This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer (raw, json) Hash identifier: IKz7A+Co9f1AJcYrl+D6OfQwIT0nniuBpvRO1jXuh4o= Subject key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38047C99211EE92E9BB9164DFDF43B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57747 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:04:7c:99:21:1e:e9:2e:9b:b9:16:4d:fd:f4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45981ce71942d45729f8706e2bb1b0149a52b415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:89:93:2b:c1:c9:1c:64:04:2e:25:dc:ae: 47:4b:4e:47:01:2b:fd:ee:f9:d1:35:8f:7a:d2:69: 3c:53:c0:ee:1f:ca:f2:ab:28:77:ec:6d:5a:85:b1: d8:d3:b4:e3:96:43:fc:3f:c1:9d:97:2a:7c:a6:01: f9:91:77:a6:49:00:93:39:79:ab:be:a4:db:98:ec: af:41:6b:6a:81:bd:25:42:33:c1:a0:78:e9:68:f5: 2d:9c:27:29:c6:4a:3d:59:d1:53:9d:09:75:e4:ec: 8f:00:60:09:86:07:9f:cb:5e:f1:51:c7:ef:48:ee: e4:e0:74:a8:06:4a:12:31:8d:fc:54:ad:d3:80:65: 4d:84:41:2d:cf:6b:17:20:ee:85:d7:b3:20:7d:c9: d4:14:76:b1:2f:46:b6:80:26:b9:4f:49:7f:86:46: 76:7e:91:47:e9:9d:65:46:40:1d:bd:de:9c:da:94: c5:61:7f:5e:27:9d:7c:73:af:a9:bf:57:f8:94:d5: c8:0a:38:ca:64:ec:fe:cf:6d:49:cc:27:08:0f:57: 15:6e:fc:d6:99:76:27:0f:b8:f1:1e:c0:f3:c0:44: 82:a8:07:41:d5:b2:0d:09:a4:dc:71:b6:56:91:07: 43:16:65:dd:b9:7d:f2:75:bd:cc:34:2a:6d:df:ab: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 57747 Signature Algorithm: sha256WithRSAEncryption 4f:2b:0e:b9:d2:ac:ed:35:21:4c:c4:1b:a8:c5:ac:3c:86:ca: 5d:98:2d:91:7f:9d:9a:a3:67:d7:df:22:50:8e:65:7b:79:22: e0:1f:67:e6:24:14:7c:a1:3c:7a:8b:4c:2f:f1:cf:ac:84:3f: 07:b9:07:29:07:7c:d0:3f:23:2e:7b:a0:4c:36:25:a3:ee:4a: c2:db:8e:75:e0:ce:f0:66:c3:9e:8e:3f:38:bc:f1:cb:92:6a: 15:b5:72:cc:a1:8c:11:fb:0a:fa:12:8a:d1:8b:3d:5f:85:2a: 04:88:06:99:94:d8:86:09:91:8b:4d:4f:5e:a8:09:4c:5a:a1: 5a:21:ff:54:4b:0a:0b:98:5b:3f:cc:5d:9d:47:18:9f:d3:8e: 72:53:88:57:94:ca:54:2f:0c:39:f8:57:64:4c:bd:e6:1e:e2: aa:41:da:b4:cb:e0:c8:61:dd:41:8f:c6:a6:3b:f7:54:6d:ef: 0c:86:81:8c:1f:17:a7:48:47:d0:9c:0a:96:22:50:ce:b4:dd: e6:82:c3:06:8a:2a:e6:75:98:50:37:b2:80:6b:ad:f7:f4:21: a4:28:0f:eb:c8:e7:fd:34:09:4d:20:5f:73:14:90:ae:4d:e5: aa:a1:fa:a3:17:ce:2c:b4:f7:c0:68:3f:83:41:e8:aa:1a:91: c9:8c:93:87 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OAR8mSEe6S6buRZN/fQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTk4MWNlNzE5NDJkNDU3MjlmODcwNmUyYmIxYjAxNDlhNTJiNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKSJkyvByRxkBC4l3K5HS05HASv9 7vnRNY960mk8U8DuH8ryqyh37G1ahbHY07TjlkP8P8Gdlyp8pgH5kXemSQCTOXmr vqTbmOyvQWtqgb0lQjPBoHjpaPUtnCcpxko9WdFTnQl15OyPAGAJhgefy17xUcfv SO7k4HSoBkoSMY38VK3TgGVNhEEtz2sXIO6F17MgfcnUFHaxL0a2gCa5T0l/hkZ2 fpFH6Z1lRkAdvd6c2pTFYX9eJ518c6+pv1f4lNXICjjKZOz+z21JzCcID1cVbvzW mXYnD7jxHsDzwESCqAdB1bINCaTccbZWkQdDFmXduX3ydb3MNCpt36vk6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEWYHOcZQtRXKfhwbiuxsBSaUrQVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2YyMDFm My02ODYzLTRhYzctOWRjNS02MjEyODAyYWUxNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZjIwMWYz LTY4NjMtNGFjNy05ZGM1LTYyMTI4MDJhZTE2ZS8xL1JaZ2M1eGxDMUZjcC1IQnVL N0d3RkpwU3RCVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDhkzANBgkqhkiG9w0BAQsFAAOCAQEATysOudKs7TUh TMQbqMWsPIbKXZgtkX+dmqNn198iUI5le3ki4B9n5iQUfKE8eotML/HPrIQ/B7kH KQd80D8jLnugTDYlo+5KwtuOdeDO8GbDno4/OLzxy5JqFbVyzKGMEfsK+hKK0Ys9 X4UqBIgGmZTYhgmRi01PXqgJTFqhWiH/VEsKC5hbP8xdnUcYn9OOclOIV5TKVC8M OfhXZEy95h7iqkHatMvgyGHdQY/Gpjv3VG3vDIaBjB8Xp0hH0JwKliJQzrTd5oLD Booq5nWYUDeygGut9/QhpCgP68jn/TQJTSBfcxSQrk3lqqH6oxfOLLT3wGg/g0Ho qhqRyYyThw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:02 2026 by rpki-client