This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer (raw, json) Hash identifier: Eim36OWx6CQFW3ZFXDHhpiqbYu2/IYQzIFNWdf2u0OA= Subject key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6C07B317988BF29F6453C7C0A3A67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210920 AS: 211552 AS: 212047 IP: 45.157.0.0/22 IP: 74.220.16.0/20 IP: 91.211.152.0/22 IP: 185.136.232.0/22 IP: 185.243.80.0/22 IP: 212.2.240.0/20 IP: 2a10:c880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c0:7b:31:79:88:bf:29:f6:45:3c:7c:0a:3a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:2a:e5:b9:2c:6e:a7:20:67:c1:11:0d:48: ec:a0:2e:47:18:20:7f:ec:20:e8:1b:9e:a3:9a:b8: 57:a6:35:88:49:13:76:81:91:9a:08:f4:93:89:b2: a9:c6:ed:c5:0d:20:20:4d:3f:c1:a1:54:36:98:33: ca:ec:cf:61:52:5d:67:99:03:86:0e:9c:63:30:6c: 97:e7:26:37:dc:cf:e0:46:37:f9:f2:9e:b6:1d:40: 06:2d:ca:2e:fa:68:56:31:15:2d:ac:a9:ea:40:23: 41:96:b7:31:09:69:21:81:37:9d:c0:12:80:e1:37: 2b:28:fa:50:69:5f:36:3c:9b:95:88:a1:9f:97:13: 21:34:fd:7f:de:16:ab:79:11:22:9c:28:7c:24:80: 5a:8d:89:3e:bf:3f:20:cf:3d:cf:f8:a0:b6:2d:b9: 1a:c2:f8:1b:a7:e1:e0:f9:83:68:d8:86:17:db:90: 1c:ed:ff:68:d7:47:71:39:9b:31:7a:93:f6:a5:f6: 13:e7:52:2e:e7:22:2f:3c:11:8c:28:fe:ac:16:b1: 2e:49:e6:2e:2e:50:2a:ae:8c:1b:c7:97:49:e4:4f: 0b:a2:08:37:67:dd:f5:4b:dd:7d:d3:ea:48:d2:aa: 13:f3:ea:63:69:1e:26:29:a3:b7:e7:08:bd:3d:12: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.0.0/22 74.220.16.0/20 91.211.152.0/22 185.136.232.0/22 185.243.80.0/22 212.2.240.0/20 IPv6: 2a10:c880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210920 211552 212047 Signature Algorithm: sha256WithRSAEncryption 15:eb:8f:98:4f:31:c3:7b:59:27:31:e5:c4:d3:05:6d:70:00: 7e:d4:f2:0c:b1:0b:bc:9d:0a:65:23:9b:a5:6b:21:a8:31:be: 2f:22:0f:84:3c:9a:72:cf:a9:63:20:0b:30:05:14:41:6d:77: 3a:ec:5a:5b:71:6b:7b:56:3a:f2:63:b2:28:55:46:6d:f6:8d: e5:02:43:71:0f:45:c3:e8:29:ae:d0:35:ab:d4:64:9b:ae:80: f2:60:b5:70:ea:43:8b:2b:17:94:24:e9:fc:f5:09:3d:a3:37: 51:e7:d6:18:69:32:50:74:9e:63:19:4e:8c:f4:e0:15:4f:a4: ee:5b:a7:cb:14:db:d4:75:8c:9b:19:46:b6:e4:0e:07:c8:84: 6e:15:66:89:81:6e:58:4e:c2:b3:27:6b:ff:b7:a0:fd:b1:c8: 87:dc:83:2c:96:47:34:44:bf:cc:02:e9:02:68:e8:5a:bc:4e: e7:3f:a0:a4:87:16:38:2e:d0:f2:23:ed:4c:27:e1:3d:60:1a: 61:98:2d:09:e1:24:74:af:ca:70:b3:02:11:8a:4b:68:59:d8: 87:49:25:32:1b:75:80:05:3e:7e:0c:e1:33:fb:a3:aa:b0:c0: b1:03:86:18:41:d6:11:61:9b:34:4b:a9:d6:6e:8d:8d:18:4d: 13:d6:f2:86 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt+psB7MXmIvyn2RTx8CjpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UyNGM3Mjg0ZWY0ODg3ZTQ1ZDRjY2Q5YmRlNjc5Y2Q5YWI0ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYsq5bksbqcgZ8ERDUjsoC5HGCB/ 7CDoG56jmrhXpjWISRN2gZGaCPSTibKpxu3FDSAgTT/BoVQ2mDPK7M9hUl1nmQOG DpxjMGyX5yY33M/gRjf58p62HUAGLcou+mhWMRUtrKnqQCNBlrcxCWkhgTedwBKA 4TcrKPpQaV82PJuViKGflxMhNP1/3hareREinCh8JIBajYk+vz8gzz3P+KC2Lbka wvgbp+Hg+YNo2IYX25Ac7f9o10dxOZsxepP2pfYT51Iu5yIvPBGMKP6sFrEuSeYu LlAqrowbx5dJ5E8Logg3Z931S9190+pI0qoT8+pjaR4mKaO35wi9PRIXDQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFGfiTHKE70iH5F1MzZveZ5zZq08AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzAyZDNm Ni00MzAxLTRiZTUtOGMzNy0wMzc1YTljMzJiMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvMDJkM2Y2 LTQzMDEtNGJlNS04YzM3LTAzNzVhOWMzMmIwMC8xL1otSk1jb1R2U0lma1hVek5t OTVubk5tclR3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLZ0AAwQEStwQAwQCW9OYAwQCuYjoAwQCufNQ AwQE1ALwMA0EAgACMAcDBQMqEMiAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwM3 6AIDAzpgAgMDPE8wDQYJKoZIhvcNAQELBQADggEBABXrj5hPMcN7WScx5cTTBW1w AH7U8gyxC7ydCmUjm6VrIagxvi8iD4Q8mnLPqWMgCzAFFEFtdzrsWltxa3tWOvJj sihVRm32jeUCQ3EPRcPoKa7QNavUZJuugPJgtXDqQ4srF5Qk6fz1CT2jN1Hn1hhp MlB0nmMZToz04BVPpO5bp8sU29R1jJsZRrbkDgfIhG4VZomBblhOwrMna/+3oP2x yIfcgyyWRzREv8wC6QJo6Fq8Tuc/oKSHFjgu0PIj7Uwn4T1gGmGYLQnhJHSvynCz AhGKS2hZ2IdJJTIbdYAFPn4M4TP7o6qwwLEDhhhB1hFhmzRLqdZujY0YTRPW8oY= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:16 2026 by rpki-client