This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer (raw, json) Hash identifier: TGq6I6icaqBmiOa4tjha0+ZOfiCgC90dTl8kqHNh3AE= Subject key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1558BBE11D9CF7AF16D4AF5BE3BDE4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43007 IP: 91.194.28.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:58:bb:e1:1d:9c:f7:af:16:d4:af:5b:e3:bd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:05:c0:4a:50:29:40:3c:4b:5d:b4:40:19: bd:87:9a:a7:c0:5c:a9:85:22:91:ee:ca:89:9c:3f: c9:90:ca:59:4a:76:e3:fe:e3:45:0c:ed:6c:19:86: d9:ac:a2:78:75:a0:34:4f:b7:54:31:c3:e3:fe:06: b3:94:a3:63:17:eb:4f:d1:6c:60:0f:28:e3:ef:9f: 78:59:cd:46:77:b9:ac:13:3d:1d:fe:c9:b6:44:c1: e7:b3:dd:73:36:86:eb:f7:74:84:46:43:f2:a4:bc: 98:c3:fc:00:89:e6:f5:7a:57:54:9b:92:dc:0c:58: 37:cc:27:7f:bf:fb:99:ad:07:20:f0:08:7e:4d:70: b1:5c:42:ae:3d:d0:2a:2d:f9:7c:8d:bb:da:43:82: 1c:4c:62:58:c3:1c:0a:7b:fc:76:09:91:15:9b:1d: 0f:57:4f:f7:03:3d:9f:4b:b3:df:8b:17:11:e6:3a: 41:91:8c:e0:5c:67:b7:1a:91:2a:b4:ed:73:a0:11: 60:13:c3:db:86:6c:a3:a5:9a:50:2b:73:f3:a8:94: 86:91:a4:2f:d7:2d:5b:2d:de:d9:33:9f:79:c7:f7: ca:d8:8f:7e:61:df:0f:e9:ab:9b:d9:18:51:50:77: 0b:38:29:28:63:07:0f:8b:e9:52:2d:97:8a:a5:36: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.28.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43007 Signature Algorithm: sha256WithRSAEncryption 84:89:3f:19:2d:62:4b:fe:47:78:03:ad:06:e1:7e:85:41:7b: b9:eb:2a:f9:1b:8b:00:f4:ba:c2:91:61:9c:9c:16:7c:45:b4: ed:8f:4b:dc:7f:0b:46:db:7d:41:18:55:6d:6e:56:8b:d1:ed: 5d:a8:2f:3b:96:f2:5d:55:20:d4:4b:34:33:63:d8:f1:6d:d9: aa:86:5e:2c:15:b3:d0:2c:07:87:8f:ed:15:ec:ed:52:3a:5f: 32:2e:2a:d2:29:20:82:8e:02:a8:03:fc:4b:52:a3:05:ff:b0: b6:dc:f1:87:5d:4f:2b:bb:5f:95:c6:a1:fd:2c:4f:7e:c3:36: 04:6f:3a:a4:64:74:cc:d2:07:2a:1e:04:8c:73:11:0c:38:40: 24:a1:36:b1:fa:66:30:5f:13:85:68:96:e6:2a:19:02:33:47: fe:a1:f8:f5:18:04:77:34:99:1e:70:d9:48:43:31:dd:ba:a5: ef:7f:d4:38:de:a7:0f:2c:f5:ae:23:b7:c2:37:e9:a6:13:40: 9e:58:53:f9:09:7a:a2:18:7c:d3:39:96:e1:7b:fa:49:19:e7: 2d:c5:60:26:e7:73:63:d2:ce:4e:4a:6d:3c:b0:af:ad:18:e6: dc:6a:dd:38:b5:4e:ee:33:1c:0e:26:d9:92:da:96:35:5f:3d: f7:fe:76:db -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FVi74R2c968W1K9b473kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2QwNDVjMTNjMDNkY2IzNzNkMmE3ZDg1ZDFlMDFiNmUwYWM3ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAgFwEpQKUA8S120QBm9h5qnwFyp hSKR7sqJnD/JkMpZSnbj/uNFDO1sGYbZrKJ4daA0T7dUMcPj/gazlKNjF+tP0Wxg Dyjj7594Wc1Gd7msEz0d/sm2RMHns91zNobr93SERkPypLyYw/wAieb1eldUm5Lc DFg3zCd/v/uZrQcg8Ah+TXCxXEKuPdAqLfl8jbvaQ4IcTGJYwxwKe/x2CZEVmx0P V0/3Az2fS7PfixcR5jpBkYzgXGe3GpEqtO1zoBFgE8PbhmyjpZpQK3PzqJSGkaQv 1y1bLd7ZM595x/fK2I9+Yd8P6aub2RhRUHcLOCkoYwcPi+lSLZeKpTYVwwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGfQRcE8A9yzc9Kn2F0eAbbgrH4cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzJlNGYz Zi01NTI2LTQ1MjAtODMxMy0xNmZmNzIzYWYzMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvMmU0ZjNm LTU1MjYtNDUyMC04MzEzLTE2ZmY3MjNhZjMzNS8xL1o5QkZ3VHdEM0xOejBxZllY UjRCdHVDc2Zody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8IcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCn/zANBgkqhkiG9w0BAQsFAAOCAQEAhIk/GS1iS/5HeAOtBuF+hUF7uesq+RuL APS6wpFhnJwWfEW07Y9L3H8LRtt9QRhVbW5Wi9HtXagvO5byXVUg1Es0M2PY8W3Z qoZeLBWz0CwHh4/tFeztUjpfMi4q0ikggo4CqAP8S1KjBf+wttzxh11PK7tflcah /SxPfsM2BG86pGR0zNIHKh4EjHMRDDhAJKE2sfpmMF8ThWiW5ioZAjNH/qH49RgE dzSZHnDZSEMx3bql73/UON6nDyz1riO3wjfpphNAnlhT+Ql6ohh80zmW4Xv6SRnn LcVgJudzY9LOTkptPLCvrRjm3GrdOLVO7jMcDibZktqWNV899/522w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:47 2026 by rpki-client