This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer (raw, json) Hash identifier: I2W9Xx1dfv1B3GV2r+NtJ0ZCjmsSyK//bAt0dOxHazo= Subject key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7062A0AE6F557F10AF86DA1C25F09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31742 IP: 45.14.228.0/22 IP: 46.255.248.0/21 IP: 83.137.224.0/21 IP: 93.191.24.0/21 IP: 185.119.20.0/22 IP: 212.85.252.0/22 IP: 2a00:d300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:06:2a:0a:e6:f5:57:f1:0a:f8:6d:a1:c2:5f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf66224bcfb8b82deaabac8c4ca250371b974611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:9c:11:8a:86:e8:83:84:5d:86:53:61:2e: a1:54:da:fa:1f:d6:de:b1:80:5a:57:10:45:d4:7d: 73:91:99:41:85:18:28:96:26:10:3e:7f:be:22:a4: 61:51:d0:eb:46:54:50:be:21:1c:7c:80:aa:c8:85: 6b:56:0b:81:fe:5e:d4:04:68:c7:a5:24:1e:17:83: 31:00:94:96:a8:b2:93:76:5f:7e:0c:b5:a4:2c:4b: f4:22:16:76:b6:66:05:f9:f4:0d:66:87:ac:c5:11: 3f:21:99:4e:56:78:9b:1a:7b:18:21:aa:68:e1:98: 26:f3:63:36:60:29:e4:4c:a4:cd:61:74:26:dd:fb: 8f:5a:89:91:28:9d:b5:30:c2:2e:f5:58:98:df:45: 8f:2b:6a:07:c3:18:05:35:75:f6:e9:e2:f2:d4:fe: e5:a4:cf:95:2e:04:28:d8:18:19:08:76:50:3c:e5: 2c:b6:5d:17:e6:be:80:b8:cc:3b:19:e1:6a:14:29: 7e:7f:5c:68:7b:9c:52:dc:5d:31:fb:36:92:ab:e1: b9:2f:7e:13:a6:01:97:08:ad:d3:d5:c2:c1:a8:9b: 9a:b3:56:c1:2a:ae:2e:fd:b2:9a:80:00:e7:57:ef: 94:8d:8d:89:eb:78:ca:3a:7d:54:6d:f7:2a:6f:9c: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.228.0/22 46.255.248.0/21 83.137.224.0/21 93.191.24.0/21 185.119.20.0/22 212.85.252.0/22 IPv6: 2a00:d300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31742 Signature Algorithm: sha256WithRSAEncryption 3b:d1:46:b1:45:f2:65:5a:cd:6d:8d:2e:fe:92:42:e7:14:c2: 59:ff:61:40:32:ec:99:17:cb:4a:49:c5:55:ea:ff:e1:da:1e: b7:d9:5f:18:0f:2c:80:de:46:77:72:9d:4a:8e:2d:f0:0e:dc: 6a:45:fc:52:a4:d6:5c:43:d6:ec:d6:59:69:cc:ef:de:6b:51: 5e:81:a1:7f:c8:15:ca:c0:c0:c9:98:f4:70:9a:07:af:a6:b0: 2e:7b:26:46:23:bd:b1:a0:6a:55:bf:84:ae:ce:65:a0:08:1a: ab:2e:0c:ed:2d:aa:86:30:ca:30:b7:1f:41:9c:79:8a:52:67: a3:63:fc:89:02:ff:a3:d5:4c:2a:d3:55:a6:8d:ea:76:11:3d: dd:ec:da:2a:aa:a1:4d:7e:eb:f8:69:c7:0d:3f:85:6e:13:06: 1a:bf:83:d1:14:64:d2:12:e2:78:95:f6:d3:ba:2b:e4:a7:06: 47:5a:2c:de:4e:ce:92:df:88:ea:42:eb:25:79:70:f0:ee:8d: 8c:7d:41:72:5c:02:4a:b0:fd:a1:3d:1d:9c:70:28:f6:25:ae: 69:c7:38:7c:8f:c0:fe:f1:be:7b:b2:5e:34:50:25:b9:43:5e: 34:b6:f8:1e:3a:c0:d0:37:20:a1:fe:82:64:6b:d2:f1:75:3d: 9f:c5:33:c7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt3xwYqCub1V/EK+G2hwl8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjY2MjI0YmNmYjhiODJkZWFhYmFjOGM0Y2EyNTAzNzFiOTc0NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXOcEYqG6IOEXYZTYS6hVNr6H9be sYBaVxBF1H1zkZlBhRgoliYQPn++IqRhUdDrRlRQviEcfICqyIVrVguB/l7UBGjH pSQeF4MxAJSWqLKTdl9+DLWkLEv0IhZ2tmYF+fQNZoesxRE/IZlOVnibGnsYIapo 4Zgm82M2YCnkTKTNYXQm3fuPWomRKJ21MMIu9ViY30WPK2oHwxgFNXX26eLy1P7l pM+VLgQo2BgZCHZQPOUstl0X5r6AuMw7GeFqFCl+f1xoe5xS3F0x+zaSq+G5L34T pgGXCK3T1cLBqJuas1bBKq4u/bKagADnV++UjY2J63jKOn1Ubfcqb5yRcwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFM9mIkvPuLgt6qusjEyiUDcbl0YRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzE5NmI3 MS01ODdlLTQwOTktYmRiMi1iOTU0YzUwZmRiYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMTk2Yjcx LTU4N2UtNDA5OS1iZGIyLWI5NTRjNTBmZGJiMC8xL3oyWWlTOC00dUMzcXE2eU1U S0pRTnh1WFJoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLQ7kAwQDLv/4AwQDU4ngAwQDXb8YAwQCuXcU AwQC1FX8MA0EAgACMAcDBQAqANMAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnv+ MA0GCSqGSIb3DQEBCwUAA4IBAQA70UaxRfJlWs1tjS7+kkLnFMJZ/2FAMuyZF8tK ScVV6v/h2h632V8YDyyA3kZ3cp1Kji3wDtxqRfxSpNZcQ9bs1llpzO/ea1FegaF/ yBXKwMDJmPRwmgevprAueyZGI72xoGpVv4SuzmWgCBqrLgztLaqGMMowtx9BnHmK UmejY/yJAv+j1Uwq01Wmjep2ET3d7NoqqqFNfuv4accNP4VuEwYav4PRFGTSEuJ4 lfbTuivkpwZHWizeTs6S34jqQusleXDw7o2MfUFyXAJKsP2hPR2ccCj2Ja5pxzh8 j8D+8b57sl40UCW5Q140tvgeOsDQNyCh/oJka9LxdT2fxTPH -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:31 2026 by rpki-client