This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer File: Z7xlI-d4s702dMb5intsaL8Kju4.cer (raw, json) Hash identifier: mp1Ou801P0YN6YATbDBmg15YyelEro27PiJT7fH60aE= Subject key identifier: 67:BC:65:23:E7:78:B3:BD:36:74:C6:F9:8A:7B:6C:68:BF:0A:8E:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA5745DE66E54E6BECB5D04EC885685F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:46:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.109.95.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:57:45:de:66:e5:4e:6b:ec:b5:d0:4e:c8:85:68:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:46:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67bc6523e778b3bd3674c6f98a7b6c68bf0a8eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:23:a5:2c:ae:e4:90:5b:a8:4c:fe:d7:80: 8b:6f:1f:01:3f:ab:b8:1b:c8:d2:24:c0:e0:37:90: f8:a8:7c:8a:34:da:59:8a:2a:4b:fd:9b:74:35:53: 5c:e1:82:a9:c9:50:1d:a0:a8:67:27:c2:3e:5e:7c: cc:a8:92:2b:22:29:85:0d:f2:8e:93:63:92:c2:2e: 12:9a:78:00:c8:f7:e8:a8:fe:cd:13:6b:31:72:d5: 1a:1e:0c:68:cd:73:f0:62:85:d7:1a:85:86:65:be: ca:17:84:cb:f2:95:d6:ac:1c:bf:51:0d:22:3c:02: 95:b6:7a:e6:4c:57:3b:33:1e:3d:7d:3b:d1:0b:f6: 8c:51:7c:95:30:8c:8b:49:c8:04:70:ee:17:f5:60: ad:43:eb:02:e2:af:62:4a:f5:6a:74:29:3b:f8:e6: 65:29:55:b8:e4:dc:f9:35:3e:a0:4f:b0:d8:97:24: 7b:00:81:04:80:e2:f3:d7:d5:3c:17:5d:2a:4c:93: fc:0f:ca:8a:2d:3c:57:f4:c3:90:1e:78:18:1e:dc: 44:74:ff:f7:0d:db:3e:ca:f0:28:58:d4:e7:0f:22: 9d:25:b0:b6:a7:3b:6e:34:34:b7:4c:51:1b:87:f8: dc:ac:f8:e9:f8:2e:a0:b4:49:27:5e:f7:25:a7:63: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BC:65:23:E7:78:B3:BD:36:74:C6:F9:8A:7B:6C:68:BF:0A:8E:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.95.0/24 Signature Algorithm: sha256WithRSAEncryption 79:a4:6e:d4:56:e6:97:ad:56:d6:6d:a1:16:85:39:4b:e3:72: 5c:e0:22:bf:a1:87:97:79:15:dc:4a:c0:09:cb:46:5e:0c:9f: c3:af:b0:db:c2:99:4b:75:6f:6f:5f:6b:61:52:b5:92:fb:d2: 3d:73:b1:71:b2:30:81:9c:c7:ae:b2:15:81:fb:1c:0d:45:03: 55:79:b3:c5:81:db:73:07:e5:b5:d3:7e:02:f4:b1:10:02:63: fb:e1:67:f3:ab:70:43:89:f9:03:c6:b7:91:45:5d:f3:4e:0e: 3a:85:cc:88:a8:ad:d3:42:b2:b7:17:a3:69:11:b7:a2:7e:14: 70:c0:bb:68:d1:ac:fd:2d:c5:e0:d9:7a:e3:6d:9e:43:25:4c: 91:1c:9f:6c:db:e1:f3:8c:19:b5:7b:21:62:ab:79:cd:d3:31: 83:ac:4b:60:94:23:47:b0:ee:d6:9f:9e:bc:7e:b9:ca:f3:4d: 9a:07:20:86:04:a2:60:d8:0e:6a:16:7e:c9:ae:19:80:a4:3c: e9:8d:9e:a5:fd:b2:15:a2:09:90:fd:8e:a2:a3:cb:7a:55:05: 4a:8b:09:ae:3b:f9:dd:7e:03:26:a8:72:ac:23:16:cb:75:e3: 3c:14:8c:67:94:59:5f:d8:df:5c:22:76:94:72:cd:29:67:48: bd:d6:db:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6V0XeZuVOa+y10E7IhWhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTI0NjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2JjNjUyM2U3NzhiM2JkMzY3NGM2Zjk4YTdiNmM2OGJmMGE4ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEwjpSyu5JBbqEz+14CLbx8BP6u4 G8jSJMDgN5D4qHyKNNpZiipL/Zt0NVNc4YKpyVAdoKhnJ8I+XnzMqJIrIimFDfKO k2OSwi4SmngAyPfoqP7NE2sxctUaHgxozXPwYoXXGoWGZb7KF4TL8pXWrBy/UQ0i PAKVtnrmTFc7Mx49fTvRC/aMUXyVMIyLScgEcO4X9WCtQ+sC4q9iSvVqdCk7+OZl KVW45Nz5NT6gT7DYlyR7AIEEgOLz19U8F10qTJP8D8qKLTxX9MOQHngYHtxEdP/3 Dds+yvAoWNTnDyKdJbC2pztuNDS3TFEbh/jcrPjp+C6gtEknXvclp2PQQwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGe8ZSPneLO9NnTG+Yp7bGi/Co7uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2Q4Yzg2 OC05NjBmLTQzMzQtYTE0Ni0yYjg3NTZhMDk4ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvZDhjODY4 LTk2MGYtNDMzNC1hMTQ2LTJiODc1NmEwOThlYy8xL1o3eGxJLWQ0czcwMmRNYjVp bnRzYUw4S2p1NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwG1fMA0GCSqGSIb3DQEBCwUAA4IBAQB5pG7U VuaXrVbWbaEWhTlL43Jc4CK/oYeXeRXcSsAJy0ZeDJ/Dr7DbwplLdW9vX2thUrWS +9I9c7FxsjCBnMeushWB+xwNRQNVebPFgdtzB+W1034C9LEQAmP74Wfzq3BDifkD xreRRV3zTg46hcyIqK3TQrK3F6NpEbeifhRwwLto0az9LcXg2XrjbZ5DJUyRHJ9s 2+HzjBm1eyFiq3nN0zGDrEtglCNHsO7Wn568frnK802aByCGBKJg2A5qFn7JrhmA pDzpjZ6l/bIVogmQ/Y6io8t6VQVKiwmuO/ndfgMmqHKsIxbLdeM8FIxnlFlf2N9c InaUcs0pZ0i91tvz -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client