This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer File: 1ZVssui7tNQpco4B4g_TyOBfMyg.cer (raw, json) Hash identifier: 5JeLWNgMELN9hWwCvcBf3Y47/CgOi/zVzbpDyLcBKPA= Subject key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9ABD5A5DF0F823771A1D791600A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48617 IP: 91.209.194.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9a:bd:5a:5d:f0:f8:23:77:1a:1d:79:16:00:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:7e:9b:12:d2:98:4a:53:90:a4:5d:98:02: b7:fb:80:ac:04:b5:21:1f:98:3d:a8:e0:32:81:1a: 6a:82:72:c8:68:39:d8:91:45:93:67:72:52:c7:f6: 30:9e:85:67:4e:59:ff:cc:b1:9f:cf:22:d3:32:58: 27:37:80:4a:bd:fd:37:a9:eb:52:ec:2a:79:c2:21: 31:15:7d:0d:bb:e0:00:86:68:ec:14:40:0a:4c:ea: 81:cd:0f:d9:8d:49:42:a6:43:15:12:27:52:2f:d0: 88:c3:05:1f:64:6f:0c:2f:33:d7:d2:06:c0:1d:e0: 9a:63:37:01:cd:c7:dd:8c:64:42:90:0c:8d:0b:b4: 6a:ca:4f:4d:72:66:0a:3d:28:ac:93:4d:e9:1a:c7: 4f:72:f2:90:35:58:ee:66:52:ab:61:7b:b0:7c:13: 1c:3d:8a:40:90:a7:18:70:87:70:5b:ef:68:91:2c: 1f:0e:04:b7:be:75:fc:52:39:82:e2:08:df:ea:e6: 2a:7b:98:da:02:aa:64:55:df:ef:45:e1:6e:84:77: 7a:b2:16:83:b1:0b:29:37:04:ca:60:53:fd:4d:a7: 31:25:b6:08:d3:ba:73:47:df:ce:bf:4b:b8:de:27: 04:d2:67:ae:c8:5a:19:6a:84:96:2c:b3:51:52:74: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.194.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48617 Signature Algorithm: sha256WithRSAEncryption 79:97:ca:4b:4c:5c:74:4d:32:02:89:1b:7c:2f:87:35:a1:89: 83:8f:44:51:26:37:55:73:db:f1:7e:40:fb:8d:2e:96:8e:fb: 0d:37:0e:7f:cc:c6:98:d4:23:2e:4d:51:f6:b1:e3:2a:2f:80: 41:54:26:b2:e6:e1:02:d2:2d:b9:18:5e:e4:40:ec:19:f7:7e: 09:f5:58:67:ea:2d:0f:8f:9a:13:f1:c9:9e:97:43:bc:e2:70: 9e:92:90:86:e1:9b:52:55:cb:94:2a:4f:86:cd:18:5d:07:9b: 14:da:27:3f:6f:5c:a2:6a:41:3f:9f:83:44:9d:5a:3c:bd:95: 31:9b:a1:ae:60:74:35:b2:c9:fc:8b:53:a7:38:ff:30:6a:90: 46:3c:75:15:86:d1:44:79:4a:a8:81:55:a4:0f:e7:01:33:47: bf:7a:ea:a2:f2:6e:d2:51:95:33:0a:f3:d6:cb:33:3e:a6:93: 06:1a:8b:10:d1:e9:10:ad:e3:ce:2e:89:1c:ca:77:19:d5:ef: 93:a3:91:42:4d:c3:00:c0:e0:49:ed:c0:ea:74:37:44:80:9d: 11:b0:6b:5d:7f:7c:38:f5:eb:ed:53:ad:8c:13:f4:35:30:c7: dc:2c:cf:57:ac:32:0b:99:aa:b0:21:f4:16:dc:d0:d5:e7:1e: 87:3f:34:16 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt265q9Wl3w+CN3Gh15FgCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTk1NmNiMmU4YmJiNGQ0Mjk3MjhlMDFlMjBmZDNjOGUwNWYzMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9+mxLSmEpTkKRdmAK3+4CsBLUh H5g9qOAygRpqgnLIaDnYkUWTZ3JSx/YwnoVnTln/zLGfzyLTMlgnN4BKvf03qetS 7Cp5wiExFX0Nu+AAhmjsFEAKTOqBzQ/ZjUlCpkMVEidSL9CIwwUfZG8MLzPX0gbA HeCaYzcBzcfdjGRCkAyNC7Rqyk9NcmYKPSisk03pGsdPcvKQNVjuZlKrYXuwfBMc PYpAkKcYcIdwW+9okSwfDgS3vnX8UjmC4gjf6uYqe5jaAqpkVd/vReFuhHd6shaD sQspNwTKYFP9TacxJbYI07pzR9/Ov0u43icE0meuyFoZaoSWLLNRUnSrtQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNWVbLLou7TUKXKOAeIP08jgXzMoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0L2NiYTcx OC1hYTczLTRkMzctOWEwNC05OGRhYmUzZTI2NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvY2JhNzE4 LWFhNzMtNGQzNy05YTA0LTk4ZGFiZTNlMjY2Mi8xLzFaVnNzdWk3dE5RcGNvNEI0 Z19UeU9CZk15Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9HCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC96TANBgkqhkiG9w0BAQsFAAOCAQEAeZfKS0xcdE0yAokbfC+HNaGJg49EUSY3 VXPb8X5A+40ulo77DTcOf8zGmNQjLk1R9rHjKi+AQVQmsubhAtItuRhe5EDsGfd+ CfVYZ+otD4+aE/HJnpdDvOJwnpKQhuGbUlXLlCpPhs0YXQebFNonP29compBP5+D RJ1aPL2VMZuhrmB0NbLJ/ItTpzj/MGqQRjx1FYbRRHlKqIFVpA/nATNHv3rqovJu 0lGVMwrz1sszPqaTBhqLENHpEK3jzi6JHMp3GdXvk6ORQk3DAMDgSe3A6nQ3RICd EbBrXX98OPXr7VOtjBP0NTDH3CzPV6wyC5mqsCH0FtzQ1ecehz80Fg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:35 2026 by rpki-client