This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer (raw, json) Hash identifier: dipNK05L6bmdtdnwEnflRI9a3mgB7fJ3Qc7kphe+KgQ= Subject key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B84E29375275DD3B1F121245C0448 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196904 AS: 199926 AS: 203335 IP: 178.170.238.0 -- 178.170.241.255 IP: 185.16.192.0/22 IP: 193.105.57.0/24 IP: 2a03:dc40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:84:e2:93:75:27:5d:d3:b1:f1:21:24:5c:04:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:46:d7:8d:d6:f3:13:e2:99:ff:45:04:44: ca:3c:76:12:95:c3:8b:d6:f0:17:8f:5a:52:f6:3c: 03:74:fb:ad:c9:6f:65:c8:41:ea:57:11:2d:da:2c: f3:17:7d:34:f3:cf:08:1a:44:e9:72:cf:2d:7e:4a: 31:b4:85:76:0e:f9:74:f7:46:a5:2e:3a:10:ec:df: b6:6f:4c:17:5b:86:df:97:ae:e5:36:87:eb:13:b8: ff:4d:8d:51:9d:f7:32:fa:f2:d5:07:f4:ed:45:39: 31:e7:76:03:b3:b9:75:58:8c:07:ff:a2:36:bd:3f: 88:45:06:c3:63:30:58:57:42:65:1b:c6:5e:e4:97: db:c2:11:03:1c:2e:0e:14:28:c0:72:40:b3:35:7d: 2d:9f:da:a4:9a:e7:01:cb:ca:5c:e8:b0:b8:7a:2e: dc:b9:c2:e7:c4:ba:9a:d0:78:3d:aa:a9:a6:80:bc: 98:7c:a5:64:a3:4f:1e:43:31:2c:f0:f6:71:40:31: a3:c0:7f:e7:e9:24:94:82:a1:10:0b:0e:55:28:2a: 81:22:a3:e0:89:c4:23:56:08:36:bb:4a:ab:1e:2f: 5c:24:2f:5b:df:90:c3:b5:07:08:c7:33:94:7b:8c: 38:1d:40:21:13:6c:7d:bd:5f:52:fc:aa:cc:53:04: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.238.0-178.170.241.255 185.16.192.0/22 193.105.57.0/24 IPv6: 2a03:dc40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196904 199926 203335 Signature Algorithm: sha256WithRSAEncryption 8f:7b:73:be:ce:62:6c:b4:b3:d7:22:65:50:6a:7f:ae:3e:27: 56:b8:cd:2e:d6:12:d2:c9:d4:d5:a5:d9:63:8c:c0:57:f0:bb: 46:53:1c:b8:54:a5:e9:d7:cb:34:46:f0:2d:d7:b0:30:a5:98: 20:9d:6c:49:e4:81:46:cd:8b:25:7c:73:3c:93:3c:1f:7b:97: ae:c1:99:06:fe:94:5d:9b:6e:7a:74:05:ae:71:3d:5f:cd:73: cc:17:43:25:0a:62:a1:20:5f:95:83:bd:0b:db:ea:4f:7f:92: 2d:0f:9a:57:b4:30:7c:29:b9:5e:ab:0b:98:11:17:a1:b7:51: 28:a8:d2:d5:3a:cc:71:d6:dd:9d:9a:ce:14:e2:1c:12:88:59: 5c:c0:d1:b6:7e:42:5e:7a:78:d1:77:07:b5:53:70:96:2e:de: 36:8b:a2:ea:70:d3:18:48:eb:d9:ae:33:f3:f5:9b:54:e7:2a: e0:e3:2f:fa:54:09:34:b3:ce:85:82:6a:58:bc:89:46:32:b6: 84:64:b5:24:56:09:bd:f8:c1:84:af:31:0c:92:54:54:c0:60: 76:ab:31:90:7d:eb:9d:89:ec:02:cd:88:b3:a5:99:99:84:3c: 73:e6:2b:f4:65:38:f0:90:41:ab:1e:f9:a1:0a:82:48:75:67: 33:49:a2:ff -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt6W4Tik3UnXdOx8SEkXARIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2I2MmRiYWVjZDM1OWE0YTJhODkxMmNmMmU2NjkzYjJmNDhjOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRG143W8xPimf9FBETKPHYSlcOL 1vAXj1pS9jwDdPutyW9lyEHqVxEt2izzF300888IGkTpcs8tfkoxtIV2Dvl090al LjoQ7N+2b0wXW4bfl67lNofrE7j/TY1Rnfcy+vLVB/TtRTkx53YDs7l1WIwH/6I2 vT+IRQbDYzBYV0JlG8Ze5JfbwhEDHC4OFCjAckCzNX0tn9qkmucBy8pc6LC4ei7c ucLnxLqa0Hg9qqmmgLyYfKVko08eQzEs8PZxQDGjwH/n6SSUgqEQCw5VKCqBIqPg icQjVgg2u0qrHi9cJC9b35DDtQcIxzOUe4w4HUAhE2x9vV9S/KrMUwRLBQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFGe2Lbrs01mkoqiRLPLmaTsvSMnvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzkwYjlk Ni1hNmFkLTQ0YTYtOTFhMi0yODFlZWUzMWI3NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvOTBiOWQ2 LWE2YWQtNDRhNi05MWEyLTI4MWVlZTMxYjc0Ny8xL1o3WXR1dXpUV2FTaXFKRXM4 dVpwT3k5SXllOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaMAwDBAGyqu4DBAGyqvADBAK5EMADBADBaTkwDQQC AAIwBwMFACoD3EAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAwEoAgMDDPYCAwMa RzANBgkqhkiG9w0BAQsFAAOCAQEAj3tzvs5ibLSz1yJlUGp/rj4nVrjNLtYS0snU 1aXZY4zAV/C7RlMcuFSl6dfLNEbwLdewMKWYIJ1sSeSBRs2LJXxzPJM8H3uXrsGZ Bv6UXZtuenQFrnE9X81zzBdDJQpioSBflYO9C9vqT3+SLQ+aV7QwfCm5XqsLmBEX obdRKKjS1TrMcdbdnZrOFOIcEohZXMDRtn5CXnp40XcHtVNwli7eNoui6nDTGEjr 2a4z8/WbVOcq4OMv+lQJNLPOhYJqWLyJRjK2hGS1JFYJvfjBhK8xDJJUVMBgdqsx kH3rnYnsAs2Is6WZmYQ8c+Yr9GU48JBBqx75oQqCSHVnM0mi/w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:45 2026 by rpki-client