This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer (raw, json) Hash identifier: nOXtd3jq75Pa6M2BfyGP10/jyiMVLeRD4nn26EyUA78= Subject key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126606348841224671B090F74BE25A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202029 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:66:06:34:88:41:22:46:71:b0:90:f7:4b:e2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a656830499378698e3e6e6597993cd3b00e1dccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:92:2b:ef:29:55:d7:74:4c:31:03:c9:ad: f4:73:f1:38:0e:3f:82:7b:4c:0a:1b:08:d4:4c:5f: 6a:1e:eb:77:31:06:a6:32:b7:4f:3b:1f:23:0c:ca: ac:42:d9:96:5f:b7:33:2e:7d:8c:b6:ed:70:7b:9b: d8:87:2c:ba:a5:0e:55:b1:cb:a4:63:4f:5d:34:7d: 57:5d:9d:6a:2c:10:e6:85:dc:63:3d:3c:a1:64:35: 0c:43:e8:fb:ad:c2:fd:a5:90:22:34:73:4b:31:8b: 2a:74:9e:3c:e3:6d:38:ee:64:6f:5a:f3:2a:d4:af: 04:4b:99:63:14:6a:83:2b:74:c5:c6:c0:1f:16:0e: b6:63:6f:eb:19:b7:db:db:29:4d:c4:64:37:a1:d4: ad:38:66:31:da:ce:2d:b1:21:ce:3e:ab:35:7c:ef: 39:83:19:42:8e:0b:55:02:ef:31:13:d8:b1:26:cf: 49:54:4a:3a:03:7c:60:b9:60:a3:84:61:e3:43:c8: 63:f9:20:3c:11:47:32:c5:75:2e:af:13:d4:c2:0c: 6e:8e:c0:8a:55:c0:04:04:9b:3a:1f:0c:4f:03:61: 5a:c1:23:d6:2d:41:1c:15:5f:fb:e8:9a:6e:82:6c: 44:56:a1:2d:f2:66:cb:b2:6c:f5:08:d3:a1:cb:bf: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202029 Signature Algorithm: sha256WithRSAEncryption 89:b9:1f:6b:0a:81:d4:ed:09:da:8c:da:d2:2c:4d:6b:ad:1c: df:f9:a9:7c:7a:07:40:51:61:41:2c:50:ff:75:9e:ab:08:9d: d3:98:dc:f5:8d:e3:58:12:53:53:f8:3b:ae:65:65:b6:c6:3d: ca:d7:25:f0:c9:16:d4:bd:60:47:0c:bf:63:b7:7f:91:a6:42: 6f:b6:1e:8a:5d:11:3c:bc:62:f8:de:de:d6:5f:ae:b8:c2:78: 99:f9:90:d8:78:e6:69:09:21:d0:b5:9b:ee:32:f9:35:1e:6a: 73:6a:f7:8c:bd:82:4d:ba:99:0c:82:f3:9f:01:3b:c6:33:a1: cf:ef:2e:02:b6:e4:e6:84:2e:5f:52:92:04:68:26:34:9e:3c: 14:97:69:65:69:9b:9f:0a:7f:b9:bc:1d:57:2d:18:30:93:39: 6e:71:a5:fe:23:43:ec:eb:c7:25:cf:d8:ae:fb:ce:90:35:51: bc:39:3e:8e:43:67:65:2e:d1:cb:ee:ce:04:85:c3:bc:34:85: bc:fd:f7:d8:90:c3:3c:8b:01:a8:9d:dd:08:21:07:11:63:08: ea:ec:2e:18:07:d3:4f:43:3c:bf:39:84:de:69:c1:87:9c:bc: 81:99:16:cd:58:fe:9a:8c:c2:0f:08:63:53:e8:84:0b:bc:76: aa:fe:9d:4e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EmYGNIhBIkZxsJD3S+JaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjU2ODMwNDk5Mzc4Njk4ZTNlNmU2NTk3OTkzY2QzYjAwZTFkY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTySK+8pVdd0TDEDya30c/E4Dj+C e0wKGwjUTF9qHut3MQamMrdPOx8jDMqsQtmWX7czLn2Mtu1we5vYhyy6pQ5Vscuk Y09dNH1XXZ1qLBDmhdxjPTyhZDUMQ+j7rcL9pZAiNHNLMYsqdJ4842047mRvWvMq 1K8ES5ljFGqDK3TFxsAfFg62Y2/rGbfb2ylNxGQ3odStOGYx2s4tsSHOPqs1fO85 gxlCjgtVAu8xE9ixJs9JVEo6A3xguWCjhGHjQ8hj+SA8EUcyxXUurxPUwgxujsCK VcAEBJs6HwxPA2FawSPWLUEcFV/76JpugmxEVqEt8mbLsmz1CNOhy78Z3wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKZWgwSZN4aY4+bmWXmTzTsA4dzMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzM5MDBj Ni01NjJiLTQ3YmMtYTNlZS02NTY0NzAzNDM0ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvMzkwMGM2 LTU2MmItNDdiYy1hM2VlLTY1NjQ3MDM0MzRlMi8xL3BsYURCSmszaHBqajV1Wlpl WlBOT3dEaDNNdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMVLTANBgkqhkiG9w0BAQsFAAOCAQEAibkfawqB1O0J 2oza0ixNa60c3/mpfHoHQFFhQSxQ/3Weqwid05jc9Y3jWBJTU/g7rmVltsY9ytcl 8MkW1L1gRwy/Y7d/kaZCb7Yeil0RPLxi+N7e1l+uuMJ4mfmQ2HjmaQkh0LWb7jL5 NR5qc2r3jL2CTbqZDILznwE7xjOhz+8uArbk5oQuX1KSBGgmNJ48FJdpZWmbnwp/ ubwdVy0YMJM5bnGl/iND7OvHJc/YrvvOkDVRvDk+jkNnZS7Ry+7OBIXDvDSFvP33 2JDDPIsBqJ3dCCEHEWMI6uwuGAfTT0M8vzmE3mnBh5y8gZkWzVj+mozCDwhjU+iE C7x2qv6dTg== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:08 2026 by rpki-client