This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer File: 0krezYS7F0i9NbmezqRncuAeyTU.cer (raw, json) Hash identifier: /f8oeCiLZAwK7Tm1NCl2gbhVq97ymcjx1G5sCixwFCc= Subject key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3259FFEA39C93801B5AE6371E4A3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8244 IP: 94.142.192.0/21 IP: 195.230.192.0/18 IP: 2a01:ac40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:25:9f:fe:a3:9c:93:80:1b:5a:e6:37:1e:4a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d24adecd84bb1748bd35b99ecea46772e01ec935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:b7:a4:eb:24:4d:83:a5:73:e6:83:96:0e: 94:4a:79:08:da:4b:f1:c5:03:24:81:13:30:54:1d: 31:0c:f9:6b:c2:91:67:ba:ce:62:af:3e:8b:5d:45: 22:e6:09:93:1d:a8:71:a2:2f:c4:79:8c:91:f4:e5: 3a:a0:d5:3a:9b:f8:9a:37:44:08:c9:de:13:65:4d: 00:5e:67:51:ae:91:8b:22:de:d2:6f:41:e3:26:b3: 26:7e:74:12:96:61:db:04:b5:a0:f1:a2:ba:15:ff: 98:cf:a9:e0:2c:c4:32:04:ff:86:c9:23:cc:2f:5f: 1a:61:c0:3e:c5:a2:63:1b:04:96:b0:ed:ee:3d:8a: 42:b5:f9:e0:2a:d7:4e:58:ec:41:68:1c:63:2f:b3: 22:df:bc:dd:fe:4a:ea:27:15:cb:bf:aa:c9:4c:63: e1:b2:9d:cb:94:4a:2a:8d:11:a0:e3:8b:fb:f7:00: d0:f4:5d:f5:6a:17:66:2d:dc:f9:3b:db:31:ed:b8: 20:70:1b:ef:70:d8:c8:4a:44:13:b8:10:d8:4e:ce: 54:8f:13:38:ba:7f:bd:96:31:2a:1b:d7:52:46:31: e2:9a:1e:dd:f6:03:3d:26:66:e2:71:58:33:1f:f6: 67:9b:1b:55:68:86:cd:f1:08:92:96:a4:5e:61:30: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.192.0/21 195.230.192.0/18 IPv6: 2a01:ac40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8244 Signature Algorithm: sha256WithRSAEncryption 99:2a:fd:21:64:4f:62:08:23:16:fd:55:a5:ec:bf:0b:45:82: 8e:aa:e2:c3:2f:e0:cc:67:84:3f:44:f1:13:c1:ea:d6:11:a9: ad:15:05:71:58:bb:ca:9f:08:99:8d:c5:fa:37:bb:56:2e:89: 4c:7e:fa:b6:2f:ed:f0:21:23:fa:39:30:87:f1:f1:db:0a:13: 66:41:d2:db:c5:41:1f:c9:6b:00:1d:cf:e1:05:67:69:fa:41: 07:90:84:7d:08:59:af:a5:64:bb:12:ec:36:22:19:bb:1d:8b: b2:2c:fa:30:40:4d:18:fb:53:b9:fb:a2:37:06:15:8e:02:4a: 6a:fd:9d:cc:b0:74:74:b0:50:e6:88:f3:67:c1:d6:eb:ee:45: c3:0e:41:8f:e0:cf:53:ab:81:75:c3:6d:cd:6e:da:f6:83:ba: 69:15:95:85:c4:cb:15:dc:2a:58:38:3d:48:ab:4f:10:e3:5c: f9:8f:fa:0e:1c:14:70:49:ee:90:3b:d6:f5:af:9f:23:8a:01: c0:47:59:6f:18:9b:88:3c:8f:f8:cf:11:08:72:3b:b8:64:ec: de:fa:61:66:2f:af:42:66:7f:44:e4:c6:e4:0a:be:4d:80:12: 4a:5b:6d:c1:60:73:d5:4d:9e:90:19:e9:93:66:15:4d:37:cf: 72:7f:8f:d0 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7oyWf/qOck4AbWuY3Hko6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjRhZGVjZDg0YmIxNzQ4YmQzNWI5OWVjZWE0Njc3MmUwMWVjOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cG3pOskTYOlc+aDlg6USnkI2kvx xQMkgRMwVB0xDPlrwpFnus5irz6LXUUi5gmTHahxoi/EeYyR9OU6oNU6m/iaN0QI yd4TZU0AXmdRrpGLIt7Sb0HjJrMmfnQSlmHbBLWg8aK6Ff+Yz6ngLMQyBP+GySPM L18aYcA+xaJjGwSWsO3uPYpCtfngKtdOWOxBaBxjL7Mi37zd/krqJxXLv6rJTGPh sp3LlEoqjRGg44v79wDQ9F31ahdmLdz5O9sx7bggcBvvcNjISkQTuBDYTs5UjxM4 un+9ljEqG9dSRjHimh7d9gM9JmbicVgzH/ZnmxtVaIbN8QiSlqReYTCrjwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNJK3s2EuxdIvTW5ns6kZ3LgHsk1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzYzYTg0 NS04YzA5LTRkNjktYTc3MS00OGE2MDdiYmUyNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNjNhODQ1 LThjMDktNGQ2OS1hNzcxLTQ4YTYwN2JiZTI1ZS8xLzBrcmV6WVM3RjBpOU5ibWV6 cVJuY3VBZXlUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXo7AAwQGw+bAMA0EAgACMAcDBQAqAaxAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiA0MA0GCSqGSIb3DQEBCwUAA4IBAQCZKv0h ZE9iCCMW/VWl7L8LRYKOquLDL+DMZ4Q/RPETwerWEamtFQVxWLvKnwiZjcX6N7tW LolMfvq2L+3wISP6OTCH8fHbChNmQdLbxUEfyWsAHc/hBWdp+kEHkIR9CFmvpWS7 Euw2Ihm7HYuyLPowQE0Y+1O5+6I3BhWOAkpq/Z3MsHR0sFDmiPNnwdbr7kXDDkGP 4M9Tq4F1w23Nbtr2g7ppFZWFxMsV3CpYOD1Iq08Q41z5j/oOHBRwSe6QO9b1r58j igHAR1lvGJuIPI/4zxEIcju4ZOze+mFmL69CZn9E5MbkCr5NgBJKW23BYHPVTZ6Q GemTZhVNN89yf4/Q -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:47 2026 by rpki-client