This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer (raw, json) Hash identifier: /PR5LUSlesWtkrO0sBey5iySdlcUm5uWGZXBqVtFP/8= Subject key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C803A64D1FFA3F0D43566C3F0E598F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210582 IP: 5.182.88.0/22 IP: 45.66.28.0/22 IP: 45.84.24.0/22 IP: 93.88.16.0/22 IP: 185.47.44.0/22 IP: 185.68.156.0/22 IP: 185.110.32.0/22 IP: 193.168.248.0/22 IP: 195.72.44.0/22 IP: 213.170.216.0/22 IP: 2a06:5380::/29 IP: 2a09:5680::/29 IP: 2a09:5a40::/29 IP: 2a09:b400::/29 IP: 2a0d:39c0::/29 IP: 2a0e:6880::/29 IP: 2a0e:8800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3a:64:d1:ff:a3:f0:d4:35:66:c3:f0:e5:98:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4735e807d349d31564f9fd546138e3598e2007ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:e3:eb:a8:6c:03:93:b5:e0:e6:5d:ac:2f: 2c:ee:7b:6e:99:f1:7a:c3:c8:15:15:e5:e6:10:0b: 58:37:0a:2b:e6:11:48:8f:d8:db:de:41:1c:fd:d1: b0:1b:2f:20:db:f8:be:1e:8c:a8:89:70:35:03:07: 87:5a:b4:23:38:c1:73:4c:f6:7f:ac:43:7f:93:6c: df:de:76:6b:ee:ea:57:93:63:cf:30:d1:df:81:91: 90:0b:50:28:ee:2b:de:9d:d0:58:7c:ad:ca:f8:67: c4:e0:d0:5f:8a:39:bf:c0:00:a6:65:31:a0:0f:7a: 14:a1:b9:a9:2d:bd:18:4b:fc:cd:50:11:71:78:ce: fc:2e:4a:91:87:3c:df:8e:07:df:4b:0b:f3:a4:de: d6:f1:b8:81:c4:3f:60:9f:5d:14:d7:71:21:d6:7f: 04:0a:58:c3:26:e8:49:36:fe:fd:14:c2:95:1a:44: 6d:6c:6d:87:81:53:d1:b5:e3:61:ac:99:20:84:9a: 34:2f:f7:9c:e4:63:ec:32:da:81:69:c9:dc:03:9e: db:51:ec:64:a6:6c:29:c5:8e:9d:f1:8c:e7:11:fa: 54:d7:f2:d2:72:e7:5e:13:8c:a2:01:b5:61:ae:6e: cc:ab:46:96:88:a1:64:cc:7a:4a:1e:90:30:a0:fd: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.88.0/22 45.66.28.0/22 45.84.24.0/22 93.88.16.0/22 185.47.44.0/22 185.68.156.0/22 185.110.32.0/22 193.168.248.0/22 195.72.44.0/22 213.170.216.0/22 IPv6: 2a06:5380::/29 2a09:5680::/29 2a09:5a40::/29 2a09:b400::/29 2a0d:39c0::/29 2a0e:6880::/29 2a0e:8800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210582 Signature Algorithm: sha256WithRSAEncryption 7f:ef:b4:c3:34:8a:52:6a:49:4e:0d:e4:e9:8c:e3:f8:32:21: 5e:b2:7c:35:44:31:e3:10:56:67:bc:1d:72:fc:c1:b6:a0:c3: be:51:82:6d:e6:35:9e:16:d6:51:a2:75:42:3c:6e:f1:2d:d1: 39:93:11:39:0a:27:80:f2:49:5e:1d:ae:47:43:03:e7:17:ed: 7a:64:d6:b5:fc:5a:fd:b0:0e:3a:01:c1:50:de:6d:43:23:3c: f5:5f:46:88:5d:5b:f2:9f:bf:97:ef:24:19:e0:9f:ab:b7:9f: 15:3e:29:93:26:4f:8a:41:e9:0b:43:6b:6d:e7:e2:a0:a2:fa: 98:02:95:75:26:56:b2:da:5e:16:1f:15:90:ae:de:3a:ef:6f: 72:5e:16:74:f0:03:53:05:06:b2:91:c3:04:1c:55:16:21:2f: 44:bb:4f:c1:a8:d8:85:f6:89:9b:68:80:91:60:48:7d:53:db: 0c:fe:56:ef:58:35:61:3e:eb:1e:aa:9f:3d:59:b5:19:3f:d2: d8:83:70:ea:bb:e8:8b:bc:7b:26:cd:6b:e5:94:fd:0e:bb:45: d6:19:0a:40:7b:4a:d5:8e:98:b2:c6:b1:78:0d:23:a3:ce:20: c5:a2:37:62:a6:4a:88:f9:c8:48:c3:e0:8d:a8:ed:89:ad:d2: e8:1a:42:06 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZt8gDpk0f+j8NQ1ZsPw5Zj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzM1ZTgwN2QzNDlkMzE1NjRmOWZkNTQ2MTM4ZTM1OThlMjAwN2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs/j66hsA5O14OZdrC8s7ntumfF6 w8gVFeXmEAtYNwor5hFIj9jb3kEc/dGwGy8g2/i+HoyoiXA1AweHWrQjOMFzTPZ/ rEN/k2zf3nZr7upXk2PPMNHfgZGQC1Ao7ivendBYfK3K+GfE4NBfijm/wACmZTGg D3oUobmpLb0YS/zNUBFxeM78LkqRhzzfjgffSwvzpN7W8biBxD9gn10U13Eh1n8E CljDJuhJNv79FMKVGkRtbG2HgVPRteNhrJkghJo0L/ec5GPsMtqBacncA57bUexk pmwpxY6d8YznEfpU1/LScudeE4yiAbVhrm7Mq0aWiKFkzHpKHpAwoP02+QIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFEc16AfTSdMVZPn9VGE441mOIAfOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzVlMTM4 MC05ZGM2LTQ2OTEtODZiNS01YjFiNWQ5OTQwYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvNWUxMzgw LTlkYzYtNDY5MS04NmI1LTViMWI1ZDk5NDBjMS8xL1J6WG9COU5KMHhWay1mMVVZ VGpqV1k0Z0I4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF BQcBBwEB/wR/MH0wQgQCAAEwPAMEAgW2WAMEAi1CHAMEAi1UGAMEAl1YEAMEArkv LAMEArlEnAMEArluIAMEAsGo+AMEAsNILAMEAtWq2DA3BAIAAjAxAwUDKgZTgAMF AyoJVoADBQMqCVpAAwUDKgm0AAMFAyoNOcADBQMqDmiAAwUDKg6IADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDNpYwDQYJKoZIhvcNAQELBQADggEBAH/vtMM0ilJq SU4N5OmM4/gyIV6yfDVEMeMQVme8HXL8wbagw75Rgm3mNZ4W1lGidUI8bvEt0TmT ETkKJ4DySV4drkdDA+cX7Xpk1rX8Wv2wDjoBwVDebUMjPPVfRohdW/Kfv5fvJBng n6u3nxU+KZMmT4pB6QtDa23n4qCi+pgClXUmVrLaXhYfFZCu3jrvb3JeFnTwA1MF BrKRwwQcVRYhL0S7T8Go2IX2iZtogJFgSH1T2wz+Vu9YNWE+6x6qnz1ZtRk/0tiD cOq76Iu8eybNa+WU/Q67RdYZCkB7StWOmLLGsXgNI6POIMWiN2KmSoj5yEjD4I2o 7Ymt0ugaQgY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:14 2026 by rpki-client