This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer File: _nzo-_uEec-5drRDzDx84vcDq34.cer (raw, json) Hash identifier: bbChNo9ifoddQWWhbirDgrJwkXES5FIrWbXfqAIPgQg= Subject key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A29BB7DCA583700988AABD34A43091 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.247.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9b:b7:dc:a5:83:70:09:88:aa:bd:34:a4:30:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:92:06:f3:f3:4f:07:a5:7e:e8:69:e7:3b:3e: 6d:64:d8:e5:6e:43:50:08:17:e1:2e:ce:9a:50:68: fa:53:3a:9b:95:11:15:a7:2c:34:f0:5d:d2:7a:d6: 7d:b4:ad:9c:69:9f:a7:1c:2e:58:13:74:70:17:5a: 55:00:36:6d:9d:95:2c:d7:07:06:9a:c9:6f:69:77: 95:17:8d:d7:9d:a5:dd:dc:e5:41:70:a6:0f:1f:e9: 70:f5:64:d6:33:62:71:28:d3:d9:b1:a3:28:14:6a: 2c:b2:9f:90:62:b8:f1:3b:5a:d6:e3:2b:f1:7e:be: bd:4b:8c:29:8a:66:2c:60:b8:e1:36:9f:4a:a9:44: 62:d3:c3:be:e7:36:fb:06:d4:b4:e7:05:23:50:d1: b5:76:44:5f:71:92:5d:99:24:2f:51:77:1a:4b:ba: 43:81:9e:5c:d5:59:2c:06:7f:f7:39:5c:39:81:bd: cd:1f:45:4b:0f:39:31:b4:78:b7:4b:5d:5f:71:bb: 68:22:da:34:ac:09:da:11:cf:ac:40:e6:b5:bf:94: 48:96:ae:d3:3d:92:b4:e4:64:08:af:7b:5e:4a:de: 37:b8:1c:32:b1:8e:78:a3:98:89:9f:32:06:19:6c: c1:c0:23:a1:13:9c:29:28:90:34:2f:07:98:df:85: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.96.0/22 Signature Algorithm: sha256WithRSAEncryption 55:83:65:97:aa:9d:00:94:d5:9d:67:61:5b:50:cc:2e:b9:5e: 60:35:e9:43:3d:09:fd:d7:9a:c0:4a:58:94:14:5d:96:8d:7e: b3:9c:84:21:ad:ff:dd:b8:94:95:c0:2c:be:bf:b8:c4:44:9b: 09:b0:aa:b8:2f:ed:b3:64:c3:4a:2e:24:75:87:5e:1e:23:9e: 7e:85:82:ad:52:c6:ab:9a:1a:07:4e:06:af:77:3c:6c:5e:d3: 8b:9b:03:c6:71:0b:a9:22:b0:a3:b9:2b:57:53:b7:4a:c7:4d: f8:80:1d:59:a0:39:76:88:2b:03:58:de:14:3f:d3:fa:da:78: 36:20:b7:2b:28:4e:6e:83:e9:26:c4:11:26:3d:6f:7b:cc:cd: dd:41:2d:5b:00:4e:2a:6d:63:2c:47:9b:99:41:78:91:b7:f1: 23:5e:4f:b1:17:42:e6:47:cb:37:b8:9c:7e:8b:f5:52:95:7c: 09:ea:ba:e4:f3:62:88:7c:df:a4:48:ed:e7:33:55:71:9b:20: b4:b3:62:5d:02:e0:c7:8e:d4:5d:35:b0:db:e0:88:79:e7:36: 8c:d3:aa:f3:79:8b:ae:70:83:e3:20:9e:79:05:4c:9b:24:f1: cf:7c:a9:d3:40:bc:8d:41:05:80:a2:ac:fa:5f:f0:c1:a2:51: 31:d9:62:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4opu33KWDcAmIqr00pDCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdjZThmYmZiODQ3OWNmYjk3NmI0NDNjYzNjN2NlMmY3MDNhYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JIG8/NPB6V+6GnnOz5tZNjlbkNQ CBfhLs6aUGj6UzqblREVpyw08F3SetZ9tK2caZ+nHC5YE3RwF1pVADZtnZUs1wcG mslvaXeVF43XnaXd3OVBcKYPH+lw9WTWM2JxKNPZsaMoFGossp+QYrjxO1rW4yvx fr69S4wpimYsYLjhNp9KqURi08O+5zb7BtS05wUjUNG1dkRfcZJdmSQvUXcaS7pD gZ5c1VksBn/3OVw5gb3NH0VLDzkxtHi3S11fcbtoIto0rAnaEc+sQOa1v5RIlq7T PZK05GQIr3teSt43uBwysY54o5iJnzIGGWzBwCOhE5wpKJA0LweY34Vc7QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFP586Pv7hHnPuXa0Q8w8fOL3A6t+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzkyNzYz OC1mZDQ3LTRlNTYtYmI5ZS1kNzkyMGFlNDQ5MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvOTI3NjM4 LWZkNDctNGU1Ni1iYjllLWQ3OTIwYWU0NDkyMC8xL19uem8tX3VFZWMtNWRyUkR6 RHg4NHZjRHEzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwfdgMA0GCSqGSIb3DQEBCwUAA4IBAQBVg2WX qp0AlNWdZ2FbUMwuuV5gNelDPQn915rASliUFF2WjX6znIQhrf/duJSVwCy+v7jE RJsJsKq4L+2zZMNKLiR1h14eI55+hYKtUsarmhoHTgavdzxsXtOLmwPGcQupIrCj uStXU7dKx034gB1ZoDl2iCsDWN4UP9P62ng2ILcrKE5ug+kmxBEmPW97zM3dQS1b AE4qbWMsR5uZQXiRt/EjXk+xF0LmR8s3uJx+i/VSlXwJ6rrk82KIfN+kSO3nM1Vx myC0s2JdAuDHjtRdNbDb4Ih55zaM06rzeYuucIPjIJ55BUybJPHPfKnTQLyNQQWA oqz6X/DBolEx2WKQ -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:27 2026 by rpki-client