This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer File: pdlU1tsqEXjvvsDV2VkHZAfPlso.cer (raw, json) Hash identifier: k85wvWZUWifk9FuasCY6ribdaOgBeP6E/Oroi6Fcts0= Subject key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83C4965BF175635709A95DE5A487AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212630 IP: 82.117.241.0/24 IP: 91.209.220.0/24 IP: 2a0b:53c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c4:96:5b:f1:75:63:57:09:a9:5d:e5:a4:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:a3:f7:da:2f:24:a1:12:64:c1:6e:f7:14: ed:54:cd:ae:b8:17:63:d8:09:53:48:10:46:28:40: ba:1d:d0:1d:58:bf:30:ef:3a:5f:13:47:4c:d6:89: 68:94:f5:4b:29:ba:76:a3:98:de:dc:f8:1e:67:76: 69:b3:79:29:3d:db:04:64:f2:1b:e9:b6:f2:38:f7: 17:7a:83:68:1d:94:03:8e:ce:a8:f0:e7:59:08:ee: e6:95:36:2a:7f:24:5f:13:13:28:9e:67:b6:c2:43: 45:62:07:7c:9a:57:bc:b3:78:fb:66:1f:03:02:86: 21:44:70:1e:c5:70:5c:41:88:92:2a:85:bb:34:1c: 5f:84:59:07:a1:c9:15:c6:58:b0:f4:28:c9:30:45: 8a:b7:18:d7:53:2b:65:d5:4c:e2:d5:34:37:09:98: 61:bf:9a:6b:20:1f:9c:93:60:59:0f:6d:ee:df:09: ab:15:f4:7f:26:76:6c:59:dd:b7:7d:0c:8f:ec:79: c3:e9:71:f7:19:29:ef:e1:29:4d:4e:72:d7:6c:0b: 1d:83:04:12:f2:f6:c5:17:6a:34:fa:68:64:89:ba: 3f:b6:35:dc:d4:44:62:82:bf:b5:17:48:bf:48:b4: ac:2a:fe:14:b9:15:c5:53:6d:a4:9d:18:ad:51:02: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.117.241.0/24 91.209.220.0/24 IPv6: 2a0b:53c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212630 Signature Algorithm: sha256WithRSAEncryption 0f:26:c7:30:42:1a:74:aa:b9:24:91:c8:d5:5a:9d:6f:89:ad: 67:28:b1:3a:a5:7c:8e:f0:81:a6:78:c4:0a:62:0e:1a:c1:a8: 0d:d6:df:1e:00:be:fa:47:41:bc:ad:0d:80:13:53:c2:e0:9b: 74:86:3a:ff:38:87:31:77:70:77:6c:64:0a:e7:a3:67:9b:f8: f6:c3:0e:9b:8d:ab:07:fe:e3:57:b0:5e:50:82:ea:84:1f:9e: 9f:e6:10:10:ac:b9:ba:c8:2c:02:e0:eb:7a:01:d6:bf:c7:d5: 69:96:0a:07:02:ce:f3:9f:03:c4:6f:06:14:80:f9:cf:5d:21: 4f:cd:52:45:b1:6f:56:29:6e:40:33:7b:b0:60:c9:17:5e:6e: 80:81:a5:e9:5a:0c:ad:5a:fd:bd:12:c2:a1:6c:ca:2a:0a:6b: bf:08:36:34:29:ee:23:b0:54:52:6e:5d:e8:a3:15:a1:eb:5e: 22:ca:78:b5:a8:45:0f:ca:74:e3:61:ac:25:e7:46:a0:f8:a6: cc:04:a6:4e:e5:b2:1f:4d:c0:f4:2a:cf:84:fd:50:a7:be:6b: 42:7a:0d:ae:d3:10:bd:93:1b:63:01:37:89:3b:69:30:af:dd: c3:1e:4c:bf:0c:01:68:e2:96:9f:84:64:3d:3b:12:86:69:08: 54:bc:83:c2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/g8SWW/F1Y1cJqV3lpIeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQ5NTRkNmRiMmExMTc4ZWZiZWMwZDVkOTU5MDc2NDA3Y2Y5NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqGj99ovJKESZMFu9xTtVM2uuBdj 2AlTSBBGKEC6HdAdWL8w7zpfE0dM1ololPVLKbp2o5je3PgeZ3Zps3kpPdsEZPIb 6bbyOPcXeoNoHZQDjs6o8OdZCO7mlTYqfyRfExMonme2wkNFYgd8mle8s3j7Zh8D AoYhRHAexXBcQYiSKoW7NBxfhFkHockVxliw9CjJMEWKtxjXUytl1Uzi1TQ3CZhh v5prIB+ck2BZD23u3wmrFfR/JnZsWd23fQyP7HnD6XH3GSnv4SlNTnLXbAsdgwQS 8vbFF2o0+mhkibo/tjXc1ERigr+1F0i/SLSsKv4UuRXFU22knRitUQJTxQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKXZVNbbKhF4777A1dlZB2QHz5bKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2ZiZjM5 ZC05MjQ3LTRlMDctOWUxNS0zOWY0YWI2ZWM3ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZmJmMzlk LTkyNDctNGUwNy05ZTE1LTM5ZjRhYjZlYzdlNi8xL3BkbFUxdHNxRVhqdnZzRFYy VmtIWkFmUGxzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAUnXxAwQAW9HcMA0EAgACMAcDBQAqC1PAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+ljANBgkqhkiG9w0BAQsFAAOCAQEADybH MEIadKq5JJHI1Vqdb4mtZyixOqV8jvCBpnjECmIOGsGoDdbfHgC++kdBvK0NgBNT wuCbdIY6/ziHMXdwd2xkCuejZ5v49sMOm42rB/7jV7BeUILqhB+en+YQEKy5usgs AuDregHWv8fVaZYKBwLO858DxG8GFID5z10hT81SRbFvViluQDN7sGDJF15ugIGl 6VoMrVr9vRLCoWzKKgprvwg2NCnuI7BUUm5d6KMVoeteIsp4tahFD8p042GsJedG oPimzASmTuWyH03A9CrPhP1Qp75rQnoNrtMQvZMbYwE3iTtpMK/dwx5MvwwBaOKW n4RkPTsShmkIVLyDwg== -----END CERTIFICATE-----Generated at Mon Jan 12 12:29:02 2026 by rpki-client