This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer (raw, json) Hash identifier: Wlh6hECvwa2mePN8Z71Op/PsPTqg3ArIV6wLtA5WWAo= Subject key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C736AAC92D7168DA3423595B4D7AA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12529 IP: 193.169.190.0/23 IP: 194.26.197.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:36:aa:c9:2d:71:68:da:34:23:59:5b:4d:7a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:7c:17:2d:20:8a:64:61:26:52:99:d5:80: d7:68:be:56:95:44:e0:38:96:21:6b:59:88:24:dc: df:c9:de:de:aa:cc:0f:52:f8:09:ac:43:71:14:45: ad:04:93:5a:a6:ef:e1:7e:6f:98:16:27:ed:5a:4a: 83:31:f8:cd:d1:1a:51:bb:05:fd:93:16:e2:6c:6a: 9a:71:7f:a6:60:88:fa:48:7b:44:20:d8:d8:f2:c8: fd:b7:be:20:e9:ce:82:42:19:1a:46:c5:30:3f:7d: 0f:bc:55:fe:ab:66:09:ac:a4:9f:af:19:5f:4b:b0: fd:56:46:11:21:fa:7a:08:5c:f0:5b:77:a0:da:a3: 33:33:af:48:8f:af:f7:99:d7:0c:83:22:f6:cd:99: 3b:84:51:47:34:57:61:4b:1c:bc:37:eb:32:b8:14: 9c:d4:5b:88:ba:61:aa:e7:77:5a:c0:e6:2e:55:33: da:d4:7f:76:a5:c8:ee:93:e3:40:87:06:e8:06:6c: e5:9a:51:8e:35:72:a2:bf:d1:62:4a:38:d5:db:21: bb:49:63:5e:26:77:c2:be:0d:84:98:a3:e3:5c:96: 53:a3:d6:1e:cf:59:e5:71:1f:dc:f7:aa:3e:ca:f8: cb:1a:1a:5e:ea:e2:ba:82:5c:0c:6b:3d:0d:62:36: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.190.0/23 194.26.197.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12529 Signature Algorithm: sha256WithRSAEncryption 27:12:3a:9f:f9:f4:38:46:b1:77:16:82:13:48:a1:fd:1f:10: cb:9d:d1:55:0b:07:a0:ee:37:b1:05:df:a9:5f:ad:db:26:05: b1:e6:55:64:57:95:d4:04:87:3e:74:2a:68:1b:7a:08:a0:9d: 30:36:c0:8d:2b:16:2e:d8:c7:4f:01:8b:ff:ec:b2:59:59:36: 5b:af:19:64:22:68:17:a2:fe:a1:74:59:55:46:e1:7a:26:a2: 88:17:cd:a9:0c:cc:59:74:bb:b6:2a:9a:78:c9:d4:4b:f5:c5: 05:d3:d9:01:ec:cf:1d:cf:84:08:88:be:2f:84:14:20:76:bf: 51:72:b0:f0:09:18:a1:cb:94:20:f6:8e:41:01:8c:a0:71:0c: 6f:1d:10:41:cd:0c:d4:30:4b:fd:5e:0d:39:a7:ab:9c:e9:49: 0b:ac:a6:af:82:57:88:a0:f9:88:46:c0:98:db:36:a7:61:f4: de:30:2a:1b:d2:09:f9:90:0a:20:55:70:7e:87:e6:a9:ad:74: a4:f1:a3:d1:ff:b4:63:14:69:32:0c:be:79:57:bd:c1:44:46: 90:6d:33:86:37:ea:5f:0c:3e:a0:99:d2:fb:66:65:5a:54:67: a8:4c:b6:58:19:e7:c4:c0:37:12:a3:f3:e7:ec:4f:96:c9:d0: a0:e6:53:e8 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt3xzaqyS1xaNo0I1lbTXqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzU5MjY3ZjAzZjc2ZDg3ZmU0MWIyY2IwYjI5NWQyM2M3NTRjNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCZ8Fy0gimRhJlKZ1YDXaL5WlUTg OJYha1mIJNzfyd7eqswPUvgJrENxFEWtBJNapu/hfm+YFiftWkqDMfjN0RpRuwX9 kxbibGqacX+mYIj6SHtEINjY8sj9t74g6c6CQhkaRsUwP30PvFX+q2YJrKSfrxlf S7D9VkYRIfp6CFzwW3eg2qMzM69Ij6/3mdcMgyL2zZk7hFFHNFdhSxy8N+syuBSc 1FuIumGq53dawOYuVTPa1H92pcjuk+NAhwboBmzlmlGONXKiv9FiSjjV2yG7SWNe JnfCvg2EmKPjXJZTo9Yez1nlcR/c96o+yvjLGhpe6uK6glwMaz0NYjYkYwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFGdZJn8D922H/kGyywspXSPHVMWaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzlkYWMw NS02ZjgzLTQ5OGYtOWEwYS05ZjhhYmUwZTlmZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvOWRhYzA1 LTZmODMtNDk4Zi05YTBhLTlmOGFiZTBlOWZmMC8xL1oxa21md1AzYllmLVFiTExD eWxkSThkVXhaby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwam+AwQAwhrFMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAjDxMA0GCSqGSIb3DQEBCwUAA4IBAQAnEjqf+fQ4RrF3FoITSKH9HxDL ndFVCweg7jexBd+pX63bJgWx5lVkV5XUBIc+dCpoG3oIoJ0wNsCNKxYu2MdPAYv/ 7LJZWTZbrxlkImgXov6hdFlVRuF6JqKIF82pDMxZdLu2Kpp4ydRL9cUF09kB7M8d z4QIiL4vhBQgdr9RcrDwCRihy5Qg9o5BAYygcQxvHRBBzQzUMEv9Xg05p6uc6UkL rKavgleIoPmIRsCY2zanYfTeMCob0gn5kAogVXB+h+aprXSk8aPR/7RjFGkyDL55 V73BREaQbTOGN+pfDD6gmdL7ZmVaVGeoTLZYGefEwDcSo/Pn7E+WydCg5lPo -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:11 2026 by rpki-client