This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer File: 27ZTu9FwTEe62mKrbONQIwfyRLY.cer (raw, json) Hash identifier: OBSitLru/f0ISR72PBYlasKU7WXM7Q+G8OdAEi/LmfQ= Subject key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910ABC6541AD6AA35CBDFAB793B3A5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34785 IP: 80.80.240.0/20 IP: 185.72.136.0/22 IP: 193.186.72.0 -- 193.186.87.255 IP: 193.228.112.0 -- 193.228.122.255 IP: 2a01:af80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ab:c6:54:1a:d6:aa:35:cb:df:ab:79:3b:3a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:82:0b:b0:3c:a0:3a:04:3e:f7:eb:28:9d: fb:4e:29:86:5d:a1:a6:30:9a:14:fb:ad:d9:fa:16: 40:3f:00:11:b3:a3:3a:98:60:53:0a:63:e5:df:33: d2:9a:38:48:2e:41:26:0c:8d:b9:60:58:38:a1:28: c5:a9:e6:bb:04:e3:0b:76:ea:34:19:55:09:bf:9f: aa:f3:67:c0:90:d0:b9:89:43:e2:fc:51:b9:72:49: 93:c9:a9:de:0b:5a:69:c1:3b:fb:d0:cc:f8:69:1d: 81:09:23:fe:be:b7:02:be:36:bd:19:c7:59:b0:ce: 03:d3:50:2b:6d:0d:d9:b2:d7:8f:9a:74:b7:96:a3: 5c:a9:61:7f:e1:4a:18:18:a1:c0:ac:7c:d2:22:06: 86:b3:f5:3d:b0:39:57:a7:56:e0:a1:6e:98:fb:d8: 12:6f:2d:7d:8e:61:5d:c9:56:a4:04:07:b6:e1:9e: 4e:1f:ec:54:54:24:4b:c6:a9:5a:78:5d:4e:50:50: 32:0f:88:ba:0f:34:55:6f:1b:06:53:3f:5c:fc:bb: 54:bd:19:32:80:5f:a9:67:57:79:f2:86:0a:d3:03: 64:f6:e8:a7:45:81:05:bf:b3:0f:7c:dc:74:4a:79: bd:e8:36:0f:54:88:4c:15:c3:af:6d:cd:89:79:0d: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.80.240.0/20 185.72.136.0/22 193.186.72.0-193.186.87.255 193.228.112.0-193.228.122.255 IPv6: 2a01:af80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34785 Signature Algorithm: sha256WithRSAEncryption 8b:b7:26:c4:18:c9:a0:96:05:52:13:74:7c:f5:02:a0:bf:16: d2:28:70:df:5f:f5:d4:2f:fd:eb:7a:17:c5:da:78:ed:05:fc: 8c:f1:b5:77:5a:65:49:76:90:96:18:a1:d1:1d:c5:cb:cd:59: 4b:b7:60:8f:2f:99:2f:3b:66:b8:64:29:f2:9b:e7:43:0e:e6: 14:56:85:bd:82:29:93:ea:1d:30:cc:51:12:f3:6e:5e:1e:84: 30:3b:2e:73:22:80:20:1e:48:b1:54:98:15:a7:14:43:48:b7: 30:6a:98:12:93:25:45:7c:d7:83:7f:26:5b:ac:df:21:ba:33: c7:58:c9:4d:f9:9a:e6:ab:af:5f:4c:81:29:90:6b:b2:d7:8b: 43:8b:a9:b1:6b:38:06:bd:b4:d6:72:b3:4c:36:a8:bb:8b:a5: 7b:1e:25:5b:f4:bb:92:d0:12:40:02:09:d2:96:b8:f5:42:58: 34:9f:b1:e9:75:a4:62:04:b3:4d:f1:c9:d7:9d:d8:4c:f2:98: 7c:ec:39:29:7c:8c:1e:73:cb:0b:a5:20:3a:0e:31:75:27:47: a8:d1:bc:34:79:62:60:d7:b8:75:d3:73:b5:70:73:f2:b6:72: f6:d1:67:74:5e:0a:72:57:78:4f:23:06:1d:e8:9b:29:cb:e3: f1:44:4a:2c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt5EKvGVBrWqjXL36t5OzpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmI2NTNiYmQxNzA0YzQ3YmFkYTYyYWI2Y2UzNTAyMzA3ZjI0NGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcyCC7A8oDoEPvfrKJ37TimGXaGm MJoU+63Z+hZAPwARs6M6mGBTCmPl3zPSmjhILkEmDI25YFg4oSjFqea7BOMLduo0 GVUJv5+q82fAkNC5iUPi/FG5ckmTyaneC1ppwTv70Mz4aR2BCSP+vrcCvja9GcdZ sM4D01ArbQ3ZstePmnS3lqNcqWF/4UoYGKHArHzSIgaGs/U9sDlXp1bgoW6Y+9gS by19jmFdyVakBAe24Z5OH+xUVCRLxqlaeF1OUFAyD4i6DzRVbxsGUz9c/LtUvRky gF+pZ1d58oYK0wNk9uinRYEFv7MPfNx0Snm96DYPVIhMFcOvbc2JeQ3WYwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFNu2U7vRcExHutpiq2zjUCMH8kS2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzgwNjBk Zi1hNmY3LTQxNjYtYTkyOS1hOTgwYmVkMzNhYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvODA2MGRm LWE2ZjctNDE2Ni1hOTI5LWE5ODBiZWQzM2FiMC8xLzI3WlR1OUZ3VEVlNjJtS3Ji T05RSXdmeVJMWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF BwEHAQH/BEEwPzAuBAIAATAoAwQEUFDwAwQCuUiIMAwDBAPBukgDBAPBulAwDAME BMHkcAMEAMHkejANBAIAAjAHAwUAKgGvgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAh+EwDQYJKoZIhvcNAQELBQADggEBAIu3JsQYyaCWBVITdHz1AqC/FtIocN9f 9dQv/et6F8XaeO0F/IzxtXdaZUl2kJYYodEdxcvNWUu3YI8vmS87ZrhkKfKb50MO 5hRWhb2CKZPqHTDMURLzbl4ehDA7LnMigCAeSLFUmBWnFENItzBqmBKTJUV814N/ Jlus3yG6M8dYyU35muarr19MgSmQa7LXi0OLqbFrOAa9tNZys0w2qLuLpXseJVv0 u5LQEkACCdKWuPVCWDSfsel1pGIEs03xyded2EzymHzsOSl8jB5zywulIDoOMXUn R6jRvDR5YmDXuHXTc7Vwc/K2cvbRZ3ReCnJXeE8jBh3omynL4/FESiw= -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:47 2026 by rpki-client