This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer (raw, json) Hash identifier: tZK20Pufvqzp5XAP9nvjIQgCRHH2p40KCf4Zh5WBQ1E= Subject key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC982B42B793BFF879B177AFA1315 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34056 IP: 46.229.48.0/20 IP: 92.244.96.0/19 IP: 109.108.64.0/19 IP: 2a00:1688::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c9:82:b4:2b:79:3b:ff:87:9b:17:7a:fa:13:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:fb:36:a6:1b:d3:f5:c0:23:f5:45:0c:aa: ed:8a:59:a1:1d:cd:5c:4b:d8:4c:3d:cc:79:78:3f: ea:80:4d:5a:76:79:7e:d5:b2:4d:a0:0a:d1:68:a6: 2a:2e:f2:44:77:18:92:32:d5:ee:15:44:70:9e:95: 61:5e:fb:60:31:b5:b4:89:57:e5:4c:f5:33:0c:44: 88:b8:02:b1:78:1b:69:17:13:e8:62:46:0c:74:f3: f8:f1:00:db:a8:fc:71:e4:3f:29:ed:aa:d8:80:c3: 1f:79:98:48:b6:a0:da:c1:df:08:f9:31:14:6d:4e: cc:fc:15:a5:39:2c:09:61:b9:09:97:bf:23:60:d9: 98:96:24:4e:e4:1f:88:4b:ea:27:09:3f:85:cd:3d: 68:4e:65:bd:cb:aa:4d:8a:46:48:97:e6:30:a2:76: 2d:ee:bb:c9:50:f5:42:59:94:f0:4b:fe:a1:e1:4c: 02:e3:f8:76:69:2e:de:dd:fa:c9:7a:d2:b2:e0:13: 98:01:64:14:f3:fe:be:97:2d:ca:80:77:01:5b:68: 2f:62:11:70:29:da:97:66:f9:73:3e:ab:02:7c:84: e1:27:61:41:cb:da:7b:e4:5d:72:60:cb:e0:58:ef: 12:c2:3d:c8:bb:22:cf:bc:2c:22:49:0b:29:4c:ae: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.48.0/20 92.244.96.0/19 109.108.64.0/19 IPv6: 2a00:1688::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34056 Signature Algorithm: sha256WithRSAEncryption 07:82:e2:e4:5d:2a:50:b4:90:9f:ab:84:34:e3:d4:1e:ce:f9: 38:61:63:b6:6b:8c:72:1a:53:63:5c:fd:80:fc:0d:b5:30:68: fc:5a:72:45:88:5a:29:fd:87:a3:eb:01:a6:8d:5f:5a:94:31: 55:d3:91:00:0f:06:7e:48:7b:b0:d8:a2:65:24:d3:5a:60:a1: ef:75:a2:d8:87:f6:55:c1:2e:c2:5a:7f:ec:ad:56:56:90:1d: 02:3e:96:c3:c0:de:c0:bd:dd:60:93:ab:24:84:6a:cb:f7:25: 5e:3c:3e:db:93:fe:23:41:5a:9e:5e:2e:59:d4:e2:13:1f:fc: 43:e8:06:48:e5:ae:f7:8b:cc:c1:99:4e:8a:0d:d9:c0:ac:53: 94:4d:74:fa:5c:1f:76:be:57:16:af:ac:73:c7:66:ae:fb:c8: 4f:b4:bf:d5:c8:af:73:b2:11:96:21:a3:9f:00:f4:96:76:34: c0:cb:f6:76:30:34:59:64:85:1e:f5:9b:b4:18:43:7d:b1:2f: ce:70:38:01:86:f1:2c:96:dc:55:3d:95:d9:74:cd:7a:8d:48: 74:28:8d:33:44:f2:2c:fc:e5:6f:19:2b:b6:ca:22:8b:db:cf: 6e:7a:ac:13:54:b9:a6:2d:07:06:7c:3f:90:20:94:0e:85:a5: d3:65:7a:6e -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt87cmCtCt5O/+Hmxd6+hMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGJjYzEyYWZhNGYwNTczOWY0NWY2MDVlMjIxYzY0YzNjMGQyZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK37NqYb0/XAI/VFDKrtilmhHc1c S9hMPcx5eD/qgE1adnl+1bJNoArRaKYqLvJEdxiSMtXuFURwnpVhXvtgMbW0iVfl TPUzDESIuAKxeBtpFxPoYkYMdPP48QDbqPxx5D8p7arYgMMfeZhItqDawd8I+TEU bU7M/BWlOSwJYbkJl78jYNmYliRO5B+IS+onCT+FzT1oTmW9y6pNikZIl+YwonYt 7rvJUPVCWZTwS/6h4UwC4/h2aS7e3frJetKy4BOYAWQU8/6+ly3KgHcBW2gvYhFw KdqXZvlzPqsCfIThJ2FBy9p75F1yYMvgWO8Swj3IuyLPvCwiSQspTK7LkQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFKS8wSr6TwVzn0X2BeIhxkw8DS7WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2JiMTQw YS0yYTIxLTRmNWYtYmRjYy04OGIwMTZiYmQ1ODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvYmIxNDBh LTJhMjEtNGY1Zi1iZGNjLTg4YjAxNmJiZDU4MS8xL3BMekJLdnBQQlhPZlJmWUY0 aUhHVER3Tkx0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQELuUwAwQFXPRgAwQFbWxAMA0EAgACMAcDBQAq ABaIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCFCDANBgkqhkiG9w0BAQsFAAOC AQEAB4Li5F0qULSQn6uENOPUHs75OGFjtmuMchpTY1z9gPwNtTBo/FpyRYhaKf2H o+sBpo1fWpQxVdORAA8Gfkh7sNiiZSTTWmCh73Wi2If2VcEuwlp/7K1WVpAdAj6W w8DewL3dYJOrJIRqy/clXjw+25P+I0Fanl4uWdTiEx/8Q+gGSOWu94vMwZlOig3Z wKxTlE10+lwfdr5XFq+sc8dmrvvIT7S/1civc7IRliGjnwD0lnY0wMv2djA0WWSF HvWbtBhDfbEvznA4AYbxLJbcVT2V2XTNeo1IdCiNM0TyLPzlbxkrtsoii9vPbnqs E1S5pi0HBnw/kCCUDoWl02V6bg== -----END CERTIFICATE-----Generated at Mon Jan 12 17:18:46 2026 by rpki-client