This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer (raw, json) Hash identifier: hO1Jx4dIZD8IOOFJaS5tSwsvzoiO+rTj2FYHeeXk0GY= Subject key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E908B78A29838D8A0D3103D62B0C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198108 IP: 91.216.232.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:90:8b:78:a2:98:38:d8:a0:d3:10:3d:62:b0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:96:99:fe:33:4c:e5:2c:a7:c5:aa:06:bb: 0c:f1:3f:26:2a:27:9f:9b:14:50:54:58:ce:22:8b: d8:62:52:1f:41:fb:98:dd:dd:65:e1:64:d2:9b:ee: ba:89:ef:7a:f7:ce:7e:2d:59:fe:42:0a:53:80:d9: 46:7c:18:41:33:c0:5d:12:55:1e:63:e0:99:10:9c: 09:2f:b7:53:ab:71:af:ea:07:b4:2f:3d:da:9a:3b: 59:d9:b0:19:38:87:da:6e:18:ff:d2:c7:ea:f1:b8: d3:c3:e6:8d:83:63:99:3c:79:56:74:71:2a:29:0b: 12:4b:cf:35:72:be:3c:a2:f5:87:9e:ba:54:d7:e9: 8a:44:14:9b:d4:dd:12:84:70:f2:39:e0:5b:00:46: 65:b2:5b:ff:81:75:b0:34:3a:ee:08:04:c3:40:6b: 2e:fa:d4:65:59:05:36:54:fd:5b:4f:78:43:13:73: f3:db:1c:07:cf:9a:8c:a1:cb:56:4b:1b:1f:4e:a2: 6d:26:12:61:32:b4:2c:f8:d2:83:3c:d9:0a:1a:be: b9:b3:d1:f7:46:e5:5e:eb:dc:af:13:68:67:f9:11: 5c:f8:57:34:2a:8d:51:24:04:c1:ce:2a:65:7d:0a: 22:fd:a4:61:76:8e:86:f7:77:80:a9:01:9c:fe:ef: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.232.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198108 Signature Algorithm: sha256WithRSAEncryption 09:85:19:a6:81:2b:40:a9:f1:8b:9d:06:e7:df:af:37:1e:f5: 39:ab:78:22:38:b3:84:c2:82:53:36:de:5c:d4:0c:b8:01:80: e1:4b:4a:8b:d9:a5:38:72:78:f3:21:bb:ce:d1:14:b0:08:b1: ea:4d:25:ec:51:85:55:fa:06:02:36:90:2c:d2:ea:05:62:07: 38:60:84:9e:af:f2:11:f0:42:2b:65:a6:d6:10:fc:9c:96:2c: 3c:87:e0:cc:78:7e:06:7e:a1:81:7c:e7:77:c8:8d:30:d6:c4: 48:e9:2f:c3:47:20:5d:a8:c7:40:4d:45:bb:1a:d7:3d:b0:46: 36:3b:c0:17:33:1a:1e:aa:5d:5f:1f:b3:6c:37:56:0a:2d:07: 52:ad:34:96:72:68:62:0c:24:be:b2:5b:33:b4:9a:fa:36:e0: 04:9f:41:89:25:71:76:24:14:30:a0:99:57:0b:0a:95:2e:70: 77:e9:a6:0b:f5:54:1b:8c:5a:6f:60:2f:46:75:a5:9a:ea:2d: 22:eb:fe:a5:56:f5:5f:e1:d3:8a:23:e1:32:95:42:d2:21:98: ca:ac:50:31:68:9d:4f:73:0e:d5:56:8e:ff:49:b2:4d:b9:69: 7a:f8:b1:e4:41:06:c4:1a:7b:f3:b1:f5:2e:e4:3c:40:ae:31: e8:25:2b:8e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fpCLeKKYONig0xA9YrDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjM0NDc3YWEwZjAxMjMxMzhjMDQ3MmY1YjM1MjhlNGQyMTkzZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG6Wmf4zTOUsp8WqBrsM8T8mKief mxRQVFjOIovYYlIfQfuY3d1l4WTSm+66ie96985+LVn+QgpTgNlGfBhBM8BdElUe Y+CZEJwJL7dTq3Gv6ge0Lz3amjtZ2bAZOIfabhj/0sfq8bjTw+aNg2OZPHlWdHEq KQsSS881cr48ovWHnrpU1+mKRBSb1N0ShHDyOeBbAEZlslv/gXWwNDruCATDQGsu +tRlWQU2VP1bT3hDE3Pz2xwHz5qMoctWSxsfTqJtJhJhMrQs+NKDPNkKGr65s9H3 RuVe69yvE2hn+RFc+Fc0Ko1RJATBziplfQoi/aRhdo6G93eAqQGc/u9kVQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFA80R3qg8BIxOMBHL1s1KOTSGT5oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzlkNGJl Zi04ZWJkLTRmZGItYWFmMC1lMDliYzRlYWUxODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvOWQ0YmVm LThlYmQtNGZkYi1hYWYwLWUwOWJjNGVhZTE4OS8xL0R6UkhlcUR3RWpFNHdFY3ZX elVvNU5JWlBtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9joMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMF3DANBgkqhkiG9w0BAQsFAAOCAQEACYUZpoErQKnxi50G59+vNx71Oat4Ijiz hMKCUzbeXNQMuAGA4UtKi9mlOHJ48yG7ztEUsAix6k0l7FGFVfoGAjaQLNLqBWIH OGCEnq/yEfBCK2Wm1hD8nJYsPIfgzHh+Bn6hgXznd8iNMNbESOkvw0cgXajHQE1F uxrXPbBGNjvAFzMaHqpdXx+zbDdWCi0HUq00lnJoYgwkvrJbM7Sa+jbgBJ9BiSVx diQUMKCZVwsKlS5wd+mmC/VUG4xab2AvRnWlmuotIuv+pVb1X+HTiiPhMpVC0iGY yqxQMWidT3MO1VaO/0myTblpevix5EEGxBp787H1LuQ8QK4x6CUrjg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:46 2026 by rpki-client