This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer (raw, json) Hash identifier: GTRj1T+WEK/EauKZK6I60WHgg97tGXnD+yyDRm8x1ek= Subject key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3749B322F8E97D2CAFE0BA0E23AF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41175 AS: 42595 AS: 49419 AS: 205788 IP: 45.80.56.0/22 IP: 45.83.60.0/22 IP: 45.93.240.0/22 IP: 45.137.208.0/22 IP: 81.201.208.0/20 IP: 84.19.128.0/19 IP: 91.192.252.0/22 IP: 91.223.51.0/24 IP: 91.224.36.0/23 IP: 185.56.212.0/22 IP: 185.57.168.0/22 IP: 185.114.104.0/22 IP: 185.224.56.0/22 IP: 188.65.152.0/21 IP: 193.41.118.0/23 IP: 193.138.74.0/24 IP: 193.254.192.0/23 IP: 195.78.36.0/23 IP: 2a00:e900::/29 IP: 2a01:4400::/32 IP: 2a02:5120::/32 IP: 2a0b:fd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:74:9b:32:2f:8e:97:d2:ca:fe:0b:a0:e2:3a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfeace714c29568ef197007b141d12758cc415d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:64:a7:a3:71:0c:09:5e:c7:d4:99:d0:5f:df: 33:6e:a2:20:44:63:e4:98:da:3c:70:85:30:01:14: 8b:77:f2:1d:0b:48:12:7c:dd:6f:bd:a2:8c:57:7c: ba:2d:6c:86:b8:42:2c:04:f3:ae:00:38:70:44:9c: 4d:e4:29:8f:07:8a:95:19:c0:85:80:58:c6:4c:0c: 2f:a8:aa:f1:97:8a:d1:cf:cb:b8:37:81:a1:62:76: a6:c0:0a:fe:ba:de:14:b8:af:10:86:3f:12:e2:2e: 5c:e2:51:b8:64:bb:4c:e4:13:22:99:0f:b6:72:6d: a7:d1:25:1b:2b:2f:a5:e5:3e:70:35:bb:c0:50:6f: ff:7b:13:a4:55:a7:a9:5a:0b:26:b5:b7:ca:38:01: fd:21:82:a4:59:2c:f8:4a:c9:fd:2e:2e:8d:cd:6a: 8c:8c:31:f6:70:44:c6:a3:fc:20:48:28:dc:bc:bd: 2b:a2:50:47:75:57:4f:dd:9d:18:d7:93:f4:70:9f: cc:fc:48:1d:50:c9:7d:65:92:70:43:69:12:75:8e: 3c:f3:4f:77:b3:cb:fa:42:c9:7a:85:2a:f9:1b:3a: ef:12:2c:b8:9d:1e:ae:d3:0c:b4:c3:f2:7f:12:16: 8f:58:13:74:8b:da:c9:4d:f7:7d:ff:fd:da:bc:3e: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.56.0/22 45.83.60.0/22 45.93.240.0/22 45.137.208.0/22 81.201.208.0/20 84.19.128.0/19 91.192.252.0/22 91.223.51.0/24 91.224.36.0/23 185.56.212.0/22 185.57.168.0/22 185.114.104.0/22 185.224.56.0/22 188.65.152.0/21 193.41.118.0/23 193.138.74.0/24 193.254.192.0/23 195.78.36.0/23 IPv6: 2a00:e900::/29 2a01:4400::/32 2a02:5120::/32 2a0b:fd80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41175 42595 49419 205788 Signature Algorithm: sha256WithRSAEncryption 05:f8:0d:40:b8:db:be:a4:c4:71:c0:92:91:df:52:4c:88:b7: 3f:93:cb:16:92:dc:4d:c4:79:4d:77:35:db:06:28:f2:53:de: 14:40:ff:67:c4:00:ff:ac:4e:df:4a:b7:d6:ee:4e:d9:81:93: 5d:da:bc:6a:bc:5f:5a:c0:8c:1b:02:20:2e:46:bc:c0:d7:4b: ce:44:77:78:00:33:58:2d:26:96:8f:72:92:67:9d:61:ea:70: ee:28:5b:47:94:b1:3c:8d:55:44:cd:49:e8:00:7e:93:51:97: 59:56:01:16:7b:a3:fe:47:9b:6f:6d:d8:03:57:57:e3:aa:29: de:18:f3:5c:7e:fb:3e:4c:16:96:53:7e:e8:0b:ee:1e:41:da: 70:47:c7:77:f4:b6:f6:bb:41:88:eb:e6:2e:1d:67:8e:7e:b1: 61:4f:74:97:c3:9d:2a:b9:9a:46:21:fc:70:a8:92:11:dd:de: b1:73:61:dc:0e:b0:98:25:39:55:00:02:77:f9:a9:e2:be:a9: 89:02:dc:c5:ad:9f:24:59:f7:b2:66:e8:a4:e5:4f:ee:3f:34: e6:a0:7e:3c:6d:de:6e:f5:44:8e:5d:12:c9:b2:4b:ee:81:a8: c9:5e:92:26:39:da:ab:bc:54:3e:c0:a6:70:5e:95:6c:c1:0e: eb:f8:3b:1f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgISAZt7o3SbMi+Ol9LK/gug4jr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmVhY2U3MTRjMjk1NjhlZjE5NzAwN2IxNDFkMTI3NThjYzQxNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWSno3EMCV7H1JnQX98zbqIgRGPk mNo8cIUwARSLd/IdC0gSfN1vvaKMV3y6LWyGuEIsBPOuADhwRJxN5CmPB4qVGcCF gFjGTAwvqKrxl4rRz8u4N4GhYnamwAr+ut4UuK8Qhj8S4i5c4lG4ZLtM5BMimQ+2 cm2n0SUbKy+l5T5wNbvAUG//exOkVaepWgsmtbfKOAH9IYKkWSz4Ssn9Li6NzWqM jDH2cETGo/wgSCjcvL0rolBHdVdP3Z0Y15P0cJ/M/EgdUMl9ZZJwQ2kSdY488093 s8v6Qsl6hSr5GzrvEiy4nR6u0wy0w/J/EhaPWBN0i9rJTfd9//3avD43dwIDAQAB o4IDPDCCAzgwHQYDVR0OBBYEFM/qznFMKVaO8ZcAexQdEnWMxBXVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2ZjMWJl Zi1lNzJiLTRhNDUtOTQ2My04ZmQzOTRiNTM1N2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvZmMxYmVm LWU3MmItNGE0NS05NDYzLThmZDM5NGI1MzU3Yy8xL3otck9jVXdwVm83eGx3QjdG QjBTZFl6RUZkVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGrBggrBgEF BQcBBwEB/wSBmzCBmDByBAIAATBsAwQCLVA4AwQCLVM8AwQCLV3wAwQCLYnQAwQE UcnQAwQFVBOAAwQCW8D8AwQAW98zAwQBW+AkAwQCuTjUAwQCuTmoAwQCuXJoAwQC ueA4AwQDvEGYAwQBwSl2AwQAwYpKAwQBwf7AAwQBw04kMCIEAgACMBwDBQMqAOkA AwUAKgFEAAMFACoCUSADBQMqC/2AMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwCg 1wIDAKZjAgMAwQsCAwMj3DANBgkqhkiG9w0BAQsFAAOCAQEABfgNQLjbvqTEccCS kd9STIi3P5PLFpLcTcR5TXc12wYo8lPeFED/Z8QA/6xO30q31u5O2YGTXdq8arxf WsCMGwIgLka8wNdLzkR3eAAzWC0mlo9ykmedYepw7ihbR5SxPI1VRM1J6AB+k1GX WVYBFnuj/kebb23YA1dX46op3hjzXH77PkwWllN+6AvuHkHacEfHd/S29rtBiOvm Lh1njn6xYU90l8OdKrmaRiH8cKiSEd3esXNh3A6wmCU5VQACd/mp4r6piQLcxa2f JFn3smbopOVP7j805qB+PG3ebvVEjl0SybJL7oGoyV6SJjnaq7xUPsCmcF6VbMEO 6/g7Hw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:38 2026 by rpki-client