This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer (raw, json) Hash identifier: fzXiStYhm8zk83nAu9xb5Lx3UJG9kzbBXHiV+dNjdVo= Subject key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C418EEF08AE4562978FF401A65BD265F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 09 Feb 2026 08:40:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209990 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:8e:ef:08:ae:45:62:97:8f:f4:01:a6:5b:d2:65:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 9 08:40:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=199b3f908ce6e1764617731b624539421d13c94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:6c:89:bd:fa:5c:ce:1d:b8:43:4b:72:ef: 87:83:a1:3c:73:3b:32:0a:c2:8c:34:84:56:63:e0: ce:06:ca:97:a7:93:ff:91:47:38:c5:1c:bf:2d:05: d4:fc:63:03:17:37:25:e0:73:fb:f1:9c:ab:2f:d2: 2f:fb:5b:d9:ef:20:dd:f3:0c:6d:c3:a2:78:d1:fd: 85:c4:a2:dc:9e:28:a4:3c:a6:27:46:c6:28:b8:06: 81:29:d8:61:19:a2:aa:fd:2f:5a:0b:2d:8e:43:e6: 6d:9b:e8:13:9e:6f:5d:11:03:8b:fc:47:9b:31:71: 1d:64:11:19:72:c7:37:72:32:68:b4:d1:95:3a:7a: 29:7b:0b:6f:08:3a:99:03:1e:8f:a7:c7:1a:15:e0: 78:f2:4a:9d:ae:05:08:85:c3:ed:19:ec:09:2c:34: d8:64:7c:9a:5e:02:97:82:52:0f:a2:cf:c0:7c:85: eb:bb:b0:e8:83:d5:b8:fd:06:8b:81:3b:36:5c:78: 88:59:42:1c:9a:be:ed:86:84:26:5b:85:c1:85:17: c9:bd:69:ca:ee:91:81:f4:2e:b6:bb:57:6e:f2:8a: 5c:50:16:d4:fc:c9:d1:f4:a9:79:44:13:07:98:1b: 0a:69:aa:3b:a3:6b:98:30:03:c1:b4:07:de:5c:37: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209990 Signature Algorithm: sha256WithRSAEncryption 8a:5a:f5:5e:6c:63:df:52:10:09:fb:1c:19:52:80:63:d5:d7: 18:3c:b3:36:97:51:ad:f7:2f:30:a9:21:55:3e:0b:60:dc:c5: 46:b3:b9:14:8b:61:17:82:32:0b:d8:90:99:ba:ed:bd:96:f6: 55:86:65:c1:a2:8e:8c:e8:ab:0c:8c:e0:ef:86:92:c2:25:dc: 90:f4:f3:7d:6d:80:73:50:76:c1:97:5f:9d:5c:94:b2:13:db: b6:a7:41:2b:5c:34:ba:f3:fe:42:ad:9a:ca:b7:bf:42:ff:59: 1a:2b:59:aa:00:26:5e:76:9d:89:c2:d9:27:65:43:b9:a7:b0: 57:5f:a8:ea:16:d4:b2:9f:f0:d6:3d:a3:33:11:85:54:c4:a3: 9b:6a:a8:1c:da:09:02:ce:e5:1b:15:2b:9c:03:a3:f4:0e:c0: 71:e6:47:24:2c:48:ba:4e:91:d1:c6:ad:9f:1d:79:28:32:3e: af:35:1e:89:fb:6a:f2:77:e9:fd:9f:b1:ce:d2:b2:96:8f:95: c3:4f:a4:99:dc:87:49:65:6e:5f:9a:12:8f:f6:b9:38:58:81: 8f:50:00:4e:93:0f:c0:a0:a0:40:a5:1f:df:6e:e8:c4:5a:29: 15:d2:00:fd:4e:b8:71:5f:eb:11:20:93:b6:e5:cb:03:6d:06: 6d:02:7a:7e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZxBju8IrkVil4/0AaZb0mX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA5MDg0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTliM2Y5MDhjZTZlMTc2NDYxNzczMWI2MjQ1Mzk0MjFkMTNjOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Fsib36XM4duENLcu+Hg6E8czsy CsKMNIRWY+DOBsqXp5P/kUc4xRy/LQXU/GMDFzcl4HP78ZyrL9Iv+1vZ7yDd8wxt w6J40f2FxKLcniikPKYnRsYouAaBKdhhGaKq/S9aCy2OQ+Ztm+gTnm9dEQOL/Eeb MXEdZBEZcsc3cjJotNGVOnopewtvCDqZAx6Pp8caFeB48kqdrgUIhcPtGewJLDTY ZHyaXgKXglIPos/AfIXru7Dog9W4/QaLgTs2XHiIWUIcmr7thoQmW4XBhRfJvWnK 7pGB9C62u1du8opcUBbU/MnR9Kl5RBMHmBsKaao7o2uYMAPBtAfeXDfhlQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBmbP5CM5uF2RhdzG2JFOUIdE8lNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzBlODcx NS1kODdlLTRjZTUtOTQ4Mi0yZTk3YWJhMGZiMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMGU4NzE1 LWQ4N2UtNGNlNS05NDgyLTJlOTdhYmEwZmIyYy8xL0dac19rSXptNFhaR0YzTWJZ a1U1UWgwVHlVMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0RjANBgkqhkiG9w0BAQsFAAOCAQEAilr1Xmxj31IQ CfscGVKAY9XXGDyzNpdRrfcvMKkhVT4LYNzFRrO5FIthF4IyC9iQmbrtvZb2VYZl waKOjOirDIzg74aSwiXckPTzfW2Ac1B2wZdfnVyUshPbtqdBK1w0uvP+Qq2ayre/ Qv9ZGitZqgAmXnadicLZJ2VDuaewV1+o6hbUsp/w1j2jMxGFVMSjm2qoHNoJAs7l GxUrnAOj9A7AceZHJCxIuk6R0catnx15KDI+rzUeiftq8nfp/Z+xztKylo+Vw0+k mdyHSWVuX5oSj/a5OFiBj1AATpMPwKCgQKUf327oxFopFdIA/U64cV/rESCTtuXL A20GbQJ6fg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:50 2026 by rpki-client