This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer File: AzZPzt1pE1dzPNXM1wKduOYdHjo.cer (raw, json) Hash identifier: 0Jj5Fyzt7TE2PspQQv3aLyYfmG2yu3AibLslDy1A8vc= Subject key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B369E48FB956A78775E361079CCBEF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.84.156.0/24 IP: 2a14:16c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9e:48:fb:95:6a:78:77:5e:36:10:79:cc:be:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:c8:c5:b4:7a:6b:35:4d:31:bd:25:f8:b3: 15:0f:d8:dc:de:2f:f0:f3:b5:d9:22:ea:20:29:5c: 65:9c:87:95:2e:8a:ef:74:ec:bf:ee:22:68:cc:c6: 15:59:71:51:72:14:9a:c9:a3:20:f6:80:4a:b9:5d: eb:c5:f3:d5:32:06:21:4f:a6:54:d9:7b:d3:79:75: c7:82:e9:ed:fc:7f:92:9f:ba:0b:f4:a0:ad:2b:95: fb:f9:8a:e8:5d:19:14:aa:b8:14:34:46:76:1c:db: 7b:fd:12:25:d6:6b:c5:58:de:88:4b:65:f3:10:4a: 37:a3:61:86:82:35:fc:74:a7:7a:84:6a:02:8e:8f: ea:4c:71:bd:d2:63:da:c8:24:14:7f:4e:05:16:f8: 02:a8:c3:fa:63:2f:cb:07:12:63:53:e2:38:56:54: c9:5b:57:d0:bf:56:5c:7f:96:f9:a5:d9:30:51:17: 26:f6:76:95:cc:aa:56:34:0a:f7:dc:ad:82:19:34: 31:84:e3:fd:86:f4:c8:5e:46:4b:7b:4b:db:6b:60: ab:ba:d0:40:46:d4:36:5e:b6:9e:68:84:c7:01:53: 72:b8:7a:d6:e5:f1:a7:32:7c:f1:6f:10:d8:aa:13: a8:e4:ef:fe:32:3c:08:31:c3:1e:31:61:c6:7c:af: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.156.0/24 IPv6: 2a14:16c0::/29 Signature Algorithm: sha256WithRSAEncryption 88:d4:ab:46:1b:4b:9e:b9:d8:5a:fb:4e:20:40:60:2e:b3:02: af:a0:de:d9:ac:90:c8:d0:ed:0c:c6:62:50:fb:44:ba:c6:7a: 66:31:b4:7f:3e:ec:48:9a:6a:9b:d1:fc:1f:ec:db:91:c9:65: 79:ad:d0:5d:08:03:ed:43:2d:0b:86:4a:8b:7f:5f:5e:a0:17: 9e:78:a2:27:6c:e1:d1:89:8f:30:10:e2:ad:75:96:64:b7:67: a9:25:ec:5d:fc:2f:aa:c2:64:9e:a7:a3:9e:54:46:36:4f:07: d8:6d:de:21:63:2e:f8:66:82:bc:a0:78:db:79:37:87:16:4e: 00:30:0c:6f:62:fa:78:c1:ba:0a:af:25:f6:bc:d9:3a:c9:4f: cf:a0:86:ca:8a:66:ab:21:65:a1:72:cc:da:45:31:8c:8a:79: d1:8c:9e:28:c5:6a:fb:fc:49:1a:08:98:62:f3:3e:27:5d:29: 9b:ee:d1:f7:0d:11:58:0e:cd:1e:90:93:fe:0e:b0:7b:92:52: c8:9b:03:9c:ba:58:e5:61:6a:3c:8b:fe:8f:93:fc:0f:dd:0c: b4:a3:72:2a:13:8b:f8:d1:5b:2f:18:9d:c0:37:00:2c:39:01: 5a:95:83:c3:af:a0:40:37:a4:e4:e4:1b:bf:9b:8c:be:a9:0c: cb:b7:95:78 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Np5I+5VqeHdeNhB5zL7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzM2NGZjZWRkNjkxMzU3NzMzY2Q1Y2NkNzAyOWRiOGU2MWQxZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nDIxbR6azVNMb0l+LMVD9jc3i/w 87XZIuogKVxlnIeVLorvdOy/7iJozMYVWXFRchSayaMg9oBKuV3rxfPVMgYhT6ZU 2XvTeXXHgunt/H+Sn7oL9KCtK5X7+YroXRkUqrgUNEZ2HNt7/RIl1mvFWN6IS2Xz EEo3o2GGgjX8dKd6hGoCjo/qTHG90mPayCQUf04FFvgCqMP6Yy/LBxJjU+I4VlTJ W1fQv1Zcf5b5pdkwURcm9naVzKpWNAr33K2CGTQxhOP9hvTIXkZLe0vba2CrutBA RtQ2XraeaITHAVNyuHrW5fGnMnzxbxDYqhOo5O/+MjwIMcMeMWHGfK+S1wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAM2T87daRNXczzVzNcCnbjmHR46MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzU2ZjUy Ni01M2RlLTRjOWQtYjQwMS1hYmYwYjU5NDY0NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNTZmNTI2 LTUzZGUtNGM5ZC1iNDAxLWFiZjBiNTk0NjQ2Zi8xL0F6WlB6dDFwRTFkelBOWE0x d0tkdU9ZZEhqby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuVScMA0EAgACMAcDBQMqFBbAMA0GCSqGSIb3 DQEBCwUAA4IBAQCI1KtGG0ueudha+04gQGAuswKvoN7ZrJDI0O0MxmJQ+0S6xnpm MbR/PuxImmqb0fwf7NuRyWV5rdBdCAPtQy0LhkqLf19eoBeeeKInbOHRiY8wEOKt dZZkt2epJexd/C+qwmSep6OeVEY2TwfYbd4hYy74ZoK8oHjbeTeHFk4AMAxvYvp4 wboKryX2vNk6yU/PoIbKimarIWWhcszaRTGMinnRjJ4oxWr7/EkaCJhi8z4nXSmb 7tH3DRFYDs0ekJP+DrB7klLImwOculjlYWo8i/6Pk/wP3Qy0o3IqE4v40VsvGJ3A NwAsOQFalYPDr6BAN6Tk5Bu/m4y+qQzLt5V4 -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:32 2026 by rpki-client