This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer File: Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer (raw, json) Hash identifier: 5Hzi9HcJ7oO1HDuyz1UuJxdpHq0Ge0jNJAuHt7KtD94= Subject key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A6BB8CF238213DB669D8DE57C28D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44491 AS: 51957 AS: 198201 IP: 62.182.8.0/21 IP: 91.221.156.0/23 IP: 185.30.104.0/22 IP: 195.182.57.0/24 IP: 2a00:5180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a6:bb:8c:f2:38:21:3d:b6:69:d8:de:57:c2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:9b:bf:d4:47:41:82:03:91:78:d4:29:4f: 54:ac:b3:03:fa:5e:38:0b:92:06:aa:63:8a:cd:4d: fc:85:d6:5c:93:e5:dc:d9:fb:c3:95:5c:82:bc:0e: 62:32:c7:6f:b5:34:d4:a4:7a:0f:02:b6:16:73:49: a5:35:e5:c4:cd:19:54:3a:d8:d6:96:33:b0:ca:53: e2:43:de:18:7f:f1:06:94:e1:6c:ee:24:0e:78:da: 9c:0a:85:f1:d3:9a:d7:84:2a:0b:88:46:06:31:79: c9:92:e6:fd:d3:c9:87:bc:c1:ac:c5:3a:e2:61:26: 46:0c:e6:88:93:f0:f6:2b:d2:8a:60:c6:73:5b:c8: a2:c4:1e:15:44:29:8e:15:ac:5d:f1:9f:38:92:88: 4f:78:6e:55:64:17:c7:22:bc:88:cc:21:0c:c9:ec: 98:a9:22:bf:33:5a:a2:07:80:c6:ee:fe:9a:f5:97: ab:d6:47:70:4c:71:a5:65:7d:c4:b8:42:01:dd:28: 64:81:93:62:63:10:8d:4a:3c:c1:17:4b:26:ee:50: a8:30:e6:d0:80:9c:00:50:47:2f:c4:ec:7d:6b:5e: d5:5d:91:76:a2:86:3d:82:ce:bf:54:65:17:c2:7d: cc:76:2a:a5:a2:0f:09:88:dc:14:66:be:fe:a7:e0: 2d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.8.0/21 91.221.156.0/23 185.30.104.0/22 195.182.57.0/24 IPv6: 2a00:5180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44491 51957 198201 Signature Algorithm: sha256WithRSAEncryption 28:c5:85:f9:e0:31:88:03:52:03:e5:cd:0d:5e:67:b0:9e:27: 2c:a0:68:d0:35:f9:70:71:d0:7a:c8:22:9f:26:82:57:63:49: 25:ae:31:22:cd:f2:2f:25:19:c2:ed:66:82:a4:15:08:03:07: b1:60:ea:2d:df:1a:ed:98:07:a0:35:ac:a6:55:e4:18:a7:a0: fc:ec:75:0f:87:e5:90:06:98:8b:ef:80:c1:67:aa:4b:03:ce: 96:d9:c8:26:3f:eb:5e:63:66:8f:6f:96:2a:ab:25:89:f2:43: e1:11:bf:90:11:2a:c8:64:ce:26:fe:4e:5b:85:a2:5c:17:75: 2d:44:52:2f:75:f7:05:4b:be:39:f2:0e:43:a8:df:d2:99:0d: ad:de:5d:c1:35:bc:62:b4:1d:29:09:be:ee:33:d8:8b:d9:1c: 64:fa:ff:d0:a4:e9:3a:b4:54:cf:04:ee:1e:64:cf:87:35:ce: 28:d2:56:f3:45:0d:e6:f2:3d:44:3c:96:38:57:c0:3d:1b:89: 05:b5:a7:f8:fa:b9:c9:84:40:c5:ed:26:65:46:aa:bc:43:ec: 98:96:33:e4:dd:58:bd:18:29:b2:60:e2:6f:bc:b1:32:10:94: a1:d6:67:43:73:26:88:8d:c0:be:77:04:42:b8:d4:0e:5e:a2: 96:74:3d:38 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt3WKa7jPI4IT22adjeV8KNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2FmOTAxNGIwZGVkZDJjMDQ4NDBhZTM4NWI1MzM5ZjZjNjc5MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGbv9RHQYIDkXjUKU9UrLMD+l44 C5IGqmOKzU38hdZck+Xc2fvDlVyCvA5iMsdvtTTUpHoPArYWc0mlNeXEzRlUOtjW ljOwylPiQ94Yf/EGlOFs7iQOeNqcCoXx05rXhCoLiEYGMXnJkub908mHvMGsxTri YSZGDOaIk/D2K9KKYMZzW8iixB4VRCmOFaxd8Z84kohPeG5VZBfHIryIzCEMyeyY qSK/M1qiB4DG7v6a9Zer1kdwTHGlZX3EuEIB3ShkgZNiYxCNSjzBF0sm7lCoMObQ gJwAUEcvxOx9a17VXZF2ooY9gs6/VGUXwn3Mdiqlog8JiNwUZr7+p+AtTQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFGevkBSw3t0sBIQK44W1M59sZ5D1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzdjNjZi MC1jODA4LTQ1YTEtOWI1MC01ZTc1OGU4MWVmZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvN2M2NmIw LWM4MDgtNDVhMS05YjUwLTVlNzU4ZTgxZWZmNi8xL1o2LVFGTERlM1N3RWhBcmpo YlV6bjJ4bmtQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDPrYIAwQBW92cAwQCuR5oAwQAw7Y5MA0EAgAC MAcDBQAqAFGAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCtywIDAMr1AgMDBjkw DQYJKoZIhvcNAQELBQADggEBACjFhfngMYgDUgPlzQ1eZ7CeJyygaNA1+XBx0HrI Ip8mgldjSSWuMSLN8i8lGcLtZoKkFQgDB7Fg6i3fGu2YB6A1rKZV5BinoPzsdQ+H 5ZAGmIvvgMFnqksDzpbZyCY/615jZo9vliqrJYnyQ+ERv5ARKshkzib+TluFolwX dS1EUi919wVLvjnyDkOo39KZDa3eXcE1vGK0HSkJvu4z2IvZHGT6/9Ck6Tq0VM8E 7h5kz4c1zijSVvNFDebyPUQ8ljhXwD0biQW1p/j6ucmEQMXtJmVGqrxD7JiWM+Td WL0YKbJg4m+8sTIQlKHWZ0NzJoiNwL53BEK41A5eopZ0PTg= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:08 2026 by rpki-client