This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer File: Z8Os-SmiIzjys4AYDMhS20d5qtA.cer (raw, json) Hash identifier: 4E4aeiYdt1HuR38lI03GmxYfiK98F7p24rNM7WBhdfE= Subject key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE01F4776A5A3C20A86C6D9662E03C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34380 IP: 193.43.244.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:01:f4:77:6a:5a:3c:20:a8:6c:6d:96:62:e0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67c3acf929a22338f2b380180cc852db4779aad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:c1:08:dc:e3:3e:7c:ce:1a:d1:30:69:09: 3b:46:a3:e4:5d:92:65:39:87:4e:39:26:d7:46:f1: 97:26:47:76:ec:df:36:90:cc:0f:7f:f1:75:2b:41: 66:e1:d7:4c:c3:77:7b:fa:bc:45:82:8c:f4:99:da: 13:ea:90:8a:6b:2d:29:8e:d3:85:7f:c2:e0:ca:5e: 71:70:75:4f:5d:d2:20:d7:7d:1c:b2:fc:97:77:24: db:9e:14:59:fb:44:8d:f1:0e:7c:f4:aa:ca:7a:87: 83:c8:df:d0:af:c7:ab:3b:c9:40:e3:15:85:64:25: 9d:de:4f:37:38:b4:04:09:72:17:e3:21:38:ea:29: 5b:46:8c:18:31:51:58:6c:d1:16:ea:0e:2c:dc:93: c5:ff:f9:08:6e:be:eb:a8:ea:19:49:31:71:c0:9b: cd:71:40:2c:cb:68:68:9b:3a:1c:5f:73:c2:5e:9f: 8f:81:e4:9a:41:b7:b8:94:d1:f4:f5:36:a7:82:39: 5e:ca:aa:f8:aa:06:d5:a8:71:5b:35:dc:bd:bc:20: 73:6e:f3:3e:68:28:8f:38:98:b7:77:87:44:e4:fb: de:2a:e7:bf:75:c1:9f:bb:c2:bb:f2:5b:84:e8:50: 11:d3:67:91:07:c9:9e:9c:02:ba:be:bb:19:6b:c9: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.244.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34380 Signature Algorithm: sha256WithRSAEncryption 70:cb:d5:d8:2c:1a:ef:67:15:4d:eb:3c:01:8f:ca:88:a8:49: 59:4d:c9:bb:16:5a:7a:93:67:34:69:7c:96:da:cf:47:20:ca: c0:92:63:8c:70:c6:41:0f:b2:0c:62:dc:70:b9:9d:ad:18:b3: 96:ca:f2:03:bd:75:fe:02:b8:aa:78:45:81:05:14:1f:fa:26: 6b:6c:58:71:fd:f6:d9:ec:c1:96:62:7b:11:77:71:91:d0:da: 76:e7:44:9d:97:d2:d3:e5:67:4a:3f:00:da:5b:bd:b7:12:63: 8d:ff:18:22:60:1c:8c:c3:df:e2:fa:6a:4b:12:bc:3b:bf:46: 5b:e9:8f:9b:16:b2:41:ff:ea:f0:a0:b8:ea:5c:77:22:27:2d: 3c:7f:09:ec:fa:aa:19:77:7e:cd:2e:54:dd:2d:04:d2:67:50: 5a:78:6b:76:99:ab:98:90:61:7a:a3:29:61:53:17:cf:c8:7f: c4:e3:37:77:0b:68:16:09:1a:92:05:b0:cf:f5:db:ae:17:79: 11:c7:73:9c:ab:d3:04:54:40:56:99:f2:1f:bd:5b:0b:a0:3c: 44:33:f2:9d:1d:8a:f8:07:d2:ab:4e:fc:da:c5:95:f3:4d:5b: 77:d4:00:6c:ca:e7:ca:13:2c:fc:5a:a7:a2:1f:0b:26:70:d6: 91:6c:36:f2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87gH0d2paPCCobG2WYuA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2MzYWNmOTI5YTIyMzM4ZjJiMzgwMTgwY2M4NTJkYjQ3NzlhYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyfBCNzjPnzOGtEwaQk7RqPkXZJl OYdOOSbXRvGXJkd27N82kMwPf/F1K0Fm4ddMw3d7+rxFgoz0mdoT6pCKay0pjtOF f8Lgyl5xcHVPXdIg130csvyXdyTbnhRZ+0SN8Q589KrKeoeDyN/Qr8erO8lA4xWF ZCWd3k83OLQECXIX4yE46ilbRowYMVFYbNEW6g4s3JPF//kIbr7rqOoZSTFxwJvN cUAsy2homzocX3PCXp+PgeSaQbe4lNH09Tangjleyqr4qgbVqHFbNdy9vCBzbvM+ aCiPOJi3d4dE5PveKue/dcGfu8K78luE6FAR02eRB8menAK6vrsZa8m3iwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGfDrPkpoiM48rOAGAzIUttHearQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2NhNDgx NS0wZTAwLTQ5YmYtODhmNS1jYWNhOGI4MGM5MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2E0ODE1 LTBlMDAtNDliZi04OGY1LWNhY2E4YjgwYzkxYy8xL1o4T3MtU21pSXpqeXM0QVlE TWhTMjBkNXF0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwSv0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCGTDANBgkqhkiG9w0BAQsFAAOCAQEAcMvV2Cwa72cVTes8AY/KiKhJWU3JuxZa epNnNGl8ltrPRyDKwJJjjHDGQQ+yDGLccLmdrRizlsryA711/gK4qnhFgQUUH/om a2xYcf322ezBlmJ7EXdxkdDadudEnZfS0+VnSj8A2lu9txJjjf8YImAcjMPf4vpq SxK8O79GW+mPmxayQf/q8KC46lx3IictPH8J7PqqGXd+zS5U3S0E0mdQWnhrdpmr mJBheqMpYVMXz8h/xOM3dwtoFgkakgWwz/Xbrhd5EcdznKvTBFRAVpnyH71bC6A8 RDPynR2K+AfSq0782sWV801bd9QAbMrnyhMs/Fqnoh8LJnDWkWw28g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:56 2026 by rpki-client