This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer File: CzlpzcC1_wnRmbyl2t25qrUQQOc.cer (raw, json) Hash identifier: OVNpL018zZ5upsD9yOOjV70xkUOo+CFypYW9cjHx628= Subject key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAE736134932ECB6155178994A8B14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214719 IP: 45.8.124.0/22 IP: 2a0e:7200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e7:36:13:49:32:ec:b6:15:51:78:99:4a:8b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:b6:4e:58:f2:e7:ec:b4:85:69:a4:01:d8: f3:10:c3:1d:ac:1c:b4:72:bc:20:53:3c:59:dd:50: 98:91:69:7c:05:fa:82:a9:2f:d3:24:8b:29:3e:f2: a4:83:84:90:6c:b6:28:23:30:a0:d3:e1:f9:ac:49: f3:10:e7:e1:d7:6c:e6:35:c2:d3:9a:96:3a:78:93: 3f:f7:68:c6:2c:d7:56:50:12:fa:36:24:6f:59:38: e2:67:b6:e5:e7:e2:b4:fb:5a:d6:f2:40:4a:27:95: 56:f1:33:07:74:ab:b3:6d:71:8e:42:6d:74:76:d6: e5:3c:7e:d7:6d:92:d4:46:b9:ab:7a:5f:c5:8d:63: 3b:14:b7:22:13:62:20:4f:b0:dd:36:a7:40:8d:1f: 79:d0:7a:cf:fa:7d:9b:84:4b:82:c3:8a:f3:51:e0: 01:29:12:16:61:ed:76:1e:45:74:15:0e:9e:6f:ff: c6:53:9f:3c:e0:d7:cf:52:48:66:05:a9:d6:80:20: 95:65:40:f0:4e:65:25:93:15:ac:94:e8:38:05:1b: 35:4c:c7:ad:90:c1:3a:8a:63:90:37:0c:5d:ba:ff: b0:69:22:b6:8b:4d:a5:47:6f:80:a5:85:e7:ec:af: 7b:de:ff:1e:47:89:43:b8:14:8a:7a:c7:d8:70:ee: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.124.0/22 IPv6: 2a0e:7200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214719 Signature Algorithm: sha256WithRSAEncryption 60:43:d1:ca:13:58:5d:16:f8:4d:05:2b:c2:d8:2e:e7:84:d4: 21:53:25:4c:5e:a7:e4:c3:f5:cb:0d:4a:ef:ad:6f:59:d7:a1: ac:84:46:4f:2a:32:21:fa:42:b5:60:d8:f3:e4:f1:56:ba:d6: ff:75:76:96:bd:30:09:c6:26:6b:07:07:9c:71:56:b8:d2:71: c6:6d:e7:d1:11:ce:c7:ab:5f:1b:cc:0f:74:a9:3a:f9:3b:00: 71:8f:51:7d:37:53:6c:e4:ef:33:a4:49:15:2c:72:ad:07:f9: c3:e4:92:76:a1:b3:e7:cb:9a:f2:fc:9d:aa:1d:53:01:6e:ab: e8:00:e4:2a:e7:a1:e5:f7:08:15:e0:85:72:00:23:b1:c6:89: 8c:e8:91:92:e3:ee:24:02:f8:31:20:ed:3a:3d:05:a6:12:27: d7:d0:5c:ff:e6:93:48:f5:87:32:3f:43:6c:73:7b:90:ce:37: ca:a1:79:7f:9c:56:a0:c2:e7:42:16:94:50:b5:2c:ef:ba:5f: e7:c8:8d:de:27:87:2b:0a:1b:8a:03:ff:ee:b7:ad:11:fa:28: 93:f5:87:a2:a2:bf:c5:61:b6:ab:fc:85:c4:b6:59:0c:cd:59: 39:5e:b3:3d:78:d0:ad:de:ea:ba:ae:ef:2f:47:0c:7e:9f:9d: 88:20:0f:c3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yuc2E0ky7LYVUXiZSosUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjM5NjljZGMwYjVmZjA5ZDE5OWJjYTVkYWRkYjlhYWI1MTA0MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKa2Tljy5+y0hWmkAdjzEMMdrBy0 crwgUzxZ3VCYkWl8BfqCqS/TJIspPvKkg4SQbLYoIzCg0+H5rEnzEOfh12zmNcLT mpY6eJM/92jGLNdWUBL6NiRvWTjiZ7bl5+K0+1rW8kBKJ5VW8TMHdKuzbXGOQm10 dtblPH7XbZLURrmrel/FjWM7FLciE2IgT7DdNqdAjR950HrP+n2bhEuCw4rzUeAB KRIWYe12HkV0FQ6eb//GU5884NfPUkhmBanWgCCVZUDwTmUlkxWslOg4BRs1TMet kME6imOQNwxduv+waSK2i02lR2+ApYXn7K973v8eR4lDuBSKesfYcO4mLQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAs5ac3Atf8J0Zm8pdrduaq1EEDnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2VkNTAx YS02ZWQ3LTQ1MmQtOGM3Ni02YmI0ZmVlODU3MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZWQ1MDFh LTZlZDctNDUyZC04Yzc2LTZiYjRmZWU4NTczNS8xL0N6bHB6Y0MxX3duUm1ieWwy dDI1cXJVUVFPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQh8MA0EAgACMAcDBQMqDnIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGvzANBgkqhkiG9w0BAQsFAAOCAQEAYEPRyhNYXRb4 TQUrwtgu54TUIVMlTF6n5MP1yw1K761vWdehrIRGTyoyIfpCtWDY8+TxVrrW/3V2 lr0wCcYmawcHnHFWuNJxxm3n0RHOx6tfG8wPdKk6+TsAcY9RfTdTbOTvM6RJFSxy rQf5w+SSdqGz58ua8vydqh1TAW6r6ADkKueh5fcIFeCFcgAjscaJjOiRkuPuJAL4 MSDtOj0FphIn19Bc/+aTSPWHMj9DbHN7kM43yqF5f5xWoMLnQhaUULUs77pf58iN 3ieHKwobigP/7retEfook/WHoqK/xWG2q/yFxLZZDM1ZOV6zPXjQrd7quq7vL0cM fp+diCAPww== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:04 2026 by rpki-client