This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer File: z_N0ZX9XB488oscRCdNZJ8IkhoE.cer (raw, json) Hash identifier: kk66qVoQiY59UphNvTa/QOuMpf36HtbTzOL1qXA/Fxw= Subject key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112F12CD807236103A4938A35038F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43658 AS: 57422 IP: 94.232.208.0/21 IP: 176.100.0.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2f:12:cd:80:72:36:10:3a:49:38:a3:50:38:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cff374657f57078f3ca2c71109d35927c2248681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:3d:8f:f4:7c:8d:c5:8e:2d:a3:13:21:b7: 93:0c:a9:32:cd:f2:77:34:ef:76:4b:b3:06:8a:47: 82:89:bb:7d:46:0f:62:a9:e2:df:c2:f9:b5:20:3c: 06:12:30:6b:94:39:69:ee:98:27:64:44:39:0d:70: af:e9:c7:64:f9:b2:3d:f1:5d:48:27:df:8a:ca:83: e3:b9:eb:7d:e4:64:f8:5d:4b:e8:00:b9:c2:4e:e3: 26:67:b5:62:cc:c5:3f:68:20:3f:89:1d:7b:f8:14: 37:36:00:d3:b4:d1:52:1c:89:a3:34:f0:2c:56:9d: 65:90:e0:5d:e6:fc:9f:1f:d8:ce:f9:bd:6b:1e:20: cd:0d:b3:35:6c:ce:3f:f5:c8:b2:16:7b:a9:65:02: c4:68:3f:4b:7a:8c:e1:b2:69:e8:34:88:bc:e5:7e: e7:2a:8d:c0:9a:a4:56:20:52:5e:bc:53:6d:16:ca: 76:5d:1d:f4:b1:d4:69:02:ab:c0:e9:28:09:99:17: d3:7e:0d:2d:a4:5a:6a:96:09:4c:ab:68:10:21:0a: 3c:c6:39:e4:7b:ae:03:f6:f0:89:a8:8a:35:9b:4e: 86:86:a5:d8:73:58:21:2a:28:e7:b1:94:fb:1f:13: 6f:50:8b:f3:33:aa:05:d1:fe:a3:ea:21:52:bc:9c: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.208.0/21 176.100.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43658 57422 Signature Algorithm: sha256WithRSAEncryption aa:f6:07:97:e6:88:31:d5:ae:c0:2e:3f:e5:85:cb:27:e0:67: 20:19:20:fe:df:85:1b:32:5d:59:27:e2:03:43:99:4a:c1:82: b1:1e:15:24:52:5b:3f:17:3b:12:5f:14:85:9d:29:b4:81:91: d8:06:39:57:4c:23:6d:ea:e9:a4:db:7f:a6:7a:bb:90:6d:be: 7e:6a:dd:b7:84:9d:26:69:c3:04:a7:80:84:0d:f7:7a:c2:c1: 16:eb:88:bc:29:ff:c8:75:c5:c7:52:c0:d8:0d:21:a3:34:47: 4c:7d:3a:b1:48:25:07:1d:af:82:b8:ed:ec:02:2a:af:f5:50: 4a:02:f9:ac:2a:9b:b3:08:9d:99:60:52:d8:0b:61:be:1c:b8: c5:cf:65:86:36:ce:16:ca:a0:5c:59:df:64:71:70:27:5d:39: 8d:45:bf:47:b1:5f:7c:bc:f0:09:7c:c7:08:7f:3e:ac:ef:8a: e6:bc:c7:f0:c9:bc:26:96:fd:46:d9:32:9d:fe:f9:ed:6c:a2: 8e:ed:ca:f9:1f:9a:6e:70:6b:ff:f4:ef:9d:4f:84:56:6b:25: 40:cc:cb:26:7c:65:c9:b9:e9:b1:ca:96:81:4f:f4:44:40:bd: 09:b8:a8:d4:d4:9e:aa:87:54:b7:11:aa:62:05:31:85:bf:3f: 86:44:a4:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5ES8SzYByNhA6STijUDj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmYzNzQ2NTdmNTcwNzhmM2NhMmM3MTEwOWQzNTkyN2MyMjQ4NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUg9j/R8jcWOLaMTIbeTDKkyzfJ3 NO92S7MGikeCibt9Rg9iqeLfwvm1IDwGEjBrlDlp7pgnZEQ5DXCv6cdk+bI98V1I J9+KyoPjuet95GT4XUvoALnCTuMmZ7VizMU/aCA/iR17+BQ3NgDTtNFSHImjNPAs Vp1lkOBd5vyfH9jO+b1rHiDNDbM1bM4/9ciyFnupZQLEaD9LeozhsmnoNIi85X7n Ko3AmqRWIFJevFNtFsp2XR30sdRpAqvA6SgJmRfTfg0tpFpqlglMq2gQIQo8xjnk e64D9vCJqIo1m06GhqXYc1ghKijnsZT7HxNvUIvzM6oF0f6j6iFSvJxJFQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFM/zdGV/VwePPKLHEQnTWSfCJIaBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2NkMjE0 Ni03ZmJlLTRlNWQtOTNiYS0zZWEyZWJmZTg3MDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvY2QyMTQ2 LTdmYmUtNGU1ZC05M2JhLTNlYTJlYmZlODcwNy8xL3pfTjBaWDlYQjQ4OG9zY1JD ZE5aSjhJa2hvRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDXujQAwQFsGQAMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCqigIDAOBOMA0GCSqGSIb3DQEBCwUAA4IBAQCq9geX5ogx1a7ALj/l hcsn4GcgGSD+34UbMl1ZJ+IDQ5lKwYKxHhUkUls/FzsSXxSFnSm0gZHYBjlXTCNt 6umk23+meruQbb5+at23hJ0macMEp4CEDfd6wsEW64i8Kf/IdcXHUsDYDSGjNEdM fTqxSCUHHa+CuO3sAiqv9VBKAvmsKpuzCJ2ZYFLYC2G+HLjFz2WGNs4WyqBcWd9k cXAnXTmNRb9HsV98vPAJfMcIfz6s74rmvMfwybwmlv1G2TKd/vntbKKO7cr5H5pu cGv/9O+dT4RWayVAzMsmfGXJuemxypaBT/REQL0JuKjU1J6qh1S3EapiBTGFvz+G RKRF -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:35 2026 by rpki-client