This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer (raw, json) Hash identifier: g4MO1PAg5vRpv1R1QBKL3l4rTq+4fvnXMISsOedqGE8= Subject key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FFA9AB596395EAF91A5F01990DD1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41192 IP: 195.248.76.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fa:9a:b5:96:39:5e:af:91:a5:f0:19:90:dd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67846b84c7790512281f80c2481be4b30a65d08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:6d:86:f1:ad:15:62:36:62:60:c6:e9:7d: fa:a0:fe:bc:bd:76:eb:1d:f5:8b:28:af:b8:9b:bb: 0a:d0:2c:bc:03:b2:3d:4e:84:e5:aa:21:de:63:b9: d7:62:5d:8d:70:e5:b4:5e:ff:6a:03:c5:bb:68:3f: 58:a3:65:32:8a:0b:bb:8c:0a:ad:a4:ef:6c:2c:27: 56:4a:e8:c5:46:74:cf:a6:2b:41:97:07:2c:dd:f7: d0:db:29:bf:7c:93:9a:8c:8b:36:4d:60:ec:93:9c: 65:ae:4b:8e:46:18:88:27:be:14:cf:7b:db:4b:71: cb:9e:c6:62:ac:8e:94:33:6f:47:4f:07:52:54:c0: a8:96:41:0b:0d:0b:e4:c0:07:8c:5a:4b:17:a9:af: 8f:6a:5b:37:3c:b1:4d:46:b3:0f:54:fe:1e:be:a6: 80:d7:ad:26:db:9a:b9:e1:05:1a:0e:f9:88:d3:9a: 7f:ae:1c:2c:35:e5:62:4e:09:ce:2d:ff:6d:7d:dc: e2:44:a1:d7:c6:7e:3d:20:71:96:8c:0a:7a:cc:6d: 55:3e:1b:a2:d8:7d:86:0a:57:a7:fe:85:77:8d:48: 55:8e:8d:0a:a0:19:6d:6f:43:89:d4:7d:de:0a:aa: 76:f5:aa:af:e4:d0:32:5b:73:d8:4d:d8:b5:de:0b: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.76.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41192 Signature Algorithm: sha256WithRSAEncryption 2a:46:bb:23:45:17:ad:9b:7d:5c:ee:96:62:a9:2d:6a:a9:7d: 6a:7f:a0:f5:8e:18:60:9c:02:73:33:b4:77:2e:00:2e:9e:3d: 5e:9c:cf:49:89:0a:e9:03:6d:68:88:6b:d7:8f:11:40:61:74: cf:c0:e1:ac:f0:f1:40:15:9e:7e:c6:b5:2b:31:cd:05:c7:b1: 55:69:b8:4b:cb:63:8d:61:b6:31:44:28:7f:c6:83:2e:73:44: e2:37:3b:a3:ca:1e:b0:13:20:98:18:96:24:73:76:95:6d:bc: aa:08:2e:f7:d7:fd:f8:e8:03:01:af:0a:11:d2:e9:a6:0c:97: 95:a1:3f:7f:23:56:7f:11:8f:e1:d6:a2:db:15:eb:d8:0c:20: b4:78:84:1f:94:11:b3:ea:cd:bf:27:bd:7f:51:b1:ce:69:ee: aa:d4:3c:a4:4e:7d:25:99:ce:19:dc:8c:4f:08:9f:ea:1e:31: 6d:32:2b:bb:8c:60:90:b2:ab:e0:87:b3:5c:2b:33:4e:66:e7: 4d:05:a7:dc:11:98:27:70:d2:2e:ce:cd:13:80:b6:c3:eb:41: f4:4d:3b:27:00:96:4c:c7:52:1c:e1:1f:45:3b:be:1f:aa:e1: 6a:86:37:92:80:e6:fe:e6:74:a7:f6:d2:f4:7b:c6:70:19:e5: 48:9d:38:f4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5D/qatZY5Xq+RpfAZkN0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzg0NmI4NGM3NzkwNTEyMjgxZjgwYzI0ODFiZTRiMzBhNjVkMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYtthvGtFWI2YmDG6X36oP68vXbr HfWLKK+4m7sK0Cy8A7I9ToTlqiHeY7nXYl2NcOW0Xv9qA8W7aD9Yo2Uyigu7jAqt pO9sLCdWSujFRnTPpitBlwcs3ffQ2ym/fJOajIs2TWDsk5xlrkuORhiIJ74Uz3vb S3HLnsZirI6UM29HTwdSVMColkELDQvkwAeMWksXqa+Pals3PLFNRrMPVP4evqaA 160m25q54QUaDvmI05p/rhwsNeViTgnOLf9tfdziRKHXxn49IHGWjAp6zG1VPhui 2H2GClen/oV3jUhVjo0KoBltb0OJ1H3eCqp29aqv5NAyW3PYTdi13gu/swIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGeEa4THeQUSKB+Awkgb5LMKZdCNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2YzYjhh MC1iZTQzLTQ0ZWUtOGQ1NC04NWEwZDEyMzk5MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZjNiOGEw LWJlNDMtNDRlZS04ZDU0LTg1YTBkMTIzOTkyMy8xL1o0UnJoTWQ1QlJJb0g0RENT QnZrc3dwbDBJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/hMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCg6DANBgkqhkiG9w0BAQsFAAOCAQEAKka7I0UXrZt9XO6WYqktaql9an+g9Y4Y YJwCczO0dy4ALp49XpzPSYkK6QNtaIhr148RQGF0z8DhrPDxQBWefsa1KzHNBcex VWm4S8tjjWG2MUQof8aDLnNE4jc7o8oesBMgmBiWJHN2lW28qggu99f9+OgDAa8K EdLppgyXlaE/fyNWfxGP4dai2xXr2AwgtHiEH5QRs+rNvye9f1GxzmnuqtQ8pE59 JZnOGdyMTwif6h4xbTIru4xgkLKr4IezXCszTmbnTQWn3BGYJ3DSLs7NE4C2w+tB 9E07JwCWTMdSHOEfRTu+H6rhaoY3koDm/uZ0p/bS9HvGcBnlSJ049A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:44 2026 by rpki-client