This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer (raw, json) Hash identifier: lNRoBOMyxoejIuVBzMhIhuo8arDGOoqi/8kU8oicOSI= Subject key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA70F6500A6368024E4040E711B1DC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214705 IP: 140.150.96.0/19 IP: 176.116.21.0/24 IP: 2a12:ca00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0f:65:00:a6:36:80:24:e4:04:0e:71:1b:1d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3367dba3a220060e67d4ec680b0f99f247a872c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:61:f5:a4:a1:30:05:ab:97:1e:5d:67:03: a6:50:ff:25:0f:c4:40:48:ae:cb:56:42:9c:cf:3c: 04:48:bd:eb:f2:f7:ef:6c:d4:e6:2e:fe:fe:bc:47: 62:6f:5d:52:a2:69:e0:8d:36:fa:67:b1:7b:c5:dc: 9a:0e:d2:ac:75:e5:67:b8:36:9d:e3:e1:22:05:f0: 03:ed:06:11:b8:c1:a9:e1:12:89:1f:19:39:78:f3: 40:6d:1b:98:13:c1:cb:c9:d8:95:8c:c0:02:b1:b1: 9f:71:f5:6e:2c:06:d6:af:48:9f:37:2d:9a:3d:7b: e3:7e:1f:06:b9:db:5c:5d:09:26:1b:f5:70:d0:c1: 5a:33:7e:41:ca:de:17:2e:ea:7d:32:a4:c9:50:c3: 51:f3:b7:24:35:48:01:c8:d7:22:84:81:65:86:eb: 5d:c5:a0:8a:62:19:21:aa:6f:bb:4a:98:29:bd:58: db:53:a5:ee:c3:ec:93:a2:ae:de:e9:98:58:71:80: e5:91:c1:5c:6f:e1:4b:72:f9:f1:c0:da:1f:f9:cc: 26:ed:04:fc:a2:9d:20:5f:6a:3b:08:b3:f7:31:61: a6:35:92:e2:d5:1f:f7:d5:04:e6:a9:27:4f:87:25: 69:66:37:da:5c:db:6b:89:03:50:0b:95:5b:78:b7: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.96.0/19 176.116.21.0/24 IPv6: 2a12:ca00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214705 Signature Algorithm: sha256WithRSAEncryption 25:b1:38:55:21:10:66:e5:94:d6:7b:92:e9:86:a1:dd:5b:49: 37:57:5a:19:a9:9b:9c:9a:ee:1a:eb:8e:a7:c9:3e:fc:42:6b: f4:26:1e:ca:f6:6f:00:68:64:8f:94:1d:56:5d:38:9a:92:7b: 7d:66:52:76:6c:56:e1:94:ec:38:57:21:73:f2:4d:9f:91:f4: 56:dd:8f:93:5b:82:07:0d:be:37:3a:93:2d:c3:1a:80:de:6d: ec:0d:e8:f6:44:fc:2a:69:e4:aa:22:35:31:cd:58:56:07:c7: 57:cf:a9:66:c5:ed:b8:e7:61:0f:86:68:e7:46:b3:30:db:d9: 84:af:58:1f:a5:1b:42:ae:f7:f1:70:b2:e9:5f:c6:78:65:27: df:58:13:51:c8:ca:b7:b5:79:af:25:7f:b7:84:a0:9f:a4:e9: 82:b2:4c:77:7d:73:99:bf:97:97:5f:a6:16:8f:fc:e8:c0:23: 1a:37:56:50:de:25:4b:d0:b1:05:3b:42:29:e8:05:71:63:19: 86:b0:32:e8:c0:ee:4f:cb:d2:c0:10:b7:b3:72:5c:63:71:95: 10:93:5c:ff:2d:04:58:52:83:bb:76:63:e1:60:41:c6:5f:7d: 8e:c5:a7:4d:de:ee:8d:87:4e:84:36:eb:e4:ce:d4:a0:ee:50: 63:40:6d:0e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pw9lAKY2gCTkBA5xGx3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzM2N2RiYTNhMjIwMDYwZTY3ZDRlYzY4MGIwZjk5ZjI0N2E4NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlZh9aShMAWrlx5dZwOmUP8lD8RA SK7LVkKczzwESL3r8vfvbNTmLv7+vEdib11SomngjTb6Z7F7xdyaDtKsdeVnuDad 4+EiBfAD7QYRuMGp4RKJHxk5ePNAbRuYE8HLydiVjMACsbGfcfVuLAbWr0ifNy2a PXvjfh8GudtcXQkmG/Vw0MFaM35Byt4XLup9MqTJUMNR87ckNUgByNcihIFlhutd xaCKYhkhqm+7SpgpvVjbU6Xuw+yToq7e6ZhYcYDlkcFcb+FLcvnxwNof+cwm7QT8 op0gX2o7CLP3MWGmNZLi1R/31QTmqSdPhyVpZjfaXNtriQNQC5VbeLdZNwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNM2fbo6IgBg5n1OxoCw+Z8keocsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2FjNDEw YS00OWEwLTRlMzgtYWUzYi01Y2E1YmY2N2U2OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYWM0MTBh LTQ5YTAtNGUzOC1hZTNiLTVjYTViZjY3ZTY5ZC8xLzB6Wjl1am9pQUdEbWZVN0dn TEQ1bnlSNmh5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFjJZgAwQAsHQVMA0EAgACMAcDBQMqEsoAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGsTANBgkqhkiG9w0BAQsFAAOCAQEAJbE4 VSEQZuWU1nuS6Yah3VtJN1daGambnJruGuuOp8k+/EJr9CYeyvZvAGhkj5QdVl04 mpJ7fWZSdmxW4ZTsOFchc/JNn5H0Vt2Pk1uCBw2+NzqTLcMagN5t7A3o9kT8Kmnk qiI1Mc1YVgfHV8+pZsXtuOdhD4Zo50azMNvZhK9YH6UbQq738XCy6V/GeGUn31gT UcjKt7V5ryV/t4Sgn6TpgrJMd31zmb+Xl1+mFo/86MAjGjdWUN4lS9CxBTtCKegF cWMZhrAy6MDuT8vSwBC3s3JcY3GVEJNc/y0EWFKDu3Zj4WBBxl99jsWnTd7ujYdO hDbr5M7UoO5QY0BtDg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:53:55 2026 by rpki-client