This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer File: pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer (raw, json) Hash identifier: DBK013RHdbg4CFOKkwOOfnWeQ5aMezx/g+W6Ercw6N8= Subject key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15895BF2E6BD2AC0FEC68F9FC43D4F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208230 IP: 45.152.108.0/22 IP: 2a0f:5300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:89:5b:f2:e6:bd:2a:c0:fe:c6:8f:9f:c4:3d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:87:d0:42:8e:09:b7:9e:a1:c7:8d:13:9c: 0e:82:bc:27:82:d1:6d:43:8d:44:d0:c1:b7:ad:85: cd:f1:f2:2b:bc:00:df:c5:16:17:fa:94:2a:d6:8d: d5:27:70:e6:3a:6a:97:9a:1c:d7:a2:d7:04:6d:59: a4:21:26:75:2b:fb:76:52:b5:b0:de:25:28:48:b9: f7:50:ad:f1:3f:0d:30:dc:4e:77:64:dc:73:7d:a9: 2d:70:5c:65:a4:d1:16:a3:31:f5:3e:4b:09:34:c1: 9f:5e:a5:6a:1d:cd:d5:66:fb:17:28:81:9d:a0:83: 45:b7:eb:a6:af:d4:be:bf:af:d3:1e:25:34:74:b4: e2:43:35:95:c0:ec:72:e7:24:51:a7:d3:b0:47:c2: 43:46:8c:ea:43:28:34:7f:72:db:7d:82:f8:34:5a: dc:23:ee:91:78:7a:40:30:27:76:d1:d8:25:3a:7d: ef:50:51:e1:55:3e:a3:f6:6e:f2:ec:83:65:72:c7: 20:d6:98:c8:3a:d0:5c:18:f0:9e:75:32:15:ae:7c: 7d:79:76:00:38:04:80:4a:8d:c1:f2:ba:7b:14:d3: 23:5c:7a:f2:62:a3:a8:dc:1f:43:a0:52:0b:4a:2c: 0f:0c:25:e6:65:9e:9c:03:32:9c:79:5e:c9:45:cb: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.108.0/22 IPv6: 2a0f:5300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208230 Signature Algorithm: sha256WithRSAEncryption 8d:63:ac:24:13:ce:37:48:a4:b3:8a:d4:56:f3:d3:61:82:50: c3:cc:ea:03:54:c9:4a:ae:f6:9d:37:9e:45:21:8f:dc:ff:be: 49:08:18:e3:8b:58:3e:f9:ae:b9:0e:30:ba:e2:86:ef:12:8c: 43:23:d3:60:6c:9f:4b:9b:d8:e7:5b:5a:fb:a4:56:d9:b4:39: 62:29:0d:10:ee:ed:f8:80:ab:02:db:cc:87:7f:87:5e:de:52: 71:1c:8b:01:97:1b:a6:db:57:9c:55:f1:93:f0:07:59:19:36: da:15:85:fe:bb:64:a3:b1:76:fa:e3:8d:72:6a:0d:3c:e5:68: 43:53:1b:ff:fd:47:d4:74:1e:8d:bf:40:1c:d3:09:71:2e:a8: 1a:77:fc:46:c7:80:a6:39:ae:72:f3:12:6a:88:49:cb:e7:3a: c9:72:54:f2:4a:80:c4:68:59:c5:f5:76:14:17:e3:e5:d5:24: 11:27:eb:99:cc:34:04:ce:9d:cc:39:01:43:cc:6d:e9:b5:11: 54:e6:e3:b9:54:80:0a:97:19:4e:0f:ea:23:21:60:60:dc:28: e7:c2:13:9b:c0:31:83:0b:78:18:f7:90:73:0a:60:7c:9d:ba: 8d:d0:bd:30:46:04:71:72:ee:eb:28:55:c1:f2:2b:97:32:16: 00:f3:d5:aa -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FYlb8ua9KsD+xo+fxD1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGM3YmZlNDE1NjA0ZjYxMzZjZWFhMjE2MzU2NDk1YmY2ZDVjYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PqH0EKOCbeeoceNE5wOgrwngtFt Q41E0MG3rYXN8fIrvADfxRYX+pQq1o3VJ3DmOmqXmhzXotcEbVmkISZ1K/t2UrWw 3iUoSLn3UK3xPw0w3E53ZNxzfaktcFxlpNEWozH1PksJNMGfXqVqHc3VZvsXKIGd oINFt+umr9S+v6/THiU0dLTiQzWVwOxy5yRRp9OwR8JDRozqQyg0f3LbfYL4NFrc I+6ReHpAMCd20dglOn3vUFHhVT6j9m7y7INlcscg1pjIOtBcGPCedTIVrnx9eXYA OASASo3B8rp7FNMjXHryYqOo3B9DoFILSiwPDCXmZZ6cAzKceV7JRcsDXwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKTHv+QVYE9hNs6qIWNWSVv21cxBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzA3Y2Q0 ZC03ZDM1LTQ0ZTEtYWJhMy1jOWIyMjBhNGQ2ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvMDdjZDRk LTdkMzUtNDRlMS1hYmEzLWM5YjIyMGE0ZDZmMC8xL3BNZV81QlZnVDJFMnpxb2hZ MVpKV19iVnpFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZhsMA0EAgACMAcDBQMqD1MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtZjANBgkqhkiG9w0BAQsFAAOCAQEAjWOsJBPON0ik s4rUVvPTYYJQw8zqA1TJSq72nTeeRSGP3P++SQgY44tYPvmuuQ4wuuKG7xKMQyPT YGyfS5vY51ta+6RW2bQ5YikNEO7t+ICrAtvMh3+HXt5ScRyLAZcbpttXnFXxk/AH WRk22hWF/rtko7F2+uONcmoNPOVoQ1Mb//1H1HQejb9AHNMJcS6oGnf8RseApjmu cvMSaohJy+c6yXJU8kqAxGhZxfV2FBfj5dUkESfrmcw0BM6dzDkBQ8xt6bURVObj uVSACpcZTg/qIyFgYNwo58ITm8Axgwt4GPeQcwpgfJ26jdC9MEYEcXLu6yhVwfIr lzIWAPPVqg== -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:57 2026 by rpki-client