This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer File: MZIbb_GsRJuj5_iSzwgy0c631GQ.cer (raw, json) Hash identifier: ZsG/ui37ZaUxP4ccOLsIZ/eLieG/9xUxA0348jm4uK0= Subject key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C135D2B342A6B7B7F3845C25C5DC874 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57763 IP: 37.75.136.0/21 IP: 91.224.66.0/23 IP: 185.63.0.0/22 IP: 2001:67c:2074::/48 IP: 2a01:5740::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5d:2b:34:2a:6b:7b:7f:38:45:c2:5c:5d:c8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:46:fd:be:76:8e:2d:4c:f4:a8:b7:3d:4e: 91:cb:e9:0d:1e:79:30:d4:e3:0c:44:ca:db:38:cc: 08:1a:2c:53:39:61:e2:93:ed:75:f3:b7:95:cf:48: 27:ea:0d:e8:3a:22:8c:04:80:2d:b4:d6:4b:78:23: db:a0:13:f3:12:16:ab:08:b7:40:2b:61:77:d1:77: 45:c6:b2:4b:b5:13:af:84:04:4e:02:4b:aa:3e:9f: e8:a0:79:b8:db:7a:e5:0f:12:f8:bc:2e:48:14:62: 00:28:fa:34:2e:31:6a:40:63:d1:a3:58:1e:8b:77: 2d:e7:7d:3b:83:12:64:b7:64:15:b1:7d:63:48:35: c8:db:e1:22:85:e0:72:a0:4e:16:ae:c6:fd:20:31: 56:6f:41:00:ce:55:9a:f4:a8:89:7c:ca:ac:1f:b1: 24:5e:5e:00:ba:e7:65:91:93:d9:6c:98:7c:a6:d4: 7d:0f:9b:ac:dc:76:55:d9:f0:19:6c:56:94:e7:05: be:45:4e:f0:a5:2a:5e:72:cc:72:41:b4:9a:9c:00: de:8b:cc:dd:84:e1:f7:8f:53:b0:c2:8e:27:ff:d5: b9:c5:ee:e5:2b:95:bb:14:ec:50:fe:d9:4f:2b:b8: c8:9f:d3:66:d6:ee:df:72:9e:ed:62:6b:d2:f8:10: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.136.0/21 91.224.66.0/23 185.63.0.0/22 IPv6: 2001:67c:2074::/48 2a01:5740::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57763 Signature Algorithm: sha256WithRSAEncryption 82:7a:45:b6:3f:46:9c:7b:b5:c7:6f:5c:e3:8c:69:1f:8c:51: 91:06:c1:76:19:07:32:b4:38:b0:89:db:25:d0:d9:ce:e8:e1: 83:6f:b7:c2:e9:7e:b9:10:35:8d:2c:0b:64:1a:fd:20:be:c7: ab:4d:8f:05:06:69:4e:8a:3a:cf:65:ff:b2:a8:84:0c:f6:68: f9:47:1a:2d:52:b3:e1:1f:ef:bf:fa:90:b7:cf:e1:ec:15:c9: 76:47:7a:6e:c3:53:82:c6:5b:90:dc:ea:4b:a6:4f:f7:26:b8: 19:d4:b7:a8:10:b1:ad:67:a2:c1:82:d3:2b:7a:18:f3:c2:e8: 99:d1:24:77:55:80:fc:39:68:36:17:7b:29:ca:fa:a1:b6:bc: d0:dc:90:3f:3d:45:cb:46:73:2e:09:ec:c2:5b:8e:2c:f7:6a: d7:79:ad:97:24:51:3c:3f:61:56:45:77:db:42:d3:da:68:f4: 4b:4d:79:b3:54:5e:0f:de:76:ba:d9:9f:73:07:bf:7c:1c:7c: 1f:a5:90:b2:83:c7:44:1a:d6:8c:2b:99:8a:3a:67:16:bf:68: 16:9c:b1:47:04:a7:25:23:ac:18:49:f0:cf:32:19:22:df:5e: 79:cc:66:4e:b3:08:ef:2b:d3:2d:a0:0b:5e:b2:97:26:d9:ab: 24:7c:39:a4 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt8E10rNCpre384RcJcXch0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTkyMWI2ZmYxYWM0NDliYTNlN2Y4OTJjZjA4MzJkMWNlYjdkNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0tG/b52ji1M9Ki3PU6Ry+kNHnkw 1OMMRMrbOMwIGixTOWHik+1187eVz0gn6g3oOiKMBIAttNZLeCPboBPzEharCLdA K2F30XdFxrJLtROvhAROAkuqPp/ooHm423rlDxL4vC5IFGIAKPo0LjFqQGPRo1ge i3ct5307gxJkt2QVsX1jSDXI2+EiheByoE4Wrsb9IDFWb0EAzlWa9KiJfMqsH7Ek Xl4AuudlkZPZbJh8ptR9D5us3HZV2fAZbFaU5wW+RU7wpSpecsxyQbSanADei8zd hOH3j1Owwo4n/9W5xe7lK5W7FOxQ/tlPK7jIn9Nm1u7fcp7tYmvS+BAZgwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFDGSG2/xrESbo+f4ks8IMtHOt9RkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2NlMDQz ZS0yZGRiLTQ4YTctODk4My05ZDdhODg3MmI0NTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvY2UwNDNl LTJkZGItNDhhNy04OTgzLTlkN2E4ODcyYjQ1NC8xL01aSWJiX0dzUkp1ajVfaVN6 d2d5MGM2MzFHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQDJUuIAwQBW+BCAwQCuT8AMBYEAgACMBADBwAg AQZ8IHQDBQEqAVdAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDhozANBgkqhkiG 9w0BAQsFAAOCAQEAgnpFtj9GnHu1x29c44xpH4xRkQbBdhkHMrQ4sInbJdDZzujh g2+3wul+uRA1jSwLZBr9IL7Hq02PBQZpToo6z2X/sqiEDPZo+UcaLVKz4R/vv/qQ t8/h7BXJdkd6bsNTgsZbkNzqS6ZP9ya4GdS3qBCxrWeiwYLTK3oY88LomdEkd1WA /DloNhd7Kcr6oba80NyQPz1Fy0ZzLgnswluOLPdq13mtlyRRPD9hVkV320LT2mj0 S015s1ReD952utmfcwe/fBx8H6WQsoPHRBrWjCuZijpnFr9oFpyxRwSnJSOsGEnw zzIZIt9eecxmTrMI7yvTLaALXrKXJtmrJHw5pA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:42 2026 by rpki-client