This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer File: CZ-qshYRGNsbd8GnTszLc-doHDY.cer (raw, json) Hash identifier: l9nxOf0OpfIDc5tIOkjxgSW6jM7znugzq5QnfDiNJ+E= Subject key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7FC7C32CE9285B805E67609BAC838 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47871 IP: 93.174.8.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fc:7c:32:ce:92:85:b8:05:e6:76:09:ba:c8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=099faab2161118db1b77c1a74ecccb73e7681c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:50:c7:8c:63:2b:2d:56:2b:93:4a:f4:9b: 21:51:04:e6:18:04:e4:f9:7e:2a:05:6c:f3:a4:df: b5:4b:f0:03:b6:9b:79:24:5d:1f:45:cf:d4:e6:7c: 8e:67:f4:51:e6:4a:46:a7:83:9f:24:ed:12:f7:97: de:29:48:14:ac:d1:26:5e:3a:2c:e6:2c:a7:04:53: 36:b4:da:17:60:c2:54:2f:75:7f:2d:ee:62:0c:7d: 93:59:d5:2c:29:fd:dc:31:98:dd:3e:42:1f:a2:02: 56:f1:47:69:06:10:94:95:b9:db:ad:e3:60:84:bd: 96:f4:d2:47:33:f6:32:d6:22:5d:6f:5d:7f:75:a7: 10:a2:96:a7:9a:dc:d2:44:38:50:ad:85:7b:30:ec: 40:b3:8e:1b:ff:bf:d1:4d:e9:d5:c2:c1:04:6e:a2: 78:90:a4:3b:58:36:78:00:48:66:36:90:1f:b2:c3: d1:7b:f7:1b:d0:67:23:eb:0b:be:46:2e:26:69:c3: 67:6b:2e:4b:4f:d5:30:04:bf:6d:9c:4e:ec:3a:27: 5c:39:f6:ea:73:e9:07:8c:4c:56:83:56:a9:c6:2a: 72:10:c2:68:e4:af:36:29:15:b3:c3:04:4e:86:63: 74:21:b4:16:f5:d1:17:fc:ce:8a:79:9c:81:97:1a: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.8.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47871 Signature Algorithm: sha256WithRSAEncryption 6c:30:cd:44:69:91:02:13:87:ae:00:01:ab:50:c1:be:ec:5b: 9e:77:a3:9c:2a:17:bf:a4:59:76:c9:c9:98:ed:e9:f3:80:5f: 6f:83:73:e3:48:7d:47:45:05:c6:5d:d4:68:fb:c8:9d:eb:f7: 46:12:3a:3f:ba:02:b7:48:a3:69:14:60:c6:33:77:86:00:2a: 95:88:92:9c:32:4d:85:f7:6d:c5:cf:6d:d7:58:53:09:e9:90: 9c:7c:5b:1c:0d:6f:18:04:bc:90:52:22:3a:81:d0:38:9c:90: da:03:97:a9:f7:17:e3:cf:5d:1e:a5:d1:ea:6d:0c:48:80:fe: 89:13:c6:a8:0c:e5:fa:59:8c:52:86:91:63:b8:69:6b:44:51: 95:af:36:e7:83:26:14:08:85:88:15:29:77:2c:ef:7c:61:b8: e8:68:e7:07:28:d9:66:ab:8c:15:cc:f8:fa:1f:f4:64:4f:5a: 5c:c3:52:b1:cf:7d:76:bd:6e:57:6b:61:35:95:36:8e:c6:f9: d8:7e:f0:61:be:00:bf:64:24:ef:9b:57:52:ea:fe:12:18:b6: 73:56:8a:c5:dd:c3:00:bd:2b:db:d2:5d:84:b2:10:9c:f9:21: c0:b9:3e:2e:b5:ec:86:97:82:b8:3e:e7:37:08:69:d4:b7:26: 29:8a:12:d2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x/x8Ms6ShbgF5nYJusg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTlmYWFiMjE2MTExOGRiMWI3N2MxYTc0ZWNjY2I3M2U3NjgxYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPpQx4xjKy1WK5NK9JshUQTmGATk +X4qBWzzpN+1S/ADtpt5JF0fRc/U5nyOZ/RR5kpGp4OfJO0S95feKUgUrNEmXjos 5iynBFM2tNoXYMJUL3V/Le5iDH2TWdUsKf3cMZjdPkIfogJW8UdpBhCUlbnbreNg hL2W9NJHM/Yy1iJdb11/dacQopanmtzSRDhQrYV7MOxAs44b/7/RTenVwsEEbqJ4 kKQ7WDZ4AEhmNpAfssPRe/cb0Gcj6wu+Ri4macNnay5LT9UwBL9tnE7sOidcOfbq c+kHjExWg1apxipyEMJo5K82KRWzwwROhmN0IbQW9dEX/M6KeZyBlxpaBwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAmfqrIWERjbG3fBp07My3PnaBw2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2Lzg4YjZj Yy0yYjQyLTQxZTItOTlhOS00ZTI0YjExOWMxNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvODhiNmNj LTJiNDItNDFlMi05OWE5LTRlMjRiMTE5YzE0Ny8xL0NaLXFzaFlSR05zYmQ4R25U c3pMYy1kb0hEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXa4IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC6/zANBgkqhkiG9w0BAQsFAAOCAQEAbDDNRGmRAhOHrgABq1DBvuxbnnejnCoX v6RZdsnJmO3p84Bfb4Nz40h9R0UFxl3UaPvInev3RhI6P7oCt0ijaRRgxjN3hgAq lYiSnDJNhfdtxc9t11hTCemQnHxbHA1vGAS8kFIiOoHQOJyQ2gOXqfcX489dHqXR 6m0MSID+iRPGqAzl+lmMUoaRY7hpa0RRla8254MmFAiFiBUpdyzvfGG46GjnByjZ ZquMFcz4+h/0ZE9aXMNSsc99dr1uV2thNZU2jsb52H7wYb4Av2Qk75tXUur+Ehi2 c1aKxd3DAL0r29JdhLIQnPkhwLk+LrXshpeCuD7nNwhp1LcmKYoS0g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:52 2026 by rpki-client