This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer File: CZMomxaKN9RJvA1Esa015TICXPE.cer (raw, json) Hash identifier: zprtHEWzpOqtGDWdBk11pjDRJ3/Q/jgguIFs4CkY4aM= Subject key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB712B925CD60739F265341F887265 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39902 AS: 62111 AS: 205028 IP: 185.1.99.0/24 IP: 194.156.76.0/24 IP: 2001:7f8:ba::/48 IP: 2a11:a600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:71:2b:92:5c:d6:07:39:f2:65:34:1f:88:72:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0993289b168a37d449bc0d44b1ad35e532025cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:de:63:cb:b9:98:8c:fc:b5:19:d9:d5:4d:a8: 6d:2c:21:30:15:b8:88:be:6c:f9:0c:b7:a5:2b:a7: 6d:47:cc:11:2f:a3:0e:9b:a7:da:6f:6f:dc:50:d5: 3e:cd:e0:1a:5c:10:b2:2b:08:18:ae:91:65:27:fe: b4:f1:ab:85:90:66:10:e2:2b:96:50:e5:ff:20:8e: 80:ed:31:f6:de:44:db:69:4b:7c:6a:9b:b5:25:a8: 4b:0e:5e:42:c1:73:f8:36:5f:b9:45:95:c5:1f:78: cb:d7:ff:be:b7:f6:88:74:e7:59:d2:78:cf:ba:48: 39:75:5c:4d:af:e4:39:a6:08:f0:3c:97:7a:f3:cb: 2c:f4:58:39:94:3b:48:22:f0:c8:22:2c:e8:38:bd: fc:ad:c7:02:b3:3e:37:c6:27:5b:10:c6:e5:b8:d1: ba:23:aa:09:f0:44:89:c6:a8:dd:4f:70:ea:07:3b: 19:b1:ab:8c:8a:0e:f7:73:e3:2b:33:6f:b7:6d:cc: 7a:69:b6:a5:70:3c:6f:39:c6:c5:7a:9e:62:5a:69: 5e:f2:14:ae:21:be:fe:47:92:f3:32:56:9f:b5:7a: cd:ee:fc:8b:03:77:04:8f:b5:06:d2:ac:d6:a0:0e: cd:d3:dd:4a:2f:ce:15:de:00:1a:fa:9f:f3:d6:3c: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.99.0/24 194.156.76.0/24 IPv6: 2001:7f8:ba::/48 2a11:a600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39902 62111 205028 Signature Algorithm: sha256WithRSAEncryption 73:4c:64:d8:6e:e9:65:53:ac:47:e7:93:aa:5f:47:62:b4:9b: b8:ad:a3:91:e0:97:14:d5:7e:0f:ab:41:ec:4e:0f:9c:2c:03: 0c:5a:1e:e5:7e:1b:97:7a:9c:67:b3:7e:6e:cd:1f:66:9b:bd: 97:b1:70:93:45:31:7f:6e:c4:01:55:d2:ba:22:23:11:a4:83: 3f:34:10:ae:b6:ac:5c:00:44:fa:84:7b:27:66:28:c6:d8:e8: c8:fb:c1:28:a4:5f:18:25:49:db:5c:2b:71:04:00:d5:e8:45: d5:04:69:fb:5e:1d:0b:e3:08:08:55:af:99:e5:aa:12:72:51: 35:e8:40:82:b1:af:e2:fd:29:4b:3a:80:72:e0:dd:38:cc:50: 10:e5:8d:45:ea:2d:3f:b6:6c:ad:be:a7:e4:ca:af:32:20:fd: 26:d1:0f:58:7a:8a:9b:26:32:34:b8:1a:0d:cf:f3:45:43:b4: 8d:8e:22:2e:da:92:86:60:f6:e6:50:23:b8:79:c9:c4:5c:4d: 03:97:56:c9:7e:92:11:f2:2c:f0:2a:9f:1f:2f:ec:0f:0c:4c: cc:45:6c:63:6e:37:5d:1f:00:e0:ba:ac:bf:ab:b7:94:58:33: 5b:5a:e2:68:f4:1b:f3:35:ac:65:82:92:55:c4:77:9c:18:19: bf:2b:bf:68 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt263ErklzWBznyZTQfiHJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkzMjg5YjE2OGEzN2Q0NDliYzBkNDRiMWFkMzVlNTMyMDI1Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N5jy7mYjPy1GdnVTahtLCEwFbiI vmz5DLelK6dtR8wRL6MOm6fab2/cUNU+zeAaXBCyKwgYrpFlJ/608auFkGYQ4iuW UOX/II6A7TH23kTbaUt8apu1JahLDl5CwXP4Nl+5RZXFH3jL1/++t/aIdOdZ0njP ukg5dVxNr+Q5pgjwPJd688ss9Fg5lDtIIvDIIizoOL38rccCsz43xidbEMbluNG6 I6oJ8ESJxqjdT3DqBzsZsauMig73c+MrM2+3bcx6abalcDxvOcbFep5iWmle8hSu Ib7+R5LzMlaftXrN7vyLA3cEj7UG0qzWoA7N091KL84V3gAa+p/z1jyTGwIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFAmTKJsWijfUSbwNRLGtNeUyAlzxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzYmQy ZDJlLWY0MGUtNDcyZS05ZjhmLTg5ODRmZWFhYTVjNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNi ZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFhNWM3LzAvMDk5MzI4OUIxNjhB MzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwEgQCAAEwDAME ALkBYwMEAMKcTDAWBAIAAjAQAwcAIAEH+AC6AwUDKhGmADAkBggrBgEFBQcBCAEB /wQVMBOgETAPAgMAm94CAwDynwIDAyDkMA0GCSqGSIb3DQEBCwUAA4IBAQBzTGTY bullU6xH55OqX0ditJu4raOR4JcU1X4Pq0HsTg+cLAMMWh7lfhuXepxns35uzR9m m72XsXCTRTF/bsQBVdK6IiMRpIM/NBCutqxcAET6hHsnZijG2OjI+8EopF8YJUnb XCtxBADV6EXVBGn7Xh0L4wgIVa+Z5aoSclE16ECCsa/i/SlLOoBy4N04zFAQ5Y1F 6i0/tmytvqfkyq8yIP0m0Q9YeoqbJjI0uBoNz/NFQ7SNjiIu2pKGYPbmUCO4ecnE XE0Dl1bJfpIR8izwKp8fL+wPDEzMRWxjbjddHwDguqy/q7eUWDNbWuJo9BvzNaxl gpJVxHecGBm/K79o -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:03 2026 by rpki-client