This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer File: RZYC1698NIyVqxHt1hMgVnU-q7k.cer (raw, json) Hash identifier: dFUjcSvK6KMcNU30Fv7+y7KA78XP/eR3pPL/CIEa8FM= Subject key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6E44DBAC0DBB86D8628A2EBF64EDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215724 IP: 80.73.135.0/24 IP: 2a14:7f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e4:4d:ba:c0:db:b8:6d:86:28:a2:eb:f6:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=459602d7af7c348c95ab11edd6132056753eabb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:25:e5:64:61:de:56:db:2a:bc:49:86:ae: 0a:58:91:01:63:6d:c1:4f:29:da:50:e1:31:69:96: d3:58:1b:d1:f3:92:07:90:99:2b:d1:38:3c:b6:61: 3a:37:1f:9b:f6:5a:cd:bb:b5:ce:a4:97:6c:b4:c7: 9d:32:25:c5:be:0f:dc:d7:b2:40:4a:c4:9c:ac:39: 76:a6:ed:32:cb:10:7a:b6:cc:0f:fd:62:57:24:9c: fb:ce:24:d6:a7:8e:8d:5c:82:70:02:26:d1:f0:10: 14:0f:7c:95:b8:2f:cd:34:44:1c:f0:fb:ad:70:c0: 41:90:d0:98:5e:1d:d9:5b:cf:da:0f:61:cc:57:2a: 78:89:dc:8f:b2:92:8a:a9:5f:04:8a:6f:b7:46:b3: e4:5d:f6:51:58:6c:d9:31:0d:64:d4:b1:e1:c9:d9: e0:e7:e0:7a:72:70:82:c7:fb:82:41:49:e6:1a:76: cd:bf:ea:fc:91:6a:3f:c6:93:6a:6f:20:7c:2a:66: ed:7d:ed:0e:8f:dc:87:57:a6:ec:94:f0:55:d7:33: 96:7e:01:be:b0:9c:a2:d6:51:d8:2d:19:6a:04:18: 30:ca:6b:69:69:9b:1e:85:d0:0a:6c:fc:7f:4e:81: 14:7d:2e:b2:8d:c4:42:8e:82:c5:1f:77:7a:03:6b: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.135.0/24 IPv6: 2a14:7f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215724 Signature Algorithm: sha256WithRSAEncryption 6f:b2:ff:e5:6e:d1:57:d7:c0:f4:c2:b7:67:a2:ea:19:62:67: e5:71:67:b0:9b:60:10:6a:00:5d:b1:e9:36:a3:27:0a:e2:47: 85:57:a6:54:fa:2b:13:ce:ad:c0:cb:66:78:fb:29:24:ca:de: 2c:85:db:81:36:d5:dd:40:12:80:e6:8c:21:a8:9b:d4:53:36: 7d:29:03:8a:b1:db:bb:08:d3:f9:5e:f4:19:68:40:f7:92:c4: f7:45:d7:c5:45:c4:81:91:6a:8b:08:c6:d9:f0:96:94:02:82: b3:f3:b6:7e:ae:57:82:64:23:b1:27:c9:30:c6:f9:8c:f1:31: 4e:e1:88:82:17:f1:1f:70:f7:cd:5e:d8:12:00:51:87:92:3c: e5:bf:c7:9d:51:14:e3:67:e3:87:20:2e:f6:37:13:28:84:97: c2:35:d1:94:a5:50:88:6a:d2:0e:df:f3:8c:c8:6a:8c:8a:48: 3b:b4:41:52:cd:ef:f2:27:6b:b1:b4:9c:0a:de:3e:28:33:5d: e4:27:ab:4e:36:89:7b:9e:d5:b6:54:38:d4:35:9c:9d:14:44: fd:82:0d:9d:27:27:f9:3c:19:1b:f6:28:fb:c1:18:38:28:08: 31:6d:ea:e5:6b:c4:c1:21:15:f2:9d:1a:d7:f2:34:8a:b8:66: 54:73:3d:d0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+puRNusDbuG2GKKLr9k7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTk2MDJkN2FmN2MzNDhjOTVhYjExZWRkNjEzMjA1Njc1M2VhYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiUl5WRh3lbbKrxJhq4KWJEBY23B TynaUOExaZbTWBvR85IHkJkr0Tg8tmE6Nx+b9lrNu7XOpJdstMedMiXFvg/c17JA SsScrDl2pu0yyxB6tswP/WJXJJz7ziTWp46NXIJwAibR8BAUD3yVuC/NNEQc8Put cMBBkNCYXh3ZW8/aD2HMVyp4idyPspKKqV8Eim+3RrPkXfZRWGzZMQ1k1LHhydng 5+B6cnCCx/uCQUnmGnbNv+r8kWo/xpNqbyB8Kmbtfe0Oj9yHV6bslPBV1zOWfgG+ sJyi1lHYLRlqBBgwymtpaZsehdAKbPx/ToEUfS6yjcRCjoLFH3d6A2utjQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEWWAtevfDSMlasR7dYTIFZ1Pqu5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzQwODYy Yy05M2FmLTRiMjYtODI1ZS02NTZjMTYyZmIyNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvNDA4NjJj LTkzYWYtNGIyNi04MjVlLTY1NmMxNjJmYjI0ZS8xL1JaWUMxNjk4Tkl5VnF4SHQx aE1nVm5VLXE3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAUEmHMA0EAgACMAcDBQMqFH8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKrDANBgkqhkiG9w0BAQsFAAOCAQEAb7L/5W7RV9fA 9MK3Z6LqGWJn5XFnsJtgEGoAXbHpNqMnCuJHhVemVPorE86twMtmePspJMreLIXb gTbV3UASgOaMIaib1FM2fSkDirHbuwjT+V70GWhA95LE90XXxUXEgZFqiwjG2fCW lAKCs/O2fq5XgmQjsSfJMMb5jPExTuGIghfxH3D3zV7YEgBRh5I85b/HnVEU42fj hyAu9jcTKISXwjXRlKVQiGrSDt/zjMhqjIpIO7RBUs3v8idrsbScCt4+KDNd5Cer TjaJe57VtlQ41DWcnRRE/YINnScn+TwZG/Yo+8EYOCgIMW3q5WvEwSEV8p0a1/I0 irhmVHM90A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:04 2026 by rpki-client