This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer (raw, json) Hash identifier: HmryNrnEuiqpxfdJ4UtUz3Eq1G1ZDF4ogme/wq0soh0= Subject key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C809D68E71107B63E638B81E8F52AD9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39027 IP: 91.200.232.0/22 IP: 178.216.8.0/23 IP: 195.66.140.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9d:68:e7:11:07:b6:3e:63:8b:81:e8:f5:2a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=678c923ae3ace3a10860d1f817a8d750c15354c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:5b:8d:95:13:4a:8d:2e:e5:28:61:0e:b5: 14:98:d2:14:df:d8:4f:c1:33:14:31:1f:07:05:0f: 08:3d:6f:c5:87:ca:cc:b3:89:93:d1:3e:78:9e:ff: 45:3f:10:cb:75:7d:63:d3:2a:01:37:94:98:ee:79: d1:53:f9:c6:8d:3a:73:68:f9:be:e2:0f:73:56:73: 95:eb:90:e0:16:9b:17:bb:d1:fe:ac:b3:00:7e:19: 38:14:c9:14:b8:c9:76:3e:44:98:97:4e:71:25:a3: 85:11:f4:65:57:a2:ac:f1:78:3f:b8:f6:0e:1c:81: 20:3f:46:23:44:a2:f6:6f:c3:da:00:5f:9a:17:a4: a6:57:e4:c6:c4:a3:6a:88:69:9c:fe:70:a1:0b:9c: 69:1c:72:9e:e0:2a:df:2f:7b:9b:ea:9a:c8:cc:fb: e4:52:4f:67:4c:0e:f2:e6:52:e9:72:07:83:24:15: 04:52:d6:53:34:dd:1b:81:a2:cd:33:d4:68:08:fb: 5d:ca:3b:b7:9e:06:63:b1:9d:3a:cb:2e:ea:06:2f: 1d:8c:b1:a8:44:29:b6:e6:60:5d:87:07:7d:15:a5: b0:08:36:bf:e2:78:69:d7:ed:73:a1:6a:38:d3:66: f2:65:a0:85:53:c6:a1:de:ae:4b:75:e6:31:98:4a: 16:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.232.0/22 178.216.8.0/23 195.66.140.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39027 Signature Algorithm: sha256WithRSAEncryption 54:5c:4e:1a:7a:01:b0:b9:89:7f:19:80:3e:87:90:02:2d:0f: 6e:b5:f1:19:99:38:62:bb:88:25:59:fd:17:9a:e9:15:61:f9: c2:57:e8:18:c7:62:97:65:12:e8:6b:ca:44:71:11:cb:14:77: 94:44:f9:20:91:34:c6:a8:78:2d:b7:eb:51:ed:41:2b:13:ee: 59:2a:91:ea:d7:9d:44:0d:11:f5:03:4d:5b:11:6f:3e:41:78: c2:36:00:08:55:90:58:5b:ee:3a:ab:4b:ab:90:0a:83:e1:76: 86:bc:7b:a4:d5:28:e0:e8:ee:e2:78:42:68:52:74:18:98:04: e2:91:98:e5:c9:ac:be:20:60:27:4b:db:11:4e:6f:85:cf:da: 16:04:e2:36:ba:75:e0:c9:1b:4e:26:a6:6c:15:76:ba:44:09: d8:ea:b8:08:ed:7d:79:6b:17:7b:dc:db:88:cf:99:68:3e:ba: 7b:f6:c5:0f:bd:16:66:30:14:1c:37:1a:3d:38:32:f2:11:8f: 46:f6:45:7b:95:f6:6a:10:f8:7f:3e:08:5e:63:df:95:3c:eb: fa:d4:05:43:f5:36:f8:c2:77:f0:91:05:44:da:65:76:fc:fe: 72:8e:18:1d:15:6b:1d:93:76:ae:ba:9a:23:c6:99:c3:c6:18: 0d:22:31:f9 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt8gJ1o5xEHtj5ji4Ho9SrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzhjOTIzYWUzYWNlM2ExMDg2MGQxZjgxN2E4ZDc1MGMxNTM1NGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvJbjZUTSo0u5ShhDrUUmNIU39hP wTMUMR8HBQ8IPW/Fh8rMs4mT0T54nv9FPxDLdX1j0yoBN5SY7nnRU/nGjTpzaPm+ 4g9zVnOV65DgFpsXu9H+rLMAfhk4FMkUuMl2PkSYl05xJaOFEfRlV6Ks8Xg/uPYO HIEgP0YjRKL2b8PaAF+aF6SmV+TGxKNqiGmc/nChC5xpHHKe4CrfL3ub6prIzPvk Uk9nTA7y5lLpcgeDJBUEUtZTNN0bgaLNM9RoCPtdyju3ngZjsZ06yy7qBi8djLGo RCm25mBdhwd9FaWwCDa/4nhp1+1zoWo402byZaCFU8ah3q5LdeYxmEoWOwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFGeMkjrjrOOhCGDR+Beo11DBU1TEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzgxYTAx OS0yMTM3LTQ2NDYtYmM2OS1kYjBkNjE2YTg4OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvODFhMDE5 LTIxMzctNDY0Ni1iYzY5LWRiMGQ2MTZhODg5MS8xL1o0eVNPdU9zNDZFSVlOSDRG NmpYVU1GVFZNUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW8joAwQBstgIAwQBw0KMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCYczANBgkqhkiG9w0BAQsFAAOCAQEAVFxOGnoBsLmJfxmA PoeQAi0PbrXxGZk4YruIJVn9F5rpFWH5wlfoGMdil2US6GvKRHERyxR3lET5IJE0 xqh4LbfrUe1BKxPuWSqR6tedRA0R9QNNWxFvPkF4wjYACFWQWFvuOqtLq5AKg+F2 hrx7pNUo4Oju4nhCaFJ0GJgE4pGY5cmsviBgJ0vbEU5vhc/aFgTiNrp14MkbTiam bBV2ukQJ2Oq4CO19eWsXe9zbiM+ZaD66e/bFD70WZjAUHDcaPTgy8hGPRvZFe5X2 ahD4fz4IXmPflTzr+tQFQ/U2+MJ38JEFRNpldvz+co4YHRVrHZN2rrqaI8aZw8YY DSIx+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:14 2026 by rpki-client