This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer (raw, json) Hash identifier: BUrZ4Gidi4ZJhij2Sj/HmDY1BtAQFQBEbOLEWKKnvq0= Subject key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA34E084BCC9614BACF2D0B7A3F9D8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199476 IP: 194.39.244.0/24 IP: 2a13:9d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4e:08:4b:cc:96:14:ba:cf:2d:0b:7a:3f:9d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6765a21b561ba8665cf79fbf44c31959de28f216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:b6:4e:56:f0:99:d5:a6:29:aa:a0:08:04: 3c:ef:a9:e4:34:df:2a:97:53:1e:a3:a3:cf:d8:8a: 2e:59:f9:74:03:88:58:8b:2a:a1:7c:e6:52:72:a9: 75:f5:34:be:04:7a:02:0c:31:f0:e2:47:cf:cc:a5: f9:f6:4e:31:c3:1e:66:b1:58:da:91:3e:a4:c9:87: ec:4f:d1:e7:60:0f:7b:98:5d:27:0a:3f:a6:48:b1: 77:67:42:03:72:a0:62:94:d7:e6:25:1e:17:57:60: d8:cd:ec:6e:fc:ef:0b:1e:25:8d:fe:d1:54:a4:d6: 36:e4:f2:da:9d:bd:c7:bd:c9:63:f7:f7:b8:48:9d: 3f:60:4a:94:96:ca:86:c7:b8:f6:23:79:13:5a:31: fa:86:74:ae:ba:e3:92:c0:3f:33:a3:ca:e3:0e:cf: e9:42:8f:7f:b3:34:54:65:0e:05:91:62:6e:1e:33: 28:e9:92:1d:5d:5b:ce:10:f8:c0:0a:d1:90:9a:90: 2f:fb:e3:66:fa:f0:8b:95:30:9e:65:87:14:7d:7d: 93:52:8d:67:51:ed:c9:1f:95:d1:4c:ef:c4:f8:81: b4:12:72:4a:94:5b:22:70:d3:59:d4:cb:da:fc:bf: e9:19:e8:d8:de:e7:11:e3:75:ca:7a:64:90:25:4f: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.244.0/24 IPv6: 2a13:9d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199476 Signature Algorithm: sha256WithRSAEncryption a4:e2:78:8e:91:69:5e:c9:b7:06:25:12:9c:ce:8c:d1:cf:56: 48:b6:92:82:9e:3e:31:43:90:62:ef:d0:7b:ee:e4:6f:89:35: 7c:b7:fc:ef:a3:b3:c9:8b:8a:58:03:d4:0a:c4:80:a0:d9:d9: a5:0a:9e:15:b8:2e:d5:11:25:f4:be:3d:89:73:c2:04:c9:bc: 16:40:64:a1:0c:49:ea:f5:83:d1:de:d1:14:ac:c0:f1:c5:ec: 53:2e:55:04:31:a1:1b:c3:92:e6:b0:af:d9:ca:9a:0a:a7:dd: 6e:1c:c4:20:0a:f7:09:75:f6:ac:57:f1:44:e9:41:db:3e:23: 03:f7:7d:da:9a:d4:6f:94:5b:d0:a3:24:43:2a:68:f8:2e:0e: 9f:d5:2a:2a:96:06:b1:f0:a3:f9:be:88:50:e2:cf:b8:6e:db: 14:36:57:a1:2a:5d:78:4d:64:1e:aa:1d:31:ca:e2:67:e0:db: b9:1a:9e:45:da:1a:1f:ea:fc:8b:12:a4:78:78:8c:88:c8:85: 8c:dd:59:e5:3e:54:62:f3:0d:67:13:bd:5c:90:d4:b0:ce:a6: 40:a4:2d:86:b6:ff:7d:ff:e5:ff:e5:a0:7b:cb:b9:f8:3a:12: 67:1f:2f:7d:68:44:9d:bc:c2:d6:f0:60:12:57:f4:ff:5a:61: 8d:23:f8:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o04IS8yWFLrPLQt6P52KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzY1YTIxYjU2MWJhODY2NWNmNzlmYmY0NGMzMTk1OWRlMjhmMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/S2TlbwmdWmKaqgCAQ876nkNN8q l1Meo6PP2IouWfl0A4hYiyqhfOZScql19TS+BHoCDDHw4kfPzKX59k4xwx5msVja kT6kyYfsT9HnYA97mF0nCj+mSLF3Z0IDcqBilNfmJR4XV2DYzexu/O8LHiWN/tFU pNY25PLanb3Hvclj9/e4SJ0/YEqUlsqGx7j2I3kTWjH6hnSuuuOSwD8zo8rjDs/p Qo9/szRUZQ4FkWJuHjMo6ZIdXVvOEPjACtGQmpAv++Nm+vCLlTCeZYcUfX2TUo1n Ue3JH5XRTO/E+IG0EnJKlFsicNNZ1Mva/L/pGejY3ucR43XKemSQJU8kQwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGdlohtWG6hmXPefv0TDGVneKPIWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2U4Yjg5 Yy04MjY4LTQwMmItYWEyNi1lYWQwNDE3NzRlMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZThiODlj LTgyNjgtNDAyYi1hYTI2LWVhZDA0MTc3NGUwNy8xL1oyV2lHMVlicUdaYzk1LV9S TU1aV2Q0bzhoWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwif0MA0EAgACMAcDBQMqE52AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLNDANBgkqhkiG9w0BAQsFAAOCAQEApOJ4jpFpXsm3 BiUSnM6M0c9WSLaSgp4+MUOQYu/Qe+7kb4k1fLf876OzyYuKWAPUCsSAoNnZpQqe Fbgu1REl9L49iXPCBMm8FkBkoQxJ6vWD0d7RFKzA8cXsUy5VBDGhG8OS5rCv2cqa CqfdbhzEIAr3CXX2rFfxROlB2z4jA/d92prUb5Rb0KMkQypo+C4On9UqKpYGsfCj +b6IUOLPuG7bFDZXoSpdeE1kHqodMcriZ+DbuRqeRdoaH+r8ixKkeHiMiMiFjN1Z 5T5UYvMNZxO9XJDUsM6mQKQthrb/ff/l/+Wge8u5+DoSZx8vfWhEnbzC1vBgElf0 /1phjSP4fg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:20 2026 by rpki-client