This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer File: z86tOQYl7boUCBCN9XzqRxYNcOU.cer (raw, json) Hash identifier: FaPO0788fot3Bt6MYhTEKwgZXfgvf3nLsZ2ktqhMV8Q= Subject key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8013F357673C02B9B310E7E6177592 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59538 AS: 198250 AS: 202888 IP: 185.0.34.0/24 IP: 194.180.196.0/24 IP: 2001:7f8:145::/48 IP: 2a0f:7800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:f3:57:67:3c:02:b9:b3:10:e7:e6:17:75:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfcead390625edba1408108df57cea47160d70e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:8b:4a:90:8e:2a:0e:0f:68:cb:c5:ae:89: 89:b7:27:fd:48:23:a3:c7:54:a3:9d:ce:27:17:76: 1c:3d:94:11:bf:d5:ca:8e:20:e9:f2:36:c2:1c:0a: 25:85:96:da:f6:a5:1b:9d:1d:9b:dc:be:d6:48:c3: 20:53:ba:56:05:87:74:cf:a2:03:6f:d5:4e:08:f7: d4:cc:25:24:85:7a:32:d2:9f:fe:a1:63:52:02:e5: 12:ed:3b:c1:c4:ff:04:03:75:36:22:8b:50:72:95: ef:e1:26:d8:71:fc:63:fa:55:b1:af:fb:43:10:87: da:f4:06:4c:00:ab:aa:8e:8f:65:92:29:c4:a0:21: 29:f1:9d:a5:0e:32:33:76:38:5c:02:39:0f:17:63: a4:53:fe:ca:77:8e:1f:16:84:cf:0f:50:d0:0c:8f: 1b:5c:6b:85:5b:91:38:b6:ff:87:04:88:34:db:44: c0:33:76:5a:b6:23:cb:c1:3f:52:a4:63:bd:03:48: 09:c3:ff:b1:e4:78:7d:61:ed:d4:1a:3c:0c:a0:65: 31:92:2f:b2:1c:d8:4c:fb:9e:b4:a9:93:50:ac:29: 79:b5:e2:7d:60:53:b2:d3:51:b5:90:bd:77:e1:b8: 3a:f0:b2:53:af:0b:df:49:1b:7a:c6:c8:c7:60:5a: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.0.34.0/24 194.180.196.0/24 IPv6: 2001:7f8:145::/48 2a0f:7800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59538 198250 202888 Signature Algorithm: sha256WithRSAEncryption 11:44:f7:c6:e7:83:57:cf:6f:0f:07:06:89:ac:1e:aa:6d:1e: 67:4a:a5:d1:e4:f2:4d:07:16:92:2d:03:c4:8c:20:56:11:6a: 19:d4:03:93:6c:6b:e4:49:37:09:11:55:6f:48:78:cd:e7:bb: bd:a8:ad:7c:8f:30:78:93:d7:32:7d:61:fb:a8:ba:54:64:fe: d8:c7:35:df:3a:f4:a5:27:09:81:63:7c:a9:73:26:02:91:06: 39:2a:8d:5c:50:08:a2:13:7e:2a:df:e0:4e:5b:74:ca:3e:23: ef:09:62:29:a5:7b:1a:8c:bf:59:8b:f5:9a:45:a4:9b:5a:34: 00:9c:45:33:f7:01:52:72:35:ba:2b:3b:5f:69:79:9f:41:72: 08:03:b2:56:07:82:ed:e2:ca:e5:62:52:9c:35:16:a9:e3:67: 1d:aa:58:f9:15:0f:c1:1b:9b:39:9b:65:f0:eb:ce:09:42:11: 9d:ff:46:9e:5d:53:00:a9:1a:84:b9:cb:c7:0d:b2:da:9d:90: 4d:72:66:d6:7f:d2:17:f5:59:36:3e:3f:ce:81:84:d2:cf:c1: f2:0d:d2:e3:d8:70:6c:f3:72:a5:e7:45:44:dc:c6:42:53:a4: 6d:19:b4:83:9d:28:4c:0e:4a:5d:1c:19:a6:9d:dd:83:c5:bf: 14:61:46:8d -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt8gBPzV2c8ArmzEOfmF3WSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmNlYWQzOTA2MjVlZGJhMTQwODEwOGRmNTdjZWE0NzE2MGQ3MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoSLSpCOKg4PaMvFromJtyf9SCOj x1Sjnc4nF3YcPZQRv9XKjiDp8jbCHAolhZba9qUbnR2b3L7WSMMgU7pWBYd0z6ID b9VOCPfUzCUkhXoy0p/+oWNSAuUS7TvBxP8EA3U2IotQcpXv4SbYcfxj+lWxr/tD EIfa9AZMAKuqjo9lkinEoCEp8Z2lDjIzdjhcAjkPF2OkU/7Kd44fFoTPD1DQDI8b XGuFW5E4tv+HBIg020TAM3ZatiPLwT9SpGO9A0gJw/+x5Hh9Ye3UGjwMoGUxki+y HNhM+560qZNQrCl5teJ9YFOy01G1kL134bg68LJTrwvfSRt6xsjHYFqW3QIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFM/OrTkGJe26FAgQjfV86kcWDXDlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2M0NjQ3 YS02MDQyLTRmZTgtYTI3Ni1mNWI2YTcxOGY0YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvYzQ2NDdh LTYwNDItNGZlOC1hMjc2LWY1YjZhNzE4ZjRiNS8xL3o4NnRPUVlsN2JvVUNCQ045 WHpxUnhZTmNPVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQAuQAiAwQAwrTEMBYEAgACMBADBwAgAQf4AUUD BQMqD3gAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDokgIDAwZqAgMDGIgwDQYJ KoZIhvcNAQELBQADggEBABFE98bng1fPbw8HBomsHqptHmdKpdHk8k0HFpItA8SM IFYRahnUA5Nsa+RJNwkRVW9IeM3nu72orXyPMHiT1zJ9YfuoulRk/tjHNd869KUn CYFjfKlzJgKRBjkqjVxQCKITfirf4E5bdMo+I+8JYimlexqMv1mL9ZpFpJtaNACc RTP3AVJyNborO19peZ9BcggDslYHgu3iyuViUpw1FqnjZx2qWPkVD8EbmzmbZfDr zglCEZ3/Rp5dUwCpGoS5y8cNstqdkE1yZtZ/0hf1WTY+P86BhNLPwfIN0uPYcGzz cqXnRUTcxkJTpG0ZtIOdKEwOSl0cGaad3YPFvxRhRo0= -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:13 2026 by rpki-client