This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer File: dzvnzzJSpol11eIkWJjAPE-2Ddo.cer (raw, json) Hash identifier: uJgP4ZM8cL9J2jg0TkvM3IXHgBzK3+roqrrJI+tZ0bQ= Subject key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0BA5EC868D9A98E963C2C604F7B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51142 IP: 185.189.208.0/22 IP: 2a0b:f580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:a5:ec:86:8d:9a:98:e9:63:c2:c6:04:f7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=773be7cf3252a68975d5e2245898c03c4fb60dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:b1:9e:30:7e:5b:9a:8c:47:32:29:52:eb: bb:73:28:11:a4:1b:66:ef:a6:71:7f:f4:46:d5:2f: c3:3e:e0:ad:1f:36:27:93:af:18:6f:e9:f9:83:71: a8:23:51:19:e5:93:46:ae:58:9a:91:ae:38:9e:8c: 6a:97:26:a7:94:40:6d:07:c1:49:44:89:5f:e0:9a: 36:58:e8:80:32:c2:7f:f4:3e:73:91:ff:bc:5b:42: c0:95:cc:79:c6:6d:56:55:9c:b9:04:1d:07:c2:80: f1:e3:ef:8e:d2:b4:eb:c5:4e:5f:20:f7:11:7e:4a: ba:21:74:68:91:84:83:5c:6b:07:ae:2f:68:1f:62: bc:ae:7d:33:8e:99:cd:a9:e1:39:39:92:16:e6:4b: 76:29:8e:75:96:ff:11:05:ee:46:0d:95:96:92:c5: 6d:75:08:e3:38:fc:3b:0a:f2:3f:8e:63:ee:bb:0c: 6d:8f:0d:b0:db:b8:44:b3:34:4f:ba:25:bb:80:7b: 27:ae:dd:23:5d:b2:71:13:ca:72:ba:46:3c:1c:1d: a4:4c:63:2e:57:28:6c:ea:b5:56:72:c8:9e:0f:fe: bc:5a:0e:d4:59:21:eb:f8:eb:9f:ab:e9:9b:32:83: 40:58:b7:a5:c2:78:98:da:c0:b5:19:37:7f:b5:79: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.208.0/22 IPv6: 2a0b:f580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51142 Signature Algorithm: sha256WithRSAEncryption 11:eb:85:46:c3:c3:04:b2:3d:b6:b2:76:4e:28:ab:3e:57:4a: a8:5c:50:2b:f2:ea:39:c9:fe:74:1f:e3:88:39:ab:ec:7f:d3: 66:e5:08:f4:09:d7:fe:be:c2:4e:02:49:bd:3a:80:4f:1d:c3: fa:16:e9:69:64:ea:15:29:47:b7:64:4c:90:fa:44:96:1e:33: 79:73:71:da:53:9f:7e:af:72:9d:ba:26:32:2e:8c:dd:23:f6: 2f:f3:75:80:9c:5c:ec:ba:25:f2:ed:57:28:36:80:d5:c1:3a: b3:1f:35:c7:c8:14:89:e5:b1:e2:79:47:25:d1:a6:ff:c9:5b: 70:89:d0:e1:de:bc:f6:f2:c8:88:7d:db:6d:e0:9a:6d:ba:92: e0:3a:9b:dc:27:b0:cf:fa:53:78:ac:55:71:de:2a:ff:81:22: 87:a9:95:06:1e:7c:82:3f:e5:e5:75:9a:e4:a4:fd:68:13:61: dd:d5:6a:b4:de:21:a9:c3:f9:26:e8:ff:0c:39:24:05:99:1b: dd:39:77:04:9a:6a:2e:32:49:38:f7:61:81:7e:18:3a:0e:83: 35:73:c6:01:91:0e:46:03:36:f0:e7:72:8c:81:61:ee:7e:81: 1d:74:58:25:4e:05:b0:cd:c0:7d:93:20:f4:06:68:f7:b8:be: bd:e9:f7:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87gul7IaNmpjpY8LGBPe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzNiZTdjZjMyNTJhNjg5NzVkNWUyMjQ1ODk4YzAzYzRmYjYwZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaWxnjB+W5qMRzIpUuu7cygRpBtm 76Zxf/RG1S/DPuCtHzYnk68Yb+n5g3GoI1EZ5ZNGrliaka44noxqlyanlEBtB8FJ RIlf4Jo2WOiAMsJ/9D5zkf+8W0LAlcx5xm1WVZy5BB0HwoDx4++O0rTrxU5fIPcR fkq6IXRokYSDXGsHri9oH2K8rn0zjpnNqeE5OZIW5kt2KY51lv8RBe5GDZWWksVt dQjjOPw7CvI/jmPuuwxtjw2w27hEszRPuiW7gHsnrt0jXbJxE8pyukY8HB2kTGMu Vyhs6rVWcsieD/68Wg7UWSHr+Oufq+mbMoNAWLelwniY2sC1GTd/tXlePwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHc7588yUqaJddXiJFiYwDxPtg3aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2NiYTBk My01OTQ0LTQ3NDctODgzNS1iZWQwNTY3ZWZhNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvY2JhMGQz LTU5NDQtNDc0Ny04ODM1LWJlZDA1NjdlZmE2Yi8xL2R6dm56ekpTcG9sMTFlSWtX SmpBUEUtMkRkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCub3QMA0EAgACMAcDBQMqC/WAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDHxjANBgkqhkiG9w0BAQsFAAOCAQEAEeuFRsPDBLI9 trJ2TiirPldKqFxQK/LqOcn+dB/jiDmr7H/TZuUI9AnX/r7CTgJJvTqATx3D+hbp aWTqFSlHt2RMkPpElh4zeXNx2lOffq9ynbomMi6M3SP2L/N1gJxc7Lol8u1XKDaA 1cE6sx81x8gUieWx4nlHJdGm/8lbcInQ4d689vLIiH3bbeCabbqS4Dqb3Cewz/pT eKxVcd4q/4Eih6mVBh58gj/l5XWa5KT9aBNh3dVqtN4hqcP5Juj/DDkkBZkb3Tl3 BJpqLjJJOPdhgX4YOg6DNXPGAZEORgM28OdyjIFh7n6BHXRYJU4FsM3AfZMg9AZo 97i+ven3VA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:05:07 2026 by rpki-client