This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer File: FzLzNNirto74IlRtj2-OgVY8b9k.cer (raw, json) Hash identifier: Xy7YqIyZaWbqqoxznERfaxmxp57obZdWVXj0Mf8mnTM= Subject key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A0B5EB790BD0671C811B96E1D367 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200099 IP: 91.103.136.0/24 IP: 2a13:1d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a0:b5:eb:79:0b:d0:67:1c:81:1b:96:e1:d3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:b1:11:81:9b:18:26:39:ef:09:cb:3f:19: 7b:65:10:a1:cf:f6:6d:e9:75:9d:59:ff:21:12:03: dd:5e:a8:8b:c9:51:49:3d:c1:e7:a6:32:d1:ff:cc: 6e:b4:32:0f:b6:5b:ec:52:f5:fd:a6:f7:3e:f0:6b: 9b:23:35:41:7f:c7:42:f5:20:47:f4:b1:f8:1f:cf: 8a:b6:6d:ad:a0:44:87:7f:4a:41:1b:fa:ef:7c:2c: dd:51:0f:74:81:6a:06:7d:41:74:0a:55:b9:fc:42: 03:aa:00:ef:0a:16:e7:c9:3d:8d:ba:c5:4a:73:40: 05:93:1c:89:bc:ea:10:05:52:72:0f:15:f2:f9:0e: 44:d9:63:4d:33:90:92:f2:94:5c:a8:ce:86:16:e8: 15:cb:55:7f:88:04:88:12:23:db:cb:96:a2:50:03: c6:44:2b:80:01:f7:7b:89:1f:37:42:d9:c2:da:26: 61:4a:31:78:d5:65:e2:bc:a0:0e:6a:c6:93:40:29: 82:a4:76:e7:2d:4e:9e:86:87:fd:2e:f3:c8:44:62: 41:6d:49:e4:38:cd:ec:14:2e:f4:ab:12:87:c0:44: e7:b1:4c:41:de:4c:46:78:f0:9f:02:48:47:90:1e: f2:4a:28:e9:83:0b:2b:ee:c8:d0:cd:09:03:a1:92: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.136.0/24 IPv6: 2a13:1d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200099 Signature Algorithm: sha256WithRSAEncryption 74:bc:74:5b:1a:b2:23:bf:28:52:ee:cd:96:51:ee:5a:d1:50: 88:06:7c:41:a8:b6:d2:f7:da:e2:05:67:c2:d1:86:33:28:74: 88:21:5e:a9:d8:50:a4:fe:a1:bb:ff:b4:84:70:8b:69:4d:79: 97:46:f0:9f:b1:a6:04:8d:4d:1f:bf:67:ad:89:45:77:7b:26: fe:bf:2c:07:31:42:fb:80:8f:b0:30:1c:54:a9:93:f4:b6:65: 53:d3:92:22:d6:a7:d2:7c:8d:82:bf:43:f4:43:2a:9e:0f:5e: db:87:92:1c:37:ca:25:76:42:eb:2e:7f:9f:ec:57:65:cd:ad: 84:aa:b6:71:31:a7:6b:7b:b5:89:82:e8:df:12:51:81:b0:69: 33:95:79:57:7d:d3:f9:fb:75:1d:f6:16:ac:6b:fc:fa:08:02: 5e:2d:60:53:ea:65:a0:df:71:6e:c7:c2:a0:10:da:28:d1:5f: 6a:46:67:5c:20:37:af:ae:bf:f0:b6:a0:83:6f:f3:cd:9a:75: db:f4:8b:36:e3:f5:96:c4:f1:c1:b8:c6:55:bc:8e:dc:4d:9b: 92:b0:11:bc:47:a4:d3:3c:f7:98:b4:36:29:2c:f3:56:87:a1: a3:45:29:c0:20:95:b8:64:3f:f6:c9:cf:c4:d1:05:03:83:82: 56:4e:29:94 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yKC163kL0GccgRuW4dNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzMyZjMzNGQ4YWJiNjhlZjgyMjU0NmQ4ZjZmOGU4MTU2M2M2ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNGxEYGbGCY57wnLPxl7ZRChz/Zt 6XWdWf8hEgPdXqiLyVFJPcHnpjLR/8xutDIPtlvsUvX9pvc+8GubIzVBf8dC9SBH 9LH4H8+Ktm2toESHf0pBG/rvfCzdUQ90gWoGfUF0ClW5/EIDqgDvChbnyT2NusVK c0AFkxyJvOoQBVJyDxXy+Q5E2WNNM5CS8pRcqM6GFugVy1V/iASIEiPby5aiUAPG RCuAAfd7iR83QtnC2iZhSjF41WXivKAOasaTQCmCpHbnLU6ehof9LvPIRGJBbUnk OM3sFC70qxKHwETnsUxB3kxGePCfAkhHkB7ySijpgwsr7sjQzQkDoZLi+wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzdiYzhk YS1jYjgyLTRhYmMtYjJmMC0xM2I0YjgwYzU0YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvN2JjOGRh LWNiODItNGFiYy1iMmYwLTEzYjRiODBjNTRiYS8xL0Z6THpOTmlydG83NElsUnRq Mi1PZ1ZZOGI5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW2eIMA0EAgACMAcDBQMqEx1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMNozANBgkqhkiG9w0BAQsFAAOCAQEAdLx0WxqyI78o Uu7NllHuWtFQiAZ8Qai20vfa4gVnwtGGMyh0iCFeqdhQpP6hu/+0hHCLaU15l0bw n7GmBI1NH79nrYlFd3sm/r8sBzFC+4CPsDAcVKmT9LZlU9OSItan0nyNgr9D9EMq ng9e24eSHDfKJXZC6y5/n+xXZc2thKq2cTGna3u1iYLo3xJRgbBpM5V5V33T+ft1 HfYWrGv8+ggCXi1gU+ploN9xbsfCoBDaKNFfakZnXCA3r66/8Lagg2/zzZp12/SL NuP1lsTxwbjGVbyO3E2bkrARvEek0zz3mLQ2KSzzVoeho0UpwCCVuGQ/9snPxNEF A4OCVk4plA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:31 2026 by rpki-client