This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer (raw, json) Hash identifier: bhXQhqtA2WryoAsO7atHaMloCH2HKDS/BtsiukKVWZM= Subject key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38657F2DA8DAE81DB00DF6CEBD6EBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44399 IP: 185.252.72.0/22 IP: 2a0c:2340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:65:7f:2d:a8:da:e8:1d:b0:0d:f6:ce:bd:6e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:8c:36:f5:83:ea:d0:2b:83:2a:52:95:dc: 59:6c:20:a5:d3:51:b2:42:94:dd:d0:5f:06:aa:62: 4c:8b:f2:ee:e8:d7:7a:27:f9:79:77:00:fe:16:1e: 6f:05:22:45:1b:8b:b0:5e:ef:dd:e0:03:b6:d5:ed: 61:d2:6d:a1:3e:f5:4f:5f:2c:18:90:9d:43:8f:bd: 20:1b:ae:bd:a0:02:8c:2b:86:5f:ec:c8:6d:f1:9f: 89:53:94:52:d5:65:15:58:cd:15:98:12:5a:34:67: 1f:3e:65:aa:90:9c:52:13:35:e9:49:6d:25:f5:63: 99:1d:5d:c3:e6:d5:a3:2d:de:65:ad:f6:c4:54:eb: cd:d4:07:1b:eb:f5:71:8b:4c:85:28:09:bf:35:12: 1d:c5:cb:fb:d8:c4:eb:37:09:ae:65:6f:bc:db:76: be:21:d9:c8:ae:c0:2f:57:e4:3e:63:88:55:66:71: 3b:9d:8f:25:48:d2:d6:fe:7f:d8:b5:87:82:c5:10: 35:5e:d3:41:e6:84:a1:88:5b:a6:d1:0c:f8:5f:3f: 52:7d:ac:ba:aa:b4:30:9b:4e:35:8b:7c:66:ee:43: 10:36:0a:25:6f:b4:38:55:75:83:3e:5e:e7:96:36: ae:dc:bb:8b:d3:90:5e:30:16:ec:17:9c:a0:b6:53: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.72.0/22 IPv6: 2a0c:2340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44399 Signature Algorithm: sha256WithRSAEncryption 5f:6c:05:6b:26:7d:3e:1c:83:c0:94:82:ad:ca:84:fe:19:df: 5f:ad:ea:99:d1:fc:22:83:1d:34:0a:ae:dc:a6:a2:0c:41:3a: e0:36:35:c1:ac:f3:d5:bc:6e:e7:f5:92:5e:3f:fd:02:48:9a: cd:d4:b7:95:59:ff:53:4e:50:92:c4:19:4c:b9:e8:0a:d7:89: 30:5b:34:f6:7f:52:44:8c:99:2e:26:e8:47:d4:d7:a8:67:6b: ca:c2:08:60:83:bc:1b:ef:5c:56:2c:e7:7c:38:2b:57:90:2b: d6:7f:96:c2:2e:ff:03:fc:21:46:36:19:2d:63:67:d8:31:29: bb:0a:cb:e4:24:7d:19:05:19:db:7d:24:f5:9b:fb:be:64:0c: db:8a:11:2a:24:91:64:46:76:bd:9a:15:55:ff:f5:8d:27:c4: 68:e4:05:29:8d:2e:07:3b:c6:b1:0b:89:43:86:65:60:b8:2f: d0:98:40:c0:26:7e:79:f5:a1:a7:ab:f0:49:1a:d4:ed:8c:15: a3:8f:6f:67:5a:73:34:53:0d:39:5d:8b:7d:c5:25:1b:8f:a1: ca:2f:01:f7:19:77:98:9e:76:0d:f4:70:a6:28:2d:e0:98:f3: f7:a0:a8:cd:b3:bf:4e:2f:06:e0:b2:c5:7d:6d:31:99:e2:89: 23:76:78:65 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OGV/Laja6B2wDfbOvW69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2QzNGZjMDMwMDJlYWE3ZjM2YjJlN2U2MzVlZGE4YzMwYzQ4Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkduMNvWD6tArgypSldxZbCCl01Gy QpTd0F8GqmJMi/Lu6Nd6J/l5dwD+Fh5vBSJFG4uwXu/d4AO21e1h0m2hPvVPXywY kJ1Dj70gG669oAKMK4Zf7Mht8Z+JU5RS1WUVWM0VmBJaNGcfPmWqkJxSEzXpSW0l 9WOZHV3D5tWjLd5lrfbEVOvN1Acb6/Vxi0yFKAm/NRIdxcv72MTrNwmuZW+823a+ IdnIrsAvV+Q+Y4hVZnE7nY8lSNLW/n/YtYeCxRA1XtNB5oShiFum0Qz4Xz9Sfay6 qrQwm041i3xm7kMQNgolb7Q4VXWDPl7nljau3LuL05BeMBbsF5ygtlOVMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGfTT8AwAuqn82sufmNe2owwxIKEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzI5OWQ2 MS02Yjk2LTQwNTQtOThhMy1kYzQyYzc2OTNkZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMjk5ZDYx LTZiOTYtNDA1NC05OGEzLWRjNDJjNzY5M2RmOS8xL1o5TlB3REFDNnFmemF5NS1Z MTdhakRERWdvUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufxIMA0EAgACMAcDBQMqDCNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCtbzANBgkqhkiG9w0BAQsFAAOCAQEAX2wFayZ9PhyD wJSCrcqE/hnfX63qmdH8IoMdNAqu3KaiDEE64DY1wazz1bxu5/WSXj/9AkiazdS3 lVn/U05QksQZTLnoCteJMFs09n9SRIyZLiboR9TXqGdrysIIYIO8G+9cViznfDgr V5Ar1n+Wwi7/A/whRjYZLWNn2DEpuwrL5CR9GQUZ230k9Zv7vmQM24oRKiSRZEZ2 vZoVVf/1jSfEaOQFKY0uBzvGsQuJQ4ZlYLgv0JhAwCZ+efWhp6vwSRrU7YwVo49v Z1pzNFMNOV2LfcUlG4+hyi8B9xl3mJ52DfRwpigt4Jjz96CozbO/Ti8G4LLFfW0x meKJI3Z4ZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:57 2026 by rpki-client