This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer (raw, json) Hash identifier: ObEDu4ZkVAOGORolNMnszODDWlktreHHUPhds+gTwK0= Subject key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80C653E5E32C4C0067B9A37ABE6CD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212974 IP: 91.216.146.0/24 IP: 2a0d:1d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c6:53:e5:e3:2c:4c:00:67:b9:a3:7a:be:6c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:20:e2:0a:f1:59:21:2c:8e:39:5e:85:0f: 5d:00:4c:fc:64:7f:e0:16:0c:6e:3b:d9:92:88:11: 25:96:63:6b:15:02:de:19:f0:a9:c9:61:e2:55:fd: c9:d3:74:71:69:7c:cf:8c:00:46:b1:07:73:e7:ff: 3b:2e:57:48:ff:ee:18:b2:6a:01:15:8d:8e:43:50: 71:bb:2f:2d:41:77:f4:0d:a8:0f:9d:c1:8f:8f:46: 3c:f0:5d:39:6e:4c:5c:c1:b6:0b:5c:14:a6:60:4b: e7:87:c5:fd:87:71:53:7f:3b:3f:2c:3d:65:b2:85: 2b:f8:b4:c9:41:12:bb:f5:49:b5:25:21:1b:49:2c: 58:bc:71:7b:a4:91:f2:29:61:58:28:01:d5:3b:91: bc:7f:c0:94:14:4c:d3:10:05:60:b1:ec:02:41:f1: ae:f4:81:e7:71:1b:5a:3f:3a:fa:12:71:99:e3:dd: 1b:79:98:bc:82:bd:33:7f:e9:3c:a5:02:05:c2:e6: e6:a1:26:b2:a6:b1:ca:1e:3a:90:5f:75:9a:c5:76: 4c:5b:90:f6:64:0a:35:f7:9d:85:48:99:3e:8d:23: fd:e0:35:20:75:dd:e7:ce:33:3e:fa:6e:62:6c:f6: 88:87:49:07:f0:06:a6:18:86:02:6e:30:20:7a:3c: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.146.0/24 IPv6: 2a0d:1d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212974 Signature Algorithm: sha256WithRSAEncryption 2e:71:d9:bf:64:50:96:81:53:17:ee:db:91:c4:85:d8:ef:e0: fd:8d:e2:02:40:39:69:34:c2:23:76:4d:02:8c:1f:2a:6a:f3: 7c:8d:99:a5:69:15:b0:e2:c2:7f:87:c1:64:ef:fa:e0:5a:36: 2d:67:65:73:8c:c7:21:ff:24:8a:0a:88:d2:1b:7c:36:b0:c9: 5e:39:25:ee:08:2c:4a:9d:ea:82:ac:f8:07:4b:2a:45:71:ea: 52:41:a0:4b:d5:56:17:4e:9b:0c:22:8f:e2:2a:26:ce:47:47: c5:9a:00:42:c2:49:74:0c:88:c3:34:23:ba:59:9f:b4:76:dc: 0e:cf:1d:35:70:94:52:ac:9d:da:c2:73:07:3b:d8:7f:9a:6c: c6:71:52:f2:fa:e9:e3:7d:28:bc:0c:f0:4a:bf:2e:99:c7:cb: 0f:7a:b5:ba:34:c8:28:80:eb:91:47:1e:b5:bd:a6:87:f3:0e: 82:ca:70:f3:94:e4:f1:c5:83:69:ee:2b:35:29:37:f3:80:59: e4:0d:06:20:5c:21:21:8a:16:ea:be:f1:91:ab:2b:6f:43:a9: 9b:ff:4e:29:2e:fb:82:5a:7d:3b:ba:4b:a6:fc:d2:d0:59:89: bf:26:7c:15:4a:b8:f3:d2:c6:a0:43:6c:e8:e4:d2:f9:bc:8a: 57:34:fa:5b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gMZT5eMsTABnuaN6vmzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2JiMzljZjI0YTY3NDI0OGY2OTRmNmQxYzNiZmI1YzgyNjdlZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB4g4grxWSEsjjlehQ9dAEz8ZH/g FgxuO9mSiBEllmNrFQLeGfCpyWHiVf3J03RxaXzPjABGsQdz5/87LldI/+4YsmoB FY2OQ1Bxuy8tQXf0DagPncGPj0Y88F05bkxcwbYLXBSmYEvnh8X9h3FTfzs/LD1l soUr+LTJQRK79Um1JSEbSSxYvHF7pJHyKWFYKAHVO5G8f8CUFEzTEAVgsewCQfGu 9IHncRtaPzr6EnGZ490beZi8gr0zf+k8pQIFwubmoSayprHKHjqQX3WaxXZMW5D2 ZAo1952FSJk+jSP94DUgdd3nzjM++m5ibPaIh0kH8AamGIYCbjAgejzBPwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2Q5ZDY2 NC1iMDE4LTQ4OTYtOGNiZC1hZWNjYjYzMmQyODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZDlkNjY0 LWIwMTgtNDg5Ni04Y2JkLWFlY2NiNjMyZDI4OC8xL1o3czV6eVNtZENTUGFVOXRI RHY3WElKbjd2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9iSMA0EAgACMAcDBQMqDR0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/7jANBgkqhkiG9w0BAQsFAAOCAQEALnHZv2RQloFT F+7bkcSF2O/g/Y3iAkA5aTTCI3ZNAowfKmrzfI2ZpWkVsOLCf4fBZO/64Fo2LWdl c4zHIf8kigqI0ht8NrDJXjkl7ggsSp3qgqz4B0sqRXHqUkGgS9VWF06bDCKP4iom zkdHxZoAQsJJdAyIwzQjulmftHbcDs8dNXCUUqyd2sJzBzvYf5psxnFS8vrp430o vAzwSr8umcfLD3q1ujTIKIDrkUcetb2mh/MOgspw85Tk8cWDae4rNSk384BZ5A0G IFwhIYoW6r7xkasrb0Opm/9OKS77glp9O7pLpvzS0FmJvyZ8FUq489LGoENs6OTS +byKVzT6Ww== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:19 2026 by rpki-client