This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer File: CRzF2QybaBpstOdyzK6-w0L7mwU.cer (raw, json) Hash identifier: 7eq5NrzEsbhDWlmorUSiy9M4kmTxpZmH0JON0f1sVHA= Subject key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA656C40AEF20417B8A37223AA5B89C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31175 IP: 185.117.204.0/22 IP: 2a06:8700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:56:c4:0a:ef:20:41:7b:8a:37:22:3a:a5:b8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:74:71:61:f8:45:89:fa:8b:8e:fc:af:b9: a0:d0:65:86:7e:32:0f:37:70:0c:28:ca:f5:98:40: 06:0e:41:cb:11:f6:ed:03:e1:32:1c:32:de:c9:20: f1:08:d3:8d:77:2c:be:79:e0:cf:77:6e:40:f9:62: fc:54:4b:c4:a9:3c:e4:15:d1:4b:85:6a:59:61:5a: 96:ce:3b:60:a5:de:24:19:79:99:9d:08:f0:12:fe: 96:fb:ad:7f:1d:d2:97:84:07:83:69:f9:66:70:06: 08:f6:5f:7e:9c:a6:0d:3e:61:eb:fd:97:61:b6:db: 65:a5:a1:27:d9:5d:28:d1:66:dc:d4:9b:39:3c:00: fc:dd:58:12:c1:2a:05:d0:21:f4:a7:78:2e:b4:98: f0:cc:49:91:82:87:bf:44:43:a0:9a:8a:c3:a0:f8: 5a:97:1a:e1:9c:26:fa:29:0c:00:77:3a:bb:8d:a8: d5:ac:b5:3a:35:4e:7a:8f:01:ad:c2:a6:1e:d3:45: f7:49:89:29:d8:b8:c3:89:59:11:53:57:b4:ae:8e: 1d:a8:7e:e5:72:2b:00:4c:c4:73:cc:2e:dc:08:21: 58:5f:3b:de:a8:f7:f3:73:6c:1c:ab:a4:a2:2e:44: 79:9b:e4:1c:0f:1f:6a:9e:b4:d6:ff:ef:4a:6c:62: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.204.0/22 IPv6: 2a06:8700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31175 Signature Algorithm: sha256WithRSAEncryption 18:a6:e8:d9:e1:04:9e:fb:fb:90:6b:0a:50:0d:0b:ef:c0:9f: 95:da:63:d8:42:2f:4d:92:d8:99:9e:4a:54:e6:3c:f4:19:7d: be:bf:7f:9d:74:73:54:e5:57:8d:65:18:ab:40:b4:84:be:bc: ab:29:9a:a7:2d:3a:39:0c:0e:7c:bc:19:f9:0e:02:ef:2c:f2: c3:6d:86:7b:1b:70:01:eb:f1:c7:42:d2:56:c8:f1:8d:6d:fa: a9:c9:ce:28:1e:0e:8b:94:aa:8b:79:fe:1d:31:13:54:ba:39: 4d:09:0a:85:6d:59:75:ac:c7:54:03:a7:ce:f0:32:b9:cf:e7: 8c:8c:6b:e3:7a:9b:70:c6:8e:99:1b:0c:7c:3a:1f:54:f8:ae: 16:96:14:65:0b:01:57:24:f9:e6:83:8f:64:3f:c9:b1:71:ea: 22:65:1a:25:08:99:c9:c6:43:49:61:a6:b1:61:e9:97:27:3f: ac:09:71:a6:8f:6a:82:d5:31:7c:64:b2:71:e1:ab:d4:a5:8b: ca:7a:22:dd:68:ba:ec:a7:65:78:45:95:0c:db:76:33:10:94: 71:01:46:fb:ef:1b:8a:9f:0a:42:49:20:b6:10:14:f7:5f:6d: 95:93:62:c6:a3:9e:70:3c:78:08:b8:f6:f1:a7:49:0c:e0:bf: 9c:5b:6d:86 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt+plbECu8gQXuKNyI6pbicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTFjYzVkOTBjOWI2ODFhNmNiNGU3NzJjY2FlYmVjMzQyZmI5YjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5J0cWH4RYn6i478r7mg0GWGfjIP N3AMKMr1mEAGDkHLEfbtA+EyHDLeySDxCNONdyy+eeDPd25A+WL8VEvEqTzkFdFL hWpZYVqWzjtgpd4kGXmZnQjwEv6W+61/HdKXhAeDaflmcAYI9l9+nKYNPmHr/Zdh tttlpaEn2V0o0Wbc1Js5PAD83VgSwSoF0CH0p3gutJjwzEmRgoe/REOgmorDoPha lxrhnCb6KQwAdzq7jajVrLU6NU56jwGtwqYe00X3SYkp2LjDiVkRU1e0ro4dqH7l cisATMRzzC7cCCFYXzveqPfzc2wcq6SiLkR5m+QcDx9qnrTW/+9KbGI8VwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFAkcxdkMm2gabLTncsyuvsNC+5sFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzczOGY3 OC00MzhjLTRiZmQtODA2Yi03M2JmYWQ4MzJkMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNzM4Zjc4 LTQzOGMtNGJmZC04MDZiLTczYmZhZDgzMmQyZC8xL0NSekYyUXliYUJwc3RPZHl6 SzYtdzBMN213VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXXMMA0EAgACMAcDBQMqBocAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnnHMA0GCSqGSIb3DQEBCwUAA4IBAQAYpujZ4QSe+/uQ awpQDQvvwJ+V2mPYQi9NktiZnkpU5jz0GX2+v3+ddHNU5VeNZRirQLSEvryrKZqn LTo5DA58vBn5DgLvLPLDbYZ7G3AB6/HHQtJWyPGNbfqpyc4oHg6LlKqLef4dMRNU ujlNCQqFbVl1rMdUA6fO8DK5z+eMjGvjeptwxo6ZGwx8Oh9U+K4WlhRlCwFXJPnm g49kP8mxceoiZRolCJnJxkNJYaaxYemXJz+sCXGmj2qC1TF8ZLJx4avUpYvKeiLd aLrsp2V4RZUM23YzEJRxAUb77xuKnwpCSSC2EBT3X22Vk2LGo55wPHgIuPbxp0kM 4L+cW22G -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:35 2026 by rpki-client