This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer (raw, json) Hash identifier: xUo3W67pze9hxorHJNCwsB1sQHSz39JEcZVtfxv57DM= Subject key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE5C3D66278B0F412FD3E93B49626 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8491 AS: 39143 AS: 200264 AS: 204492 AS: 207479 IP: 81.95.32.0/20 IP: 82.194.224.0/19 IP: 87.238.96.0/21 IP: 89.188.160.0/19 IP: 185.211.240.0/22 IP: 2a03:8640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e5:c3:d6:62:78:b0:f4:12:fd:3e:93:b4:96:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:51:8b:f3:9c:98:44:ca:e5:97:35:61:ba: 1d:6c:b8:32:da:8c:dd:cc:b6:67:04:de:18:91:e0: 13:ba:4c:5c:1e:8e:ae:01:87:df:0d:0a:14:9e:68: 36:06:43:71:30:59:e0:22:53:9b:eb:69:eb:36:f9: 47:0e:ac:22:51:a1:75:7d:08:5f:c1:88:1b:01:58: 9a:af:12:fa:d8:01:b8:e1:51:92:ab:71:0c:96:03: fa:1a:54:7c:a4:2a:65:a7:cf:8f:9f:6f:1e:cc:ad: d9:40:03:b3:96:73:85:ad:4d:e6:93:17:2a:f8:8c: d4:bc:20:57:5f:f6:2e:5a:cf:8e:dd:a8:52:00:ef: 2f:72:5b:03:72:56:a1:7a:08:35:a8:f0:94:6f:a8: ad:40:99:c1:02:17:01:42:3b:e6:99:9f:94:b8:b2: 6f:14:e9:a5:26:0a:30:45:8b:47:3d:9a:40:98:c0: 7a:26:1a:77:eb:41:88:30:24:ab:69:ea:0c:28:48: 89:ff:7a:f8:b8:93:f0:35:5c:e6:56:ae:c4:1a:97: a7:4a:1c:f6:2e:d9:29:dd:e4:b6:b2:a7:84:03:30: 6d:7e:64:db:f5:bc:45:13:a0:b8:35:cb:3e:8e:68: 90:6f:78:2c:3d:17:ee:06:12:f5:64:e0:dd:f9:28: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.32.0/20 82.194.224.0/19 87.238.96.0/21 89.188.160.0/19 185.211.240.0/22 IPv6: 2a03:8640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8491 39143 200264 204492 207479 Signature Algorithm: sha256WithRSAEncryption 48:44:72:be:ed:96:ee:ae:17:68:32:80:08:3b:df:4b:6f:d9: 30:68:11:3f:5a:bf:bb:7a:dc:25:c1:02:52:01:15:62:74:60: 4c:f9:87:fc:ff:e6:9a:d0:3f:e3:e6:7d:b1:7d:c8:24:93:ab: f0:ee:45:62:99:fe:20:f5:52:68:0d:11:aa:d4:fd:44:43:7b: c5:c8:df:7e:27:1e:6a:af:4a:8a:04:7a:78:a8:11:c9:c1:3e: 35:ef:15:66:a2:07:f5:65:77:1e:73:9e:93:ac:e4:64:92:ea: 24:14:89:53:2a:86:be:9e:6f:6e:d1:20:d6:f6:da:99:b5:d1: 97:fd:3c:a4:6b:ba:de:5f:d1:1b:a2:fc:1a:60:69:25:ef:2b: 35:da:2f:ce:14:e2:25:48:78:a9:fd:fc:01:cb:cd:a5:45:61: 45:44:f4:00:f4:c6:90:0e:7a:49:8a:44:89:91:ca:0c:32:44: 65:c3:16:2b:a7:f8:43:55:5c:7b:86:a9:37:2b:8e:66:9e:17: 45:e6:a5:9c:b3:b1:f2:c8:fd:7d:1f:fc:79:cb:76:d5:65:29: 8c:f6:bb:fc:74:2b:aa:cf:7b:1c:71:ae:55:b5:bd:3b:2d:2b: 51:e4:30:6f:0f:f9:47:1d:f1:2a:53:24:16:1e:a9:e3:6e:16: 3b:42:5f:22 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt26uXD1mJ4sPQS/T6TtJYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UzZDkyYmZlMTY2MTljYTUwMGMwMzI2N2VmZmE5YWE3Y2EwYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWVRi/OcmETK5Zc1YbodbLgy2ozd zLZnBN4YkeATukxcHo6uAYffDQoUnmg2BkNxMFngIlOb62nrNvlHDqwiUaF1fQhf wYgbAViarxL62AG44VGSq3EMlgP6GlR8pCplp8+Pn28ezK3ZQAOzlnOFrU3mkxcq +IzUvCBXX/YuWs+O3ahSAO8vclsDclahegg1qPCUb6itQJnBAhcBQjvmmZ+UuLJv FOmlJgowRYtHPZpAmMB6Jhp360GIMCSraeoMKEiJ/3r4uJPwNVzmVq7EGpenShz2 Ltkp3eS2sqeEAzBtfmTb9bxFE6C4Ncs+jmiQb3gsPRfuBhL1ZODd+ShasQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFCPj2Sv+FmGcpQDAMmfv+pqnygxHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzljMmM5 MC1jN2Q0LTQ4YjctOWJhZi1mMWJmMGMzM2E5MDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvOWMyYzkw LWM3ZDQtNDhiNy05YmFmLWYxYmYwYzMzYTkwOC8xL0ktUFpLXzRXWVp5bEFNQXla LV82bXFmS0RFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEUV8gAwQFUsLgAwQDV+5gAwQFWbygAwQCudPw MA0EAgACMAcDBQMqA4ZAMC0GCCsGAQUFBwEIAQH/BB4wHKAaMBgCAiErAgMAmOcC AwMOSAIDAx7MAgMDKncwDQYJKoZIhvcNAQELBQADggEBAEhEcr7tlu6uF2gygAg7 30tv2TBoET9av7t63CXBAlIBFWJ0YEz5h/z/5prQP+PmfbF9yCSTq/DuRWKZ/iD1 UmgNEarU/URDe8XI334nHmqvSooEenioEcnBPjXvFWaiB/Vldx5znpOs5GSS6iQU iVMqhr6eb27RINb22pm10Zf9PKRrut5f0Rui/BpgaSXvKzXaL84U4iVIeKn9/AHL zaVFYUVE9AD0xpAOekmKRImRygwyRGXDFiun+ENVXHuGqTcrjmaeF0XmpZyzsfLI /X0f/HnLdtVlKYz2u/x0K6rPexxxrlW1vTstK1HkMG8P+Ucd8SpTJBYeqeNuFjtC XyI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:31 2026 by rpki-client