This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer (raw, json) Hash identifier: yXr27XLye/P+DY9e5i8AVIQlaLOr89VaZzLxS5rUxQU= Subject key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7484BC007485F995C6AD902FCE0B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62291 IP: 178.251.48.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:48:4b:c0:07:48:5f:99:5c:6a:d9:02:fc:e0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:d6:20:a0:c8:bf:df:6b:e7:41:65:f9:35: eb:32:40:02:81:c4:e6:8d:6a:46:ca:42:39:4a:d6: bd:6f:41:12:b1:a6:13:26:77:1c:5a:6f:9c:e8:48: ce:e1:68:fe:27:b8:ce:97:49:b1:31:09:e1:04:0a: 2d:9c:38:87:a8:0f:71:e7:36:25:ff:65:ca:a0:7d: 7f:56:54:f0:e1:73:59:3f:10:64:d4:ba:db:32:37: c5:bd:7e:75:f6:6d:f2:3e:a9:55:77:30:b2:6a:ea: 57:3d:91:0a:b5:6a:42:a0:d4:a5:1c:4f:8b:4c:2e: 84:23:ca:e2:f0:b9:49:63:21:bb:e9:e5:cc:1a:3e: 4d:c9:db:22:d3:58:c9:d2:4a:46:c0:81:73:5f:df: 41:ef:8d:73:91:34:1c:40:9e:f9:75:d0:7d:27:2d: 65:d9:0c:96:56:f3:ea:32:d6:26:fd:e3:04:6e:07: 45:8c:71:8e:98:e5:f3:01:fc:5e:61:4f:26:af:ce: d2:7c:8e:b4:0a:c8:bf:7b:a0:30:32:25:b9:bf:8c: eb:6b:9a:89:0d:9d:93:9e:b0:36:77:77:09:c5:31: c3:74:e9:89:92:a5:58:5b:9d:3b:5b:34:60:06:38: d2:87:fd:77:b4:a4:5a:77:e8:7e:57:59:ba:03:81: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62291 Signature Algorithm: sha256WithRSAEncryption af:5b:77:ea:db:dc:ae:72:91:1b:a6:ac:16:3e:f0:d8:b7:40: 9b:f7:83:d3:e1:53:fa:90:50:85:be:81:e8:18:3d:7b:ac:5e: ca:f7:66:e8:e9:40:76:ea:b0:61:34:74:e3:94:30:6b:71:1f: 9e:41:15:ce:4b:59:ab:b6:bc:07:4f:82:ae:f1:61:c8:36:5e: 1b:80:14:8a:a2:e7:94:88:f6:36:24:4e:2f:5a:48:38:5d:81: be:4b:ba:a6:0f:d6:8e:09:54:cc:6c:f6:cf:83:28:ba:4a:81: 79:a8:3f:7d:7d:d4:cf:da:d5:e1:22:a5:a5:e3:a0:5a:21:1d: 30:3e:a6:a4:51:f8:dc:28:bf:fd:ce:fe:03:b5:0e:09:a1:37: fd:46:b6:7f:40:b9:84:b1:5b:d0:e1:6f:21:aa:8c:11:d5:11: a7:22:05:e0:87:d8:48:e1:8f:a6:57:39:05:28:eb:a9:24:dd: a1:2c:fd:d0:0b:e3:55:e2:35:da:89:09:3d:3e:90:82:11:42: 82:ab:9c:68:82:8e:6e:a1:79:7b:e0:9e:24:d5:be:53:89:3b: a0:04:ba:5f:1b:98:e0:8c:93:b0:5f:18:49:51:c7:b7:89:39: 21:7d:44:4f:dc:72:dc:c1:21:f4:46:a0:c1:43:27:0f:d7:76: 17:62:f2:8d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3x0hLwAdIX5lcatkC/OCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2VkYWRjNzY1ZmE4ZjJmYTE5ZWIyMDk2M2NmNWJkMjM1ZDAxYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lPWIKDIv99r50Fl+TXrMkACgcTm jWpGykI5Sta9b0ESsaYTJnccWm+c6EjO4Wj+J7jOl0mxMQnhBAotnDiHqA9x5zYl /2XKoH1/VlTw4XNZPxBk1LrbMjfFvX519m3yPqlVdzCyaupXPZEKtWpCoNSlHE+L TC6EI8ri8LlJYyG76eXMGj5Nydsi01jJ0kpGwIFzX99B741zkTQcQJ75ddB9Jy1l 2QyWVvPqMtYm/eMEbgdFjHGOmOXzAfxeYU8mr87SfI60Csi/e6AwMiW5v4zra5qJ DZ2TnrA2d3cJxTHDdOmJkqVYW507WzRgBjjSh/13tKRad+h+V1m6A4FaPwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGftrcdl+o8voZ6yCWPPW9I10BtDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzY2M2M2 Yy0xM2JmLTQ0MDAtODQ4Mi0yMWUwYTY2ZDU0NDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvNjYzYzZj LTEzYmYtNDQwMC04NDgyLTIxZTBhNjZkNTQ0NC8xL1otMnR4Mlg2anktaG5ySUpZ ODliMGpYUUcwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDsvswMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDzUzANBgkqhkiG9w0BAQsFAAOCAQEAr1t36tvcrnKRG6asFj7w2LdAm/eD0+FT +pBQhb6B6Bg9e6xeyvdm6OlAduqwYTR045Qwa3EfnkEVzktZq7a8B0+CrvFhyDZe G4AUiqLnlIj2NiROL1pIOF2Bvku6pg/WjglUzGz2z4MoukqBeag/fX3Uz9rV4SKl peOgWiEdMD6mpFH43Ci//c7+A7UOCaE3/Ua2f0C5hLFb0OFvIaqMEdURpyIF4IfY SOGPplc5BSjrqSTdoSz90AvjVeI12okJPT6QghFCgqucaIKObqF5e+CeJNW+U4k7 oAS6XxuY4IyTsF8YSVHHt4k5IX1ET9xy3MEh9EagwUMnD9d2F2LyjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:34 2026 by rpki-client