This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer File: czHb7QiXzOhcFINxtHzIB4Ll5ys.cer (raw, json) Hash identifier: xFv0qcEsv1BWLJY2Q8ieMElbwpz9ot9my8ftWMvafIA= Subject key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59CC08053B704747C446724E14A6DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 93.93.203.0/24 IP: 94.127.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:cc:08:05:3b:70:47:47:c4:46:72:4e:14:a6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7331dbed0897cce85c148371b47cc80782e5e72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:a7:c4:0a:63:56:fa:c7:a6:ea:47:46:50: be:da:77:d4:67:bd:dd:8d:28:59:99:26:16:c2:f5: ca:2e:2b:95:04:8f:03:d6:1b:4e:d9:bf:2d:bd:7d: da:85:f3:8e:33:7a:40:59:eb:1f:6c:53:d1:7d:b2: 63:bc:d5:8e:f2:09:6b:6d:d7:04:81:e0:06:94:93: 27:94:1b:e6:4e:0b:cb:91:81:e4:41:68:16:36:c9: 0f:7e:93:10:c2:da:50:6b:bf:41:29:76:f6:61:c3: cd:6f:9d:35:42:4e:6c:fd:a6:44:62:9c:1d:f3:9c: 62:00:f6:e2:67:fa:b1:b6:f7:89:b3:62:54:71:da: 82:2b:fe:5f:1e:bb:98:0c:5f:5f:6f:8b:b3:08:b2: da:83:cb:22:f2:95:8f:ed:2e:53:f0:f7:86:48:44: e8:33:a6:cb:37:4f:22:3b:81:35:34:8f:43:74:ad: 13:3d:73:41:ac:2d:33:b7:5f:90:de:20:c0:79:6d: af:c0:75:0e:55:e3:90:f1:0c:e0:c2:0b:92:0a:03: 43:4a:d3:74:00:9a:b6:2d:67:27:73:04:db:b6:34: af:aa:55:f9:68:1a:27:c6:28:03:69:f2:f6:df:a7: 55:c5:94:94:5a:77:ea:a4:0f:9f:9f:53:a7:37:0a: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.203.0/24 94.127.112.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:75:b1:c0:8b:ce:b4:0f:34:f3:a4:b5:9d:cd:05:77:04:12: 05:f4:92:30:51:f5:8f:a6:2c:ad:ca:bc:5b:e4:3f:36:e9:a3: 75:45:72:99:23:d0:05:39:8e:6d:ea:f5:94:18:f4:62:55:7f: 08:0d:e4:64:38:a0:2d:06:8e:fd:09:d4:f2:27:0e:ce:d6:0e: 12:dc:41:6a:73:c6:74:49:47:64:80:43:1b:e0:9a:01:fa:35: b0:de:e8:0e:ca:1d:b0:f5:27:ef:11:7c:bc:4c:07:12:72:12: d8:45:d6:5b:4f:cc:e9:1a:34:30:38:86:ce:56:2e:2f:50:da: 7b:22:b1:e7:e8:47:7c:b2:f9:5d:db:59:60:29:75:0a:03:5b: e1:9b:05:8d:65:39:92:65:94:d8:18:8e:4f:a5:0e:7d:f2:52: 2b:e1:b3:5e:92:ba:0e:1d:c5:e0:a8:a8:83:2f:ea:9e:94:e0: a0:ae:de:52:ec:27:b8:fa:57:23:25:49:5a:5b:1e:be:7e:17: d9:27:5c:a7:a0:cd:17:9c:b7:d3:7a:2d:1d:62:40:0b:c7:13: 4c:23:4e:5b:a2:82:49:85:f1:51:4f:7b:49:72:ae:07:cc:be: b9:79:7a:0c:c3:f0:f8:4f:e1:eb:c2:63:99:db:32:6b:af:0b: 0f:53:03:89 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6WcwIBTtwR0fERnJOFKbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzMxZGJlZDA4OTdjY2U4NWMxNDgzNzFiNDdjYzgwNzgyZTVlNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEOnxApjVvrHpupHRlC+2nfUZ73d jShZmSYWwvXKLiuVBI8D1htO2b8tvX3ahfOOM3pAWesfbFPRfbJjvNWO8glrbdcE geAGlJMnlBvmTgvLkYHkQWgWNskPfpMQwtpQa79BKXb2YcPNb501Qk5s/aZEYpwd 85xiAPbiZ/qxtveJs2JUcdqCK/5fHruYDF9fb4uzCLLag8si8pWP7S5T8PeGSETo M6bLN08iO4E1NI9DdK0TPXNBrC0zt1+Q3iDAeW2vwHUOVeOQ8QzgwguSCgNDStN0 AJq2LWcncwTbtjSvqlX5aBonxigDafL236dVxZSUWnfqpA+fn1OnNwqGhQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHMx2+0Il8zoXBSDcbR8yAeC5ecrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2M1ZjBj My0yMmU1LTQ4MDEtOTBmYi0wNDY1MDcyZTQxYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYzVmMGMz LTIyZTUtNDgwMS05MGZiLTA0NjUwNzJlNDFhMy8xL2N6SGI3UWlYek9oY0ZJTnh0 SHpJQjRMbDV5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAXV3LAwQDXn9wMA0GCSqGSIb3DQEBCwUAA4IB AQCcdbHAi860DzTzpLWdzQV3BBIF9JIwUfWPpiytyrxb5D826aN1RXKZI9AFOY5t 6vWUGPRiVX8IDeRkOKAtBo79CdTyJw7O1g4S3EFqc8Z0SUdkgEMb4JoB+jWw3ugO yh2w9SfvEXy8TAcSchLYRdZbT8zpGjQwOIbOVi4vUNp7IrHn6Ed8svld21lgKXUK A1vhmwWNZTmSZZTYGI5PpQ598lIr4bNekroOHcXgqKiDL+qelOCgrt5S7Ce4+lcj JUlaWx6+fhfZJ1ynoM0XnLfTei0dYkALxxNMI05booJJhfFRT3tJcq4HzL65eXoM w/D4T+HrwmOZ2zJrrwsPUwOJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:52 2026 by rpki-client