOGM4LTQ0N2ItODI5YS0xZGY0Y2ZkN2FiNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZWU5NThj LWM4YzgtNDQ3Yi04MjlhLTFkZjRjZmQ3YWI3Ny8xL1BCcl81WjFZWWgyVVc0bF81 cmVVZlZZbEtiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuTw5MA0EAgACMAcDBQMqDjIAMA0GCSqGSIb3 DQEBCwUAA4IBAQAfoHZdsr4rLvayvzhNeqs3eyMMjcZoopwoDnHh8vW7wMxPuBrD RRCDO/bfhwcu8j5cclKqi05wbKTtFeJeyQafjrC5o1QGya9r843CnArG678oiGs2 I0WjEA7Btr2gneHRq+UVqlXdfm5Yp1k9/Aw2h+F/QFuSLbFKz4VHK5X3ywE9VnVG WZYBhfmy5QBOWRp0hOfEPtj6FryjhuBv2DgALipM6c2zEnO1zfSHc+uZp02bOBsn UbXO95O/RrRTaf3Hbk4OoQDVV/IwCzhm97hj682FadWJ9Vb0pPouA5FvG3iTE2Aq 2HLVDEIbhF9LhA8xJtsmmS2R6vxYTzddQ+OU -----END CERTIFICATE-----Generated at Fri Dec 19 02:13:54 2025 by rpki-client