This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer (raw, json) Hash identifier: K080DbMDE+Pb8uOOxAU0yw3Y/GWIp2FaLHYutasC80o= Subject key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84AA0124D56402AF0FC76C46E02661 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.230.244.0/23 IP: 91.233.105.0/24 IP: 194.33.112.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:aa:01:24:d5:64:02:af:0f:c7:6c:46:e0:26:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d9656d5867b43ce506445290bba705722260586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:50:7a:c0:21:68:ea:6a:fc:d7:6f:9c:71: 78:10:8f:a3:99:0d:62:63:79:d5:4d:9d:22:fb:71: a6:6d:69:58:7d:31:96:c3:a6:1b:69:4a:d5:53:8e: 5a:a9:d6:f1:c7:26:75:f2:d7:f6:69:bd:37:e7:24: e2:97:54:1d:d1:26:cb:bf:c6:41:90:c6:51:f3:53: 03:58:e7:b0:16:b6:d3:04:cb:32:c5:62:f5:1b:a6: 45:83:8a:7e:f2:a7:1d:cb:f7:e1:58:e2:53:4e:5b: 74:57:06:94:a6:4d:ac:3a:8a:ee:53:57:a0:25:9b: c5:ba:ae:85:b2:40:d8:fc:c7:b5:b5:21:99:c4:d5: 8f:56:ea:f3:41:6b:87:07:64:d8:94:34:5c:0b:3f: b4:ed:6b:d5:b9:9b:25:03:62:ff:0f:3b:4a:43:24: e3:2e:63:ae:ed:fd:06:9d:c2:85:d3:dc:b7:81:2f: 03:65:1e:b6:5b:53:bd:0d:44:ce:85:c0:4b:5e:28: c9:0f:b5:be:ba:cd:81:26:21:2e:0e:1f:eb:0e:7d: 14:80:f1:5d:64:7b:5a:74:24:cf:4e:a9:74:95:fb: 62:b1:6b:6c:03:ae:d7:54:d2:5a:fb:8f:78:68:30: 8b:20:1f:0e:6b:24:af:5b:53:c1:85:53:9c:fa:05: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.244.0/23 91.233.105.0/24 194.33.112.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:c7:f9:1f:e7:90:af:fd:b0:fd:78:4c:48:ea:ca:a4:3c:3c: 2a:b1:f4:2c:e9:63:72:16:f1:e4:f7:b5:c2:e2:6b:ef:ee:9b: 2b:29:4a:51:37:ac:04:ac:32:fd:95:8c:96:10:69:45:b4:7b: 1b:bd:4f:80:5a:06:61:7b:9a:2a:f4:da:f5:e8:cb:a9:d6:50: bd:47:d7:7b:27:03:ac:e5:a9:ca:25:2c:ea:d5:98:85:c6:e9: 68:96:a5:38:c6:b3:9c:d2:af:d7:36:d0:2d:07:06:d0:08:75: 08:0b:96:fb:75:e0:69:af:3c:45:f4:bd:a0:f0:65:14:4d:b5: 4d:01:56:d6:e2:ed:36:7a:b9:4f:35:a8:86:93:0c:c4:bc:6e: fb:bf:ee:75:55:7e:15:f1:f1:9c:be:b7:f5:15:2d:2c:26:f0: 06:4b:6e:b2:ed:87:d5:5f:57:0c:27:c8:a3:8f:6e:c5:26:2a: 11:ff:51:95:41:44:1c:5c:b5:c2:6c:79:e8:fe:49:e7:56:41: 83:e7:b5:d5:45:d0:43:bf:53:fe:9c:f6:c7:4d:24:b7:77:cc: 19:7a:2d:78:90:e1:3a:b7:63:22:d8:10:22:2f:36:84:b8:63: 58:f0:73:67:29:c4:8e:04:fc:c0:73:95:3f:f1:43:cb:7f:fe: a0:a3:e2:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt/hKoBJNVkAq8Px2xG4CZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDk2NTZkNTg2N2I0M2NlNTA2NDQ1MjkwYmJhNzA1NzIyMjYwNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO9QesAhaOpq/NdvnHF4EI+jmQ1i Y3nVTZ0i+3GmbWlYfTGWw6YbaUrVU45aqdbxxyZ18tf2ab035yTil1Qd0SbLv8ZB kMZR81MDWOewFrbTBMsyxWL1G6ZFg4p+8qcdy/fhWOJTTlt0VwaUpk2sOoruU1eg JZvFuq6FskDY/Me1tSGZxNWPVurzQWuHB2TYlDRcCz+07WvVuZslA2L/DztKQyTj LmOu7f0GncKF09y3gS8DZR62W1O9DUTOhcBLXijJD7W+us2BJiEuDh/rDn0UgPFd ZHtadCTPTql0lftisWtsA67XVNJa+494aDCLIB8OaySvW1PBhVOc+gUJ/QIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFH2WVtWGe0POUGRFKQu6cFciJgWGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2IwZjMx ZC1iNGJmLTQ1MGQtOWFjZC0wYTZiNTM2YzQzOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvYjBmMzFk LWI0YmYtNDUwZC05YWNkLTBhNmI1MzZjNDM5NC8xL2ZaWlcxWVo3UTg1UVpFVXBD N3B3VnlJbUJZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBW+b0AwQAW+lpAwQBwiFwMA0GCSqGSIb3DQEB CwUAA4IBAQB/x/kf55Cv/bD9eExI6sqkPDwqsfQs6WNyFvHk97XC4mvv7psrKUpR N6wErDL9lYyWEGlFtHsbvU+AWgZhe5oq9Nr16Mup1lC9R9d7JwOs5anKJSzq1ZiF xulolqU4xrOc0q/XNtAtBwbQCHUIC5b7deBprzxF9L2g8GUUTbVNAVbW4u02erlP NaiGkwzEvG77v+51VX4V8fGcvrf1FS0sJvAGS26y7YfVX1cMJ8ijj27FJioR/1GV QUQcXLXCbHno/knnVkGD57XVRdBDv1P+nPbHTSS3d8wZei14kOE6t2Mi2BAiLzaE uGNY8HNnKcSOBPzAc5U/8UPLf/6go+I9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:11 2026 by rpki-client