This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer (raw, json) Hash identifier: Ce/oudF3KK1wSqANF7kDPWLr2s6sy9bi0/7vLp3dzsA= Subject key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9457C2FC5D18D2305B9FB3E011CB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207560 IP: 185.225.226.0/24 IP: 185.237.166.0/24 IP: 2a06:1680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:45:7c:2f:c5:d1:8d:23:05:b9:fb:3e:01:1c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67dbf31d597746c9a1434706062a40653bc545c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:3e:0c:df:f6:5e:ec:65:2f:cd:47:68:6b: e0:f3:c8:de:e7:ae:82:e2:d3:70:e1:17:48:ce:8f: 81:a7:da:de:69:73:6f:ef:7b:1f:a8:6a:8a:83:52: e4:fe:58:25:ee:09:aa:42:1d:1d:bf:31:6b:e6:ea: bb:12:51:2b:ad:bf:9a:7a:c1:88:10:20:11:6a:e4: d6:c4:95:77:49:87:8e:60:3d:39:0b:0c:d6:c3:c9: 8b:fd:36:5e:d4:45:e4:c4:17:fb:c1:bf:92:0d:2f: 88:e7:a7:4d:41:26:fa:94:88:1f:f0:99:91:6c:3e: 8d:a9:94:36:64:aa:35:26:b5:87:b5:3d:4a:45:93: be:fd:82:38:7f:d9:85:37:e3:d3:29:a0:a4:dd:4e: ca:c6:a2:fc:84:b2:9b:52:bf:46:23:8b:03:1a:83: de:f6:7e:a1:5f:9e:c9:2e:dc:d4:a0:de:9d:bd:95: 89:ba:dd:cd:07:00:42:a1:94:f5:d4:a6:70:57:e4: e3:7a:c4:e7:a5:dc:3c:40:67:33:05:50:4a:14:7e: 55:63:26:ea:24:c5:b2:33:9f:83:f4:88:89:f4:cd: dd:13:b6:dd:30:54:6f:e2:4c:07:bd:0e:ed:f6:eb: 6a:45:f4:9c:f7:51:2b:90:24:56:25:c7:52:eb:0e: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.226.0/24 185.237.166.0/24 IPv6: 2a06:1680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207560 Signature Algorithm: sha256WithRSAEncryption 45:fe:25:4c:12:86:ff:42:46:2c:3d:ca:2c:d4:bc:3b:41:34: d7:fa:1e:cf:f6:d1:3f:0d:49:0d:35:3b:c8:31:3f:2c:d4:bf: fa:25:bd:31:26:c1:68:32:1b:7c:c4:8f:05:5e:e9:c0:72:59: b1:ca:2c:1e:df:6f:e8:7d:99:69:0c:6c:41:89:4f:d7:bd:13: 91:28:63:58:81:92:ad:19:42:43:c4:0e:d9:51:db:57:00:e7: c1:22:5f:71:07:50:7d:1e:ee:ae:4d:cb:e0:34:17:6f:e1:f9: 9b:23:c0:53:9a:6d:74:39:32:6d:a7:27:47:c8:17:cf:6f:9d: 47:8a:26:31:88:9d:67:f8:17:6f:f4:6d:d8:c6:91:ff:a0:63: 3b:a4:98:fd:06:0a:fd:ed:09:5e:cd:3a:d5:4f:dd:e1:85:c9: bb:a5:c2:81:12:21:7e:37:40:8c:51:1d:10:16:55:60:c3:78: 16:f6:15:99:a5:cf:77:20:88:88:eb:27:13:57:75:e4:85:69: ec:94:cb:35:cf:26:e9:4b:b9:95:45:bb:86:ab:e9:e0:1c:2d: 94:a9:a9:c6:dc:07:cf:a0:73:f8:97:87:b4:87:62:b8:67:17: b9:61:97:90:f1:5a:29:66:fa:e7:2a:d5:e7:7b:95:f7:37:56: 8f:5d:9b:9b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yUV8L8XRjSMFufs+ARyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RiZjMxZDU5Nzc0NmM5YTE0MzQ3MDYwNjJhNDA2NTNiYzU0NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol4+DN/2XuxlL81HaGvg88je566C 4tNw4RdIzo+Bp9reaXNv73sfqGqKg1Lk/lgl7gmqQh0dvzFr5uq7ElErrb+aesGI ECARauTWxJV3SYeOYD05CwzWw8mL/TZe1EXkxBf7wb+SDS+I56dNQSb6lIgf8JmR bD6NqZQ2ZKo1JrWHtT1KRZO+/YI4f9mFN+PTKaCk3U7KxqL8hLKbUr9GI4sDGoPe 9n6hX57JLtzUoN6dvZWJut3NBwBCoZT11KZwV+TjesTnpdw8QGczBVBKFH5VYybq JMWyM5+D9IiJ9M3dE7bdMFRv4kwHvQ7t9utqRfSc91ErkCRWJcdS6w5J3wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2VjZGIw OS1kNzg2LTQyOWMtYWIyNC0yZmIzZGIxNGU3YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZWNkYjA5 LWQ3ODYtNDI5Yy1hYjI0LTJmYjNkYjE0ZTdhMS8xL1o5dnpIVmwzUnNtaFEwY0dC aXBBWlR2RlJjTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAueHiAwQAue2mMA0EAgACMAcDBQMqBhaAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMqyDANBgkqhkiG9w0BAQsFAAOCAQEARf4l TBKG/0JGLD3KLNS8O0E01/oez/bRPw1JDTU7yDE/LNS/+iW9MSbBaDIbfMSPBV7p wHJZscosHt9v6H2ZaQxsQYlP170TkShjWIGSrRlCQ8QO2VHbVwDnwSJfcQdQfR7u rk3L4DQXb+H5myPAU5ptdDkybacnR8gXz2+dR4omMYidZ/gXb/Rt2MaR/6BjO6SY /QYK/e0JXs061U/d4YXJu6XCgRIhfjdAjFEdEBZVYMN4FvYVmaXPdyCIiOsnE1d1 5IVp7JTLNc8m6Uu5lUW7hqvp4BwtlKmpxtwHz6Bz+JeHtIdiuGcXuWGXkPFaKWb6 5yrV53uV9zdWj12bmw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:39 2026 by rpki-client