This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer File: z1PAwqcKnguguGDSKQTbsOkrkgs.cer (raw, json) Hash identifier: IJhoWKD+3oHbDVdS2cXpe1yvEqko+CXEjgY7ex5ISvI= Subject key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37667242C3FE455D0B4D6BD3F57605 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.242.175.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:66:72:42:c3:fe:45:5d:0b:4d:6b:d3:f5:76:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:02:56:32:cc:c5:47:1e:28:41:d4:28:9b: 50:cd:40:b7:25:4f:ef:b9:80:7f:d8:63:c4:0e:0a: 8f:ce:97:3d:2c:2e:24:ea:aa:f3:1f:31:4b:19:ac: 0c:1c:ea:f4:76:ab:ed:f3:95:98:c3:bc:b9:e5:0a: 0a:52:2d:54:96:2c:72:95:81:98:66:ce:73:98:40: 51:97:64:6d:df:de:c1:e5:a0:c0:90:74:4e:7a:ec: 30:35:15:9f:23:c8:fc:96:13:e7:91:ea:48:06:4c: ca:94:3a:58:74:4a:e8:9c:7b:a1:74:ef:9b:8e:fe: 4d:db:c4:6f:fa:38:22:87:ac:d1:02:db:80:10:1e: ed:16:93:e6:fa:bf:16:54:d4:e0:d6:ff:b6:ef:34: e0:11:72:06:d3:14:05:a2:4d:d6:0b:54:cc:ec:4b: 0c:bc:b8:7e:26:13:af:aa:fc:e8:2a:45:ca:76:4b: a6:1b:01:78:d9:f2:6c:49:7c:5b:af:64:6c:6b:69: 9a:02:64:b3:9b:08:07:f8:e2:e4:3c:94:1a:9a:d1: 4e:1a:ae:82:a1:4a:e5:20:dc:cb:d7:fb:64:81:52: 98:c8:8a:a9:86:92:ce:10:53:8a:95:c8:d6:62:88: 93:54:fb:85:19:fa:6e:9f:f2:c0:b3:5b:ad:87:53: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.175.0/24 Signature Algorithm: sha256WithRSAEncryption 19:11:4a:e7:d8:c2:87:d8:b5:9c:3a:aa:5a:4e:55:2f:1e:5b: de:39:dc:91:e3:45:45:3c:04:97:b4:02:bd:04:ce:d3:bc:26: 0f:d2:35:4f:49:a8:7c:ae:c5:c9:5c:e8:a9:b5:8d:e5:1e:c1: 11:17:51:62:70:96:ae:27:6b:c5:6c:74:76:7b:9e:33:26:66: 31:24:fd:50:3c:09:37:2b:01:a3:95:df:58:c5:5d:7a:8c:06: ba:cb:68:c6:4a:0a:56:45:2e:ee:89:dc:d4:0a:2e:b8:75:e1: f9:84:a6:fb:3e:1e:f2:a2:e3:26:b9:9b:cd:0b:cb:a4:30:93: 8a:e6:22:e1:17:fa:6f:aa:8c:03:e2:e2:c3:d6:c4:e6:94:b8: bb:cd:e4:71:28:ce:aa:40:34:ee:47:99:3b:1c:bd:48:43:02: 87:33:c5:c8:40:c1:30:59:79:82:1b:e7:56:55:24:45:e8:a9: eb:83:ab:7f:9d:8d:fc:f7:aa:1d:a6:bb:ea:f9:a0:26:86:c0: 0f:73:c4:8a:45:32:35:73:1a:9f:1f:e2:c8:b2:da:b5:df:c5: 07:51:d3:3b:5a:5f:42:e4:34:6a:e3:f4:9c:ce:a4:e8:1b:c9: 2a:6d:32:51:41:e8:d5:3b:58:81:41:8d:3b:4b:9c:a5:01:73: 39:56:ba:bc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N2ZyQsP+RV0LTWvT9XYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjUzYzBjMmE3MGE5ZTBiYTBiODYwZDIyOTA0ZGJiMGU5MmI5MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SYCVjLMxUceKEHUKJtQzUC3JU/v uYB/2GPEDgqPzpc9LC4k6qrzHzFLGawMHOr0dqvt85WYw7y55QoKUi1UlixylYGY Zs5zmEBRl2Rt397B5aDAkHROeuwwNRWfI8j8lhPnkepIBkzKlDpYdEronHuhdO+b jv5N28Rv+jgih6zRAtuAEB7tFpPm+r8WVNTg1v+27zTgEXIG0xQFok3WC1TM7EsM vLh+JhOvqvzoKkXKdkumGwF42fJsSXxbr2Rsa2maAmSzmwgH+OLkPJQamtFOGq6C oUrlINzL1/tkgVKYyIqphpLOEFOKlcjWYoiTVPuFGfpun/LAs1uth1OSPQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFM9TwMKnCp4LoLhg0ikE27DpK5ILMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2JkYTdj Yy02NDVjLTQ4MjEtYWQyMi0zZTQ0ZmNhYzNiYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYmRhN2Nj LTY0NWMtNDgyMS1hZDIyLTNlNDRmY2FjM2JjNS8xL3oxUEF3cWNLbmd1Z3VHRFNL UVRic09rcmtncy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/KvMA0GCSqGSIb3DQEBCwUAA4IBAQAZEUrn 2MKH2LWcOqpaTlUvHlveOdyR40VFPASXtAK9BM7TvCYP0jVPSah8rsXJXOiptY3l HsERF1FicJauJ2vFbHR2e54zJmYxJP1QPAk3KwGjld9YxV16jAa6y2jGSgpWRS7u idzUCi64deH5hKb7Ph7youMmuZvNC8ukMJOK5iLhF/pvqowD4uLD1sTmlLi7zeRx KM6qQDTuR5k7HL1IQwKHM8XIQMEwWXmCG+dWVSRF6Knrg6t/nY3896odprvq+aAm hsAPc8SKRTI1cxqfH+LIstq138UHUdM7Wl9C5DRq4/SczqToG8kqbTJRQejVO1iB QY07S5ylAXM5Vrq8 -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:01 2026 by rpki-client