This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer File: VzCjLzFiRs4LFHu4lejN8K7UPtY.cer (raw, json) Hash identifier: b57AvKKhvSRnm6+DUb//s6m+hNMEwmDXrEsUG34W6qI= Subject key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127297EB840766743D9DC3D962A0BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 93.188.88.0/21 IP: 188.92.4.0/24 IP: 2a01:9b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:72:97:eb:84:07:66:74:3d:9d:c3:d9:62:a0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:83:1d:b7:cd:e5:a8:00:67:15:fe:ca:53: 11:b3:f8:3f:2c:60:14:50:4e:2d:81:6d:37:1f:12: cf:5c:68:a6:77:6b:ce:3a:7a:fa:57:41:10:87:6d: 00:03:6b:25:c6:61:84:b4:52:e6:ed:ee:f6:a5:4c: ae:32:b7:64:02:21:5d:6d:88:69:3e:e6:d5:80:9f: 3d:a1:5e:13:a1:d8:2d:e4:d5:1e:83:f6:57:9e:59: 4a:87:82:a3:ef:91:05:df:bd:0b:27:80:ba:e4:c4: f0:16:05:24:e6:c7:10:5c:6b:18:3c:0d:89:f1:01: 1f:f8:2e:20:6e:ed:62:d7:63:64:79:41:5c:14:04: 18:dc:3e:80:0b:7c:9a:2d:d3:b8:6a:d8:6b:01:af: 64:35:78:ab:4f:16:a0:eb:46:2b:5c:e0:9d:fe:5c: 51:e6:1e:88:16:da:4b:5c:e3:b3:da:b9:20:73:5b: e9:4b:08:ad:16:0c:b1:00:ae:39:b6:b1:11:05:d5: 13:eb:3b:03:4e:ac:23:41:42:77:14:aa:02:78:ff: 55:c9:28:ed:05:39:09:12:29:ca:ef:3d:7e:1a:16: a6:ab:8c:8c:37:4b:b2:8b:29:0a:02:06:85:c7:90: f1:c0:63:5b:51:38:f7:d4:3c:e4:df:93:82:68:1f: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.88.0/21 188.92.4.0/24 IPv6: 2a01:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 60:58:7f:64:8f:5b:39:e8:98:e2:df:c8:6f:3b:99:38:1d:24: ce:d7:ac:da:f3:42:6d:62:ec:4b:63:f1:9e:45:ac:00:91:db: d0:0f:88:34:08:2d:45:08:8c:b6:b0:db:ee:73:bf:b8:2e:cf: 47:7e:14:ff:7b:cb:6d:cf:25:a2:fb:72:35:02:05:d8:16:bf: 41:8c:8d:38:b5:b8:3f:f6:04:5e:4c:df:52:7b:b9:77:3b:2d: 46:94:9f:1e:fd:17:61:b8:3b:b3:a4:6a:b1:d8:e5:06:c5:8d: 9b:bd:d7:64:6c:e1:9d:91:64:7b:10:9c:1e:a3:c7:70:11:26: 74:23:72:64:65:51:49:94:a0:ff:51:3a:cb:9d:32:24:05:8c: ca:85:4c:62:b4:1d:dd:7b:72:e8:b8:2e:89:ec:c5:bc:ec:7f: e6:d5:d4:d7:6d:61:71:94:d8:a7:bf:5c:53:77:e1:8e:b4:10: 2c:df:b5:50:67:e5:0a:00:57:f9:e5:a4:b2:f6:cd:8c:be:42: c2:26:f7:24:57:35:ea:86:3b:22:44:3d:8c:93:1e:6f:ad:27: a9:ba:de:2b:86:81:b4:4c:52:79:fe:91:9c:09:42:8b:cb:f6: fd:e0:66:df:52:ec:71:fd:5e:fc:aa:7f:1b:b9:26:f2:14:1b: 64:ad:99:eb -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8EnKX64QHZnQ9ncPZYqC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzMwYTMyZjMxNjI0NmNlMGIxNDdiYjg5NWU4Y2RmMGFlZDQzZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1aDHbfN5agAZxX+ylMRs/g/LGAU UE4tgW03HxLPXGimd2vOOnr6V0EQh20AA2slxmGEtFLm7e72pUyuMrdkAiFdbYhp PubVgJ89oV4Todgt5NUeg/ZXnllKh4Kj75EF370LJ4C65MTwFgUk5scQXGsYPA2J 8QEf+C4gbu1i12NkeUFcFAQY3D6AC3yaLdO4athrAa9kNXirTxag60YrXOCd/lxR 5h6IFtpLXOOz2rkgc1vpSwitFgyxAK45trERBdUT6zsDTqwjQUJ3FKoCeP9VySjt BTkJEinK7z1+Ghamq4yMN0uyiykKAgaFx5DxwGNbUTj31Dzk35OCaB+cFQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFFcwoy8xYkbOCxR7uJXozfCu1D7WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlL2YzYzNi Mi1iNjRhLTQ5ZTEtOWE0OC1jOTM5ODljYzliNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvZjNjM2Iy LWI2NGEtNDllMS05YTQ4LWM5Mzk4OWNjOWI2Ny8xL1Z6Q2pMekZpUnM0TEZIdTRs ZWpOOEs3VVB0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXbxYAwQAvFwEMA0EAgACMAcDBQAqAZsAMA0G CSqGSIb3DQEBCwUAA4IBAQBgWH9kj1s56Jji38hvO5k4HSTO16za80JtYuxLY/Ge RawAkdvQD4g0CC1FCIy2sNvuc7+4Ls9HfhT/e8ttzyWi+3I1AgXYFr9BjI04tbg/ 9gReTN9Se7l3Oy1GlJ8e/RdhuDuzpGqx2OUGxY2bvddkbOGdkWR7EJweo8dwESZ0 I3JkZVFJlKD/UTrLnTIkBYzKhUxitB3de3LouC6J7MW87H/m1dTXbWFxlNinv1xT d+GOtBAs37VQZ+UKAFf55aSy9s2MvkLCJvckVzXqhjsiRD2Mkx5vrSeput4rhoG0 TFJ5/pGcCUKLy/b94GbfUuxx/V78qn8buSbyFBtkrZnr -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:46 2026 by rpki-client