This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer (raw, json) Hash identifier: 02JDyn4UTRkUjCUe4EclCaAzuq9UWRQ4KMVz8FGWvjE= Subject key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A348377F375233C903B283DAE6DF32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34653 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:48:37:7f:37:52:33:c9:03:b2:83:da:e6:df:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6790960ac4ba271502f1738a59490856f1975b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:06:22:84:94:ba:28:ed:52:47:e9:14:39: 04:98:ec:ca:e9:34:3f:e8:21:86:11:d9:e3:d5:ed: 15:c0:7a:a7:15:6c:c5:3a:5e:c5:c6:79:72:b0:1e: fe:6e:d5:da:3c:c6:9b:99:32:65:8a:90:a5:a1:3f: e9:b6:de:28:32:74:88:0b:0c:25:1d:88:98:dd:e6: e7:3e:a6:07:83:5c:70:ec:90:d5:c1:7e:23:06:17: 2e:73:4b:bf:13:f6:48:5d:b9:cb:67:ed:9b:b3:94: 6e:56:14:d7:59:d7:2f:5a:14:75:79:70:43:2b:af: 35:92:e6:36:77:f9:a0:c6:29:1e:d2:c9:ca:c3:2c: 8c:30:75:8c:1e:14:25:84:cf:55:17:e8:0b:72:7a: 40:63:6f:61:84:85:ad:95:21:5e:9c:4b:5b:a4:0f: 32:2f:46:e8:28:d9:75:06:7e:e4:7c:8c:1a:5a:6a: dc:9a:fc:c5:9a:43:4d:72:ce:4c:9c:81:ec:ad:c1: b1:bf:01:59:0a:5b:fe:0e:ed:98:b8:f2:be:eb:ff: c1:44:e5:2a:fa:4c:68:a9:b0:6e:bf:f9:1a:e3:d7: f6:0e:c0:d3:10:50:08:e0:bf:40:bb:b6:af:99:e9: 88:b0:dd:37:b2:56:a2:11:76:11:c5:4f:d9:ed:1e: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 34653 Signature Algorithm: sha256WithRSAEncryption 17:85:5a:f9:57:34:31:4e:c3:5b:85:a0:ba:93:47:2a:7e:a9: f0:72:ed:2c:41:f2:3a:14:31:9f:75:e5:8a:08:02:0b:00:f8: c3:93:52:1c:62:a0:e3:47:f0:c4:c7:84:69:6e:68:8b:ef:c5: 27:38:e3:ee:7e:43:7b:a2:0c:38:36:d5:24:ab:ca:c2:78:e1: 09:6b:bf:69:87:b1:be:4f:04:3d:0b:35:c7:cd:d8:2b:1d:7d: aa:97:ac:32:8a:bf:55:43:b7:d2:9a:9b:4c:93:e9:67:16:49: 91:b0:a0:a0:5c:53:08:88:96:40:0b:52:c1:76:24:92:f8:0c: 05:98:e9:bb:12:a6:4a:44:e2:1b:94:86:02:f7:4f:4e:6c:16: e1:a7:56:32:d9:95:73:84:0f:d1:bb:9a:3f:64:81:ad:7b:be: 58:62:09:04:15:4d:fa:71:31:a8:cd:63:27:fe:e9:5f:e4:66: 2a:9f:e0:64:77:31:86:31:4a:a8:2e:74:00:8c:86:cd:52:5d: d5:82:4a:9b:80:81:de:d3:d6:77:63:e1:9f:e0:6e:20:5d:ec: fb:92:5a:d7:91:94:8d:62:d9:07:0f:c9:4f:c5:ca:c2:0b:7b: 55:b3:64:51:be:5a:55:d7:76:6b:8c:db:c0:9c:cf:43:9f:f9: 1d:a3:a5:72 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o0g3fzdSM8kDsoPa5t8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzkwOTYwYWM0YmEyNzE1MDJmMTczOGE1OTQ5MDg1NmYxOTc1YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZYGIoSUuijtUkfpFDkEmOzK6TQ/ 6CGGEdnj1e0VwHqnFWzFOl7FxnlysB7+btXaPMabmTJlipCloT/ptt4oMnSICwwl HYiY3ebnPqYHg1xw7JDVwX4jBhcuc0u/E/ZIXbnLZ+2bs5RuVhTXWdcvWhR1eXBD K681kuY2d/mgxike0snKwyyMMHWMHhQlhM9VF+gLcnpAY29hhIWtlSFenEtbpA8y L0boKNl1Bn7kfIwaWmrcmvzFmkNNcs5MnIHsrcGxvwFZClv+Du2YuPK+6//BROUq +kxoqbBuv/ka49f2DsDTEFAI4L9Au7avmemIsN03slaiEXYRxU/Z7R5kPwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGeQlgrEuicVAvFzillJCFbxl1sfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2M5NzUy Ny02ZmQyLTRlNzMtYWM1Zi05MjgyOGIxNTMyMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYzk3NTI3 LTZmZDItNGU3My1hYzVmLTkyODI4YjE1MzIxMC8xL1o1Q1dDc1M2SnhVQzhYT0tX VWtJVnZHWFd4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCHXTANBgkqhkiG9w0BAQsFAAOCAQEAF4Va+Vc0MU7D W4WgupNHKn6p8HLtLEHyOhQxn3XliggCCwD4w5NSHGKg40fwxMeEaW5oi+/FJzjj 7n5De6IMODbVJKvKwnjhCWu/aYexvk8EPQs1x83YKx19qpesMoq/VUO30pqbTJPp ZxZJkbCgoFxTCIiWQAtSwXYkkvgMBZjpuxKmSkTiG5SGAvdPTmwW4adWMtmVc4QP 0buaP2SBrXu+WGIJBBVN+nExqM1jJ/7pX+RmKp/gZHcxhjFKqC50AIyGzVJd1YJK m4CB3tPWd2Phn+BuIF3s+5Ja15GUjWLZBw/JT8XKwgt7VbNkUb5aVdd2a4zbwJzP Q5/5HaOlcg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:07 2026 by rpki-client