This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer (raw, json) Hash identifier: fA7ROe5OlNOc9uBAO2ZKR9BMbSdvTx6ftZ+HSIxXiv0= Subject key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77590C5146585C9738059FC92E505E37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 161.76.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0c:51:46:58:5c:97:38:05:9f:c9:2e:50:5e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:f8:be:11:66:ac:d1:70:d8:21:8c:ae:da: 4e:54:3a:69:d0:b3:00:ce:39:74:ad:64:6c:b0:d8: 96:a2:bf:a4:da:04:c6:b5:be:86:0a:a0:d7:ee:78: e6:4a:dc:4c:9e:80:04:0a:4c:13:9c:26:c8:7c:3e: eb:b1:2e:71:76:87:63:33:28:a3:69:d6:db:2c:2c: 2b:e7:f5:15:58:1f:5a:8d:2b:e8:9b:87:58:f8:0d: 11:00:d6:d0:05:85:b7:3f:57:4c:5f:34:b6:94:87: 16:a0:20:55:b6:6f:10:02:2d:d7:b9:67:bd:db:25: 90:ef:2d:9f:29:12:13:9b:68:f4:82:ac:3c:f7:8a: be:d3:72:41:7e:70:7b:6f:03:32:1f:e7:2f:83:f7: 0f:05:d4:95:36:30:db:8d:12:b8:77:ab:1b:0c:86: 36:45:28:d8:27:e4:44:bf:f7:b0:03:24:4d:9f:60: 51:ba:4e:1d:58:96:bf:61:aa:21:57:2e:c8:80:43: 55:9a:5d:72:95:73:61:8b:18:5b:5a:0c:19:82:66: ff:3d:50:e1:42:af:34:e9:60:d5:5d:bc:29:d5:3f: 8f:7a:b9:b6:be:fb:66:8e:69:b3:54:03:df:c9:23: b8:92:ef:a8:5b:5a:68:cc:bf:21:22:ea:b2:8e:15: 3b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.76.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:3e:21:13:7b:6c:af:29:52:be:df:85:5b:8e:55:73:2a:f8: c8:0c:07:8e:e0:94:2f:e7:73:c4:09:82:d5:e3:91:48:f3:7e: 77:21:ef:5e:1c:5a:37:eb:a9:f2:eb:62:0c:d9:ae:d6:c6:e1: d5:45:28:5e:09:80:27:cf:20:27:1e:08:c7:ac:4d:16:f1:11: 4b:7b:88:cf:34:a1:f0:7a:be:93:b8:c8:ae:4b:1a:ae:32:27: 79:e1:b5:a0:94:88:b3:fe:2a:13:d6:61:cb:3c:43:8f:fb:4b: ef:49:fa:ea:1b:18:41:09:ff:80:bc:dd:60:ac:5f:6d:a8:4e: 32:33:73:5c:00:43:ba:39:47:3a:33:c4:54:c9:45:3b:96:ad: 9b:8b:35:cb:e9:cc:b6:19:d7:47:95:19:f9:09:8d:79:b1:18: 43:e8:41:35:a1:1f:99:90:78:f6:3d:af:fa:9e:e6:d5:97:22: 11:8a:ec:1b:55:bf:62:fb:78:c2:47:49:9c:97:46:28:fe:a9: 80:a4:f8:2e:74:b8:8f:a3:41:c0:e6:85:e6:3e:85:c1:dc:d2: ae:ba:23:73:f5:eb:ab:5e:78:d8:40:53:a5:ca:b2:70:82:9e: 08:c2:4d:d3:04:7d:76:bd:02:4e:ff:7e:07:3a:12:4d:4a:3a: a2:5b:40:e6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt3WQxRRlhclzgFn8kuUF43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNlNTk2YTI0ZDQzNjUwY2I2MGU4ZmNjOWU0NGQ2ZjhjOTI5ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVD4vhFmrNFw2CGMrtpOVDpp0LMA zjl0rWRssNiWor+k2gTGtb6GCqDX7njmStxMnoAECkwTnCbIfD7rsS5xdodjMyij adbbLCwr5/UVWB9ajSvom4dY+A0RANbQBYW3P1dMXzS2lIcWoCBVtm8QAi3XuWe9 2yWQ7y2fKRITm2j0gqw894q+03JBfnB7bwMyH+cvg/cPBdSVNjDbjRK4d6sbDIY2 RSjYJ+REv/ewAyRNn2BRuk4dWJa/YaohVy7IgENVml1ylXNhixhbWgwZgmb/PVDh Qq806WDVXbwp1T+Perm2vvtmjmmzVAPfySO4ku+oW1pozL8hIuqyjhU7rwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFEs+WWok1DZQy2Do/MnkTW+Mkp01MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzRiMmZi Mi1jMGFiLTRlZWMtOGQwMS0zM2QxOGJmNmRmNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNGIyZmIy LWMwYWItNGVlYy04ZDAxLTMzZDE4YmY2ZGY1NS8xL1N6NVphaVRVTmxETFlPajh5 ZVJOYjR5U25UVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAoUwwDQYJKoZIhvcNAQELBQADggEBAG4+IRN7 bK8pUr7fhVuOVXMq+MgMB47glC/nc8QJgtXjkUjzfnch714cWjfrqfLrYgzZrtbG 4dVFKF4JgCfPICceCMesTRbxEUt7iM80ofB6vpO4yK5LGq4yJ3nhtaCUiLP+KhPW Ycs8Q4/7S+9J+uobGEEJ/4C83WCsX22oTjIzc1wAQ7o5RzozxFTJRTuWrZuLNcvp zLYZ10eVGfkJjXmxGEPoQTWhH5mQePY9r/qe5tWXIhGK7BtVv2L7eMJHSZyXRij+ qYCk+C50uI+jQcDmheY+hcHc0q66I3P166teeNhAU6XKsnCCngjCTdMEfXa9Ak7/ fgc6Ek1KOqJbQOY= -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:07 2026 by rpki-client