This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer File: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer (raw, json) Hash identifier: 2RKaUnMQnmiH0eisnaC1gNAGLl4QKGoGeKDAW3xCXVs= Subject key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D47A8CE553AFAB2327AD8E361111 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60235 IP: 88.218.108.0/22 IP: 185.139.96.0/22 IP: 2a07:1580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d4:7a:8c:e5:53:af:ab:23:27:ad:8e:36:11:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:87:3b:f0:1e:60:16:01:b5:fd:15:d2:ef:34: f1:8b:00:21:f8:d6:1d:d6:3b:cd:a9:f0:dd:27:c7: 26:b9:6c:34:52:81:6c:d4:6d:92:34:3a:5b:17:02: 6e:92:7d:28:00:0c:d4:05:6c:9f:fe:9c:10:72:5b: 87:0f:d3:ec:bf:6a:4f:5e:90:aa:13:5a:14:92:ec: e7:eb:61:8f:17:a1:81:6f:40:9e:50:26:95:ce:31: 08:25:dc:03:da:c7:60:b7:3a:3b:7a:a8:b3:58:f5: 2c:84:c9:3d:b1:cc:ef:5c:e9:a9:d4:f0:f7:b4:83: d8:be:88:32:a0:d3:2e:3b:66:f8:bc:bf:66:3c:fe: df:e0:e3:d2:c9:e4:21:dc:78:60:62:6d:e2:f9:28: c2:ed:40:87:2c:ae:6c:f3:f2:ec:e9:f7:ea:43:f3: 4e:bf:3d:5b:e8:90:ea:de:a9:7e:d2:47:03:e1:a3: 18:e9:6c:eb:0e:2a:40:9c:22:ca:d4:9d:be:86:4b: 9d:51:4c:2a:0d:c4:aa:2f:01:22:94:a6:6a:c3:ca: b7:eb:02:3a:a3:0c:46:b1:9f:f3:6d:79:ea:79:c3: bc:1b:8e:70:53:29:2f:05:50:2c:90:89:d2:e6:8b: 0a:78:a2:d2:cd:bb:a7:58:9e:ab:8b:d9:a4:03:89: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.108.0/22 185.139.96.0/22 IPv6: 2a07:1580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60235 Signature Algorithm: sha256WithRSAEncryption 43:d0:a0:7c:72:32:b8:17:09:24:5a:3d:09:d8:e3:e9:ef:cb: d6:ee:5f:a3:fb:ac:cf:93:f1:1d:72:51:ca:23:56:4d:c9:12: 48:b9:2c:08:d1:67:b7:a8:39:cb:ac:37:60:94:f7:6f:c5:c1: 5e:bf:44:db:a6:5a:dd:34:f3:7f:f4:89:e4:66:fb:68:36:01: b4:91:ad:cd:be:02:eb:03:bc:74:49:0c:47:c9:51:db:b4:74: a8:2b:ab:d4:12:f6:cd:de:fd:56:1d:c0:0b:69:7d:b6:70:f3: 0d:98:ad:f8:fd:f0:24:bf:92:0a:55:5d:01:af:da:a4:ac:43: 34:be:b5:cc:a5:86:69:6c:a5:42:ff:83:b0:ff:28:90:d2:78: c8:1e:07:29:a4:02:dc:5e:24:5f:a5:df:08:a4:42:36:ba:28: 8d:b2:b8:9e:46:ba:78:85:08:00:eb:81:8c:44:2b:a9:27:21: 47:98:85:91:2c:22:b6:7d:61:4d:92:98:0d:f7:b5:81:47:da: d4:47:b3:3e:32:40:91:a9:66:42:b0:6d:60:88:c8:2a:29:eb: ce:7a:21:f6:29:0c:dd:07:b5:55:a5:de:39:94:da:6b:a5:f8: c1:32:a2:09:88:b1:f1:70:5d:90:cc:90:14:aa:da:e3:7b:00: ac:44:fd:0b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NdR6jOVTr6sjJ62ONhERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzc3OTg3YjRmMWMxN2QyMTQ2NWEzNGE5MGJkMDJiNTJlYTZlMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ic78B5gFgG1/RXS7zTxiwAh+NYd 1jvNqfDdJ8cmuWw0UoFs1G2SNDpbFwJukn0oAAzUBWyf/pwQcluHD9Psv2pPXpCq E1oUkuzn62GPF6GBb0CeUCaVzjEIJdwD2sdgtzo7eqizWPUshMk9sczvXOmp1PD3 tIPYvogyoNMuO2b4vL9mPP7f4OPSyeQh3HhgYm3i+SjC7UCHLK5s8/Ls6ffqQ/NO vz1b6JDq3ql+0kcD4aMY6WzrDipAnCLK1J2+hkudUUwqDcSqLwEilKZqw8q36wI6 owxGsZ/zbXnqecO8G45wUykvBVAskInS5osKeKLSzbunWJ6ri9mkA4mp/QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGd3mHtPHBfSFGWjSpC9ArUupuAnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzBiYmU3 Yy03OGRjLTQ4NWQtYjIyNS0xNWU3MzgxMWU5NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMGJiZTdj LTc4ZGMtNDg1ZC1iMjI1LTE1ZTczODExZTk1Ni8xL1ozZVllMDhjRjlJVVphTktr TDBDdFM2bTRDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCWNpsAwQCuYtgMA0EAgACMAcDBQMqBxWAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDrSzANBgkqhkiG9w0BAQsFAAOCAQEAQ9Cg fHIyuBcJJFo9Cdjj6e/L1u5fo/usz5PxHXJRyiNWTckSSLksCNFnt6g5y6w3YJT3 b8XBXr9E26Za3TTzf/SJ5Gb7aDYBtJGtzb4C6wO8dEkMR8lR27R0qCur1BL2zd79 Vh3AC2l9tnDzDZit+P3wJL+SClVdAa/apKxDNL61zKWGaWylQv+DsP8okNJ4yB4H KaQC3F4kX6XfCKRCNroojbK4nka6eIUIAOuBjEQrqSchR5iFkSwitn1hTZKYDfe1 gUfa1EezPjJAkalmQrBtYIjIKinrznoh9ikM3Qe1VaXeOZTaa6X4wTKiCYix8XBd kMyQFKra43sArET9Cw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:52 2026 by rpki-client