This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer (raw, json) Hash identifier: U5GwGv675N6YJFSyVVuy0pvZGFHbvXzwMvjDR8JHmLg= Subject key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78350FC70F4A2B9561B9B0BC2C142854 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211302 IP: 185.69.0.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0f:c7:0f:4a:2b:95:61:b9:b0:bc:2c:14:28:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:76:f0:d9:45:52:00:5f:fb:18:29:5c:a3: e8:10:7e:c3:48:bc:a1:e7:81:81:d0:42:11:91:e7: 4e:9e:4c:ef:cf:fe:15:9c:a7:33:0c:77:33:0b:95: 77:6f:4b:04:15:99:19:55:01:f5:72:64:5c:7a:d7: e1:07:b6:22:fb:9d:7f:34:a4:5c:76:ed:08:84:54: c1:24:88:e5:15:84:d9:08:da:b6:ab:ef:56:a5:f9: ad:38:47:47:c1:f7:93:5f:67:03:1f:03:0c:da:e1: 80:ed:f4:ea:89:a1:c3:7b:b5:c6:9c:66:5b:52:a7: 11:9b:8b:3b:8c:0c:1e:4a:f2:c8:2d:84:67:e5:77: 59:3b:6a:33:a5:e8:bb:d6:03:75:b5:68:90:ef:2b: fe:32:9b:c3:b0:02:47:dc:e3:f6:3e:07:27:f6:37: 7f:af:d3:23:a9:88:1e:2f:d3:03:c1:aa:7c:8d:20: f6:2a:15:35:82:f6:b6:4d:95:c9:d8:fa:ab:a5:ce: 8a:e1:79:46:57:68:72:f0:df:28:22:73:df:94:c2: 6b:c8:25:a3:5d:ce:3e:8a:b4:0b:37:a6:53:e2:42: 0b:e8:b4:54:2a:39:ac:6c:9b:8e:38:36:db:9d:0d: a5:c5:78:c2:ad:79:6b:ef:da:60:57:a7:e0:a5:ae: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211302 Signature Algorithm: sha256WithRSAEncryption 2f:1c:c6:0e:93:87:31:09:c4:a7:a8:97:a7:4f:83:ee:93:e9: ed:56:50:cd:38:c2:af:0e:7d:6c:a9:0c:83:bb:2f:9a:9b:74: 60:58:f3:91:90:94:4f:2f:2f:7f:69:29:41:11:9b:17:48:9b: 28:9d:f0:e7:3b:13:81:cd:66:0f:75:65:e4:bd:bc:28:a4:e8: a1:b7:71:64:21:25:83:06:cd:ee:7a:cf:8f:09:73:c6:c7:50: a6:60:c1:92:1b:35:d5:1a:62:78:14:71:58:27:e7:e7:80:85: 61:f2:d1:bd:f3:66:8a:17:f6:bf:7f:f3:61:b5:01:1d:3c:b2: 10:cd:18:6e:da:36:d7:b9:f6:e2:59:be:5b:61:5f:f9:d1:ed: 3e:cc:06:c7:4b:07:4a:e6:a0:07:52:af:dc:ef:75:27:b1:07: 2a:66:11:4c:54:13:d6:34:6d:c9:82:76:30:35:10:c6:47:8e: 98:e4:9b:34:74:eb:60:af:c7:53:4e:9c:76:07:1a:31:e9:e7: 41:04:36:67:b4:89:5d:33:fc:e0:6a:c8:c1:12:6f:6f:78:28: 90:c3:f3:55:05:37:da:52:fe:81:e1:80:db:b9:60:fd:f8:5d: 71:bb:96:4b:a5:ed:b1:1d:81:59:cc:62:21:2c:5c:c1:7b:eb: f1:da:2b:a4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NQ/HD0orlWG5sLwsFChUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzNkZGJjNGJiMzgxZGJlZjI0ZDJmZjhiNGUxZjIzZjJkZGY0MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSl28NlFUgBf+xgpXKPoEH7DSLyh 54GB0EIRkedOnkzvz/4VnKczDHczC5V3b0sEFZkZVQH1cmRcetfhB7Yi+51/NKRc du0IhFTBJIjlFYTZCNq2q+9WpfmtOEdHwfeTX2cDHwMM2uGA7fTqiaHDe7XGnGZb UqcRm4s7jAweSvLILYRn5XdZO2ozpei71gN1tWiQ7yv+MpvDsAJH3OP2Pgcn9jd/ r9MjqYgeL9MDwap8jSD2KhU1gva2TZXJ2Pqrpc6K4XlGV2hy8N8oInPflMJryCWj Xc4+irQLN6ZT4kIL6LRUKjmsbJuOODbbnQ2lxXjCrXlr79pgV6fgpa49XwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEc928S7OB2+8k0v+LTh8j8t30DMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzU1YmY5 Zi0yNDBmLTQ5YmItYjMwZS02MDRiMjAxZTY1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNTViZjlm LTI0MGYtNDliYi1iMzBlLTYwNGIyMDFlNjVmOC8xL1J6M2J4THM0SGI3eVRTXzR0 T0h5UHkzZlFNdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuUUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM5ZjANBgkqhkiG9w0BAQsFAAOCAQEALxzGDpOHMQnEp6iXp0+D7pPp7VZQzTjC rw59bKkMg7svmpt0YFjzkZCUTy8vf2kpQRGbF0ibKJ3w5zsTgc1mD3Vl5L28KKTo obdxZCElgwbN7nrPjwlzxsdQpmDBkhs11RpieBRxWCfn54CFYfLRvfNmihf2v3/z YbUBHTyyEM0Ybto217n24lm+W2Ff+dHtPswGx0sHSuagB1Kv3O91J7EHKmYRTFQT 1jRtyYJ2MDUQxkeOmOSbNHTrYK/HU06cdgcaMennQQQ2Z7SJXTP84GrIwRJvb3go kMPzVQU32lL+geGA27lg/fhdcbuWS6XtsR2BWcxiISxcwXvr8dorpA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:28 2026 by rpki-client