This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer (raw, json) Hash identifier: Wu/8zPNwXemBficT+zJjLOM870eVbPhHPjtl1WRLUCw= Subject key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14E78B8C72D3C8DA1FE2528613BFB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198061 IP: 194.0.191.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e7:8b:8c:72:d3:c8:da:1f:e2:52:86:13:bf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cb:22:c1:63:4a:cd:1a:72:92:a6:5f:e7:8d: 99:31:69:27:f3:02:ab:62:9a:b1:a0:75:89:c5:65: 82:1f:b5:b8:59:5a:1e:fb:a1:69:e7:fe:67:28:05: 29:31:bd:68:91:21:48:4b:12:3f:2d:b8:9e:ac:ef: 3c:ab:1e:fd:20:b8:34:65:b0:6b:d2:3e:46:42:b4: 4f:65:2c:3d:3c:b4:20:ea:37:aa:b0:f5:44:5d:2a: d0:3a:04:c9:97:41:b3:5b:68:88:2a:61:9a:41:4f: 06:15:1c:17:08:1d:0e:65:64:45:f3:46:a0:6c:ab: 03:89:2f:5c:e5:4f:f4:4a:75:2e:da:e1:d2:2b:ec: 64:9d:a1:de:ff:4e:7b:84:ce:70:b6:3a:f4:ac:a5: 29:28:72:2b:c2:dc:e5:71:be:ed:84:b8:d8:1b:1c: 8e:f2:dd:e4:84:65:b2:cf:f9:c3:21:c5:d1:b8:06: 3a:94:56:e2:33:a3:5f:39:7c:23:a8:91:63:0c:58: 1e:fb:6c:91:7f:ae:49:75:80:46:67:2e:68:07:4a: 5e:9c:8c:18:37:d3:b6:dc:0e:68:9a:47:d6:d0:ce: 1f:6d:29:52:7a:0f:14:99:b6:ba:21:ca:08:9f:1c: 07:6f:67:cc:af:5f:0a:b1:7f:5f:70:6a:64:bc:38: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.191.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198061 Signature Algorithm: sha256WithRSAEncryption 61:ae:d2:ea:6d:14:89:a1:9f:cc:10:f8:08:ce:d1:b4:47:79: e6:64:70:48:c3:09:7c:f8:95:5e:fc:6f:0d:f3:82:3b:5d:6b: 6f:c7:1d:68:64:a4:5b:af:c2:6d:9c:12:f7:6f:f6:ff:5b:ac: c5:41:a6:3b:bd:5c:e1:23:db:30:f4:a0:89:1c:75:c6:f2:ee: f4:92:1b:39:3b:dd:c7:f6:55:67:12:1b:62:d1:c5:0f:ae:29: 79:4c:e4:ee:a6:44:ff:3f:5f:3e:e0:27:ba:9d:82:73:0f:92: b0:76:9e:e6:90:88:19:4f:18:69:28:a1:c7:f2:af:67:4b:d0: 52:52:7f:d8:a0:7a:88:0c:12:59:95:98:a0:5e:8f:f4:f7:4d: 84:64:9b:1d:c8:ca:26:d9:3e:ea:d4:61:c1:8b:60:00:b2:e4: 9b:ec:3f:54:07:bc:cf:53:6a:a1:64:62:b9:73:00:1d:0b:e1: 1c:a4:be:ff:86:85:c9:6f:d0:e8:5a:a1:bb:f0:e3:37:a1:fc: 33:bd:62:d0:95:c1:42:54:19:df:f1:bd:13:25:cd:1a:18:a1: d9:f7:69:67:85:92:54:19:61:4b:ec:89:5e:bb:6f:9c:9f:b4: 4f:8a:fd:a9:9c:fe:0d:ab:b3:8c:ea:c1:a0:59:25:c4:4c:09: 19:ff:18:45 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FOeLjHLTyNof4lKGE7+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzNhNjIwYjJhY2M4ZmMzMGI4YzRkNTE4ZjkyOTdlM2Y3YzlhNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ssiwWNKzRpykqZf542ZMWkn8wKr YpqxoHWJxWWCH7W4WVoe+6Fp5/5nKAUpMb1okSFISxI/LbierO88qx79ILg0ZbBr 0j5GQrRPZSw9PLQg6jeqsPVEXSrQOgTJl0GzW2iIKmGaQU8GFRwXCB0OZWRF80ag bKsDiS9c5U/0SnUu2uHSK+xknaHe/057hM5wtjr0rKUpKHIrwtzlcb7thLjYGxyO 8t3khGWyz/nDIcXRuAY6lFbiM6NfOXwjqJFjDFge+2yRf65JdYBGZy5oB0penIwY N9O23A5omkfW0M4fbSlSeg8Umba6IcoInxwHb2fMr18KsX9fcGpkvDjWTwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNM6YgsqzI/DC4xNUY+Sl+P3yaYKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzJhNGVl My1kNzZkLTQ4YmUtYWRkNi03OGY5OTI0NzVlMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMmE0ZWUz LWQ3NmQtNDhiZS1hZGQ2LTc4Zjk5MjQ3NWUxZi8xLzB6cGlDeXJNajhNTGpFMVJq NUtYNF9mSnBnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgC/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFrTANBgkqhkiG9w0BAQsFAAOCAQEAYa7S6m0UiaGfzBD4CM7RtEd55mRwSMMJ fPiVXvxvDfOCO11rb8cdaGSkW6/CbZwS92/2/1usxUGmO71c4SPbMPSgiRx1xvLu 9JIbOTvdx/ZVZxIbYtHFD64peUzk7qZE/z9fPuAnup2Ccw+SsHae5pCIGU8YaSih x/KvZ0vQUlJ/2KB6iAwSWZWYoF6P9PdNhGSbHcjKJtk+6tRhwYtgALLkm+w/VAe8 z1NqoWRiuXMAHQvhHKS+/4aFyW/Q6Fqhu/DjN6H8M71i0JXBQlQZ3/G9EyXNGhih 2fdpZ4WSVBlhS+yJXrtvnJ+0T4r9qZz+DauzjOrBoFklxEwJGf8YRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:17 2026 by rpki-client