This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer (raw, json) Hash identifier: 1GhICOOI8mnsNkXM8taPt9R7ZR87CpDR/AsR1rVR+ew= Subject key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED084F356B030CEB21D39E01219C50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.83.168.0/22 IP: 2a05:9d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:08:4f:35:6b:03:0c:eb:21:d3:9e:01:21:9c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:27:6b:5e:86:d0:34:4c:4e:c0:2f:8c:cc:65: c4:62:75:35:90:1b:e1:fa:8c:94:0d:e8:0f:98:05: 19:d9:10:ee:82:fb:88:ce:cc:68:3a:3e:f2:69:dd: 7b:85:4d:6c:57:00:4c:cf:8b:ef:b5:ae:75:50:54: e6:7a:58:76:8c:3d:98:b2:7a:41:ed:a8:af:88:c7: 0b:eb:53:22:33:2c:b8:3e:97:50:f6:5a:7b:72:6f: 86:47:74:0b:50:32:1a:9c:c5:44:5d:dd:ec:75:34: 23:87:d0:e7:b5:22:57:5e:b5:d5:f2:68:48:7b:1d: 44:8d:27:d0:c8:99:2a:58:7f:30:5c:43:45:0c:a2: 84:55:de:9b:1c:d1:b4:3d:42:44:ed:3e:16:a6:16: 0f:ee:b5:17:25:0b:1e:de:e0:bb:46:07:01:82:a1: 80:83:ea:60:db:5b:52:6d:ae:b7:27:6c:96:09:9f: 4d:a5:76:90:45:e2:f5:72:07:3e:23:90:d0:5d:3b: fc:4a:66:82:d1:8e:d8:c3:12:36:43:6f:1c:ed:9b: c2:f3:38:97:65:ea:ad:35:8f:eb:cb:b8:4b:19:ba: 36:71:e9:79:50:cc:c0:ec:a8:52:0a:3f:e5:74:cf: 98:20:c8:30:3f:fc:c4:65:06:36:99:21:1f:3c:42: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.168.0/22 IPv6: 2a05:9d00::/29 Signature Algorithm: sha256WithRSAEncryption 52:13:3c:35:eb:cb:02:b1:ca:02:29:43:e8:6b:74:3e:f9:58: 60:8a:aa:0b:e5:e9:ce:ba:af:e5:3f:a8:f6:57:e4:c8:5b:bd: 9e:18:f3:2f:9d:71:7a:d7:f3:4b:40:07:79:ea:ef:03:2d:21: 43:bf:22:18:cc:60:0a:4a:11:cf:2b:10:ac:de:6a:9f:eb:32: 46:ff:f8:a2:e6:81:1c:c3:ed:f4:9a:3e:d2:a6:9f:6e:66:6c: 57:de:55:2c:b8:a9:11:c6:02:35:50:9d:95:c6:89:47:b9:af: 6f:c7:3a:d4:c3:3a:bc:96:35:42:d8:70:25:37:f5:da:73:d3: ea:57:9e:c2:b4:15:78:2a:d3:b2:7a:01:f6:a6:10:79:47:a2: 0c:19:67:2d:b6:d7:90:f7:10:6e:69:77:c9:b0:94:a1:a5:ad: ce:a9:23:5b:2b:31:29:7a:66:51:ce:25:4a:82:5d:46:80:71: d4:f5:69:24:51:29:c5:91:f7:e1:18:0c:cf:0e:4b:6a:7f:70: 8f:40:1e:b1:a0:38:73:33:23:1b:b8:85:19:f5:66:f9:24:24: 9e:a5:2d:71:21:9b:1f:0c:f6:05:18:f1:7e:96:25:96:a3:1e: f8:4e:0a:2d:c8:c9:b1:39:00:59:16:21:aa:e5:8a:5b:00:fc: 1a:4a:04:9c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87QhPNWsDDOsh054BIZxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk0ZGY2NWEzYmRkZGZiNTU2MDlmMTg1MGUxNDlmODJiZWE3OGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ydrXobQNExOwC+MzGXEYnU1kBvh +oyUDegPmAUZ2RDugvuIzsxoOj7yad17hU1sVwBMz4vvta51UFTmelh2jD2YsnpB 7aiviMcL61MiMyy4PpdQ9lp7cm+GR3QLUDIanMVEXd3sdTQjh9DntSJXXrXV8mhI ex1EjSfQyJkqWH8wXENFDKKEVd6bHNG0PUJE7T4WphYP7rUXJQse3uC7RgcBgqGA g+pg21tSba63J2yWCZ9NpXaQReL1cgc+I5DQXTv8SmaC0Y7YwxI2Q28c7ZvC8ziX ZeqtNY/ry7hLGbo2cel5UMzA7KhSCj/ldM+YIMgwP/zEZQY2mSEfPEKfAQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFD2U32Wjvd37VWCfGFDhSfgr6nj3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2RhOWM2 Mi04ZTE2LTQ2ZGYtYmUyYi0wNmI5ZWQ5OWYxNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvZGE5YzYy LThlMTYtNDZkZi1iZTJiLTA2YjllZDk5ZjE2Yy8xL1BaVGZaYU85M2Z0VllKOFlV T0ZKLUN2cWVQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVOoMA0EAgACMAcDBQMqBZ0AMA0GCSqGSIb3 DQEBCwUAA4IBAQBSEzw168sCscoCKUPoa3Q++VhgiqoL5enOuq/lP6j2V+TIW72e GPMvnXF61/NLQAd56u8DLSFDvyIYzGAKShHPKxCs3mqf6zJG//ii5oEcw+30mj7S pp9uZmxX3lUsuKkRxgI1UJ2VxolHua9vxzrUwzq8ljVC2HAlN/Xac9PqV57CtBV4 KtOyegH2phB5R6IMGWcttteQ9xBuaXfJsJShpa3OqSNbKzEpemZRziVKgl1GgHHU 9WkkUSnFkffhGAzPDktqf3CPQB6xoDhzMyMbuIUZ9Wb5JCSepS1xIZsfDPYFGPF+ liWWox74TgotyMmxOQBZFiGq5YpbAPwaSgSc -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:41 2026 by rpki-client