This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer (raw, json) Hash identifier: koLjP7IBgPXhyzh4T84+sa+gOilxQ5eOGA5lfeF2SNQ= Subject key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758FC0229A3941229C3A35AE17B14DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.132.103.0/24 IP: 2a13:2600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fc:02:29:a3:94:12:29:c3:a3:5a:e1:7b:14:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=646836c9214faaa16798a93e8773e599534b29d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:7e:8c:db:4d:d1:6c:d1:6a:9e:1f:a7:2f: 0f:1b:dc:82:04:b3:b9:02:ab:e0:35:be:04:35:a9: 19:74:9f:52:a9:ca:91:3a:f3:e2:5a:78:9a:dc:f7: 66:46:87:04:79:f2:ba:46:22:d6:58:97:0a:d4:fd: da:0b:30:c9:b6:b4:c7:27:cc:20:d5:ea:3d:88:32: 80:ec:65:f3:91:d0:3a:02:fe:5b:30:af:df:31:99: 99:ce:da:9a:89:c9:d1:bf:b6:e8:30:69:3e:85:5a: 2d:99:6f:ab:6e:d4:32:29:1f:b3:84:30:7e:13:db: 48:99:be:2f:8f:67:e6:87:e4:b0:38:c0:25:39:44: d1:8f:8b:5f:5b:7c:50:09:31:b3:ab:6f:f5:33:12: 4e:3b:fd:90:b4:41:d7:28:59:96:2a:36:67:af:8a: f4:f8:07:11:e4:32:2e:15:ee:4f:41:c8:33:c1:ea: e5:4f:12:d6:f1:4a:b1:25:b1:65:e2:11:02:49:39: 1f:1c:c8:ef:2d:6d:4d:8c:48:d3:c2:8a:1b:9e:e9: 5b:d5:1d:b1:70:6b:46:18:40:5b:7b:ae:b6:83:55: 95:26:06:53:d8:77:60:e7:f8:3f:c7:de:79:1b:ac: 30:8d:24:be:82:3c:02:44:e4:59:32:53:fa:4b:ca: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.103.0/24 IPv6: 2a13:2600::/29 Signature Algorithm: sha256WithRSAEncryption 78:db:86:0c:50:b6:7b:8d:8f:af:ee:82:b9:6e:b3:63:76:7d: a8:0b:40:56:3c:b4:9c:55:f5:1c:1e:39:82:a1:21:0e:b9:d8: c2:3a:c9:c5:a2:14:c8:44:38:86:2a:b1:d7:06:ef:cd:04:19: 93:a0:2b:29:2d:28:a0:22:ac:eb:59:a5:9a:57:87:9c:aa:c8: 84:bf:1f:0c:be:36:d5:ed:66:0c:72:2b:8d:c9:41:fa:08:c6: 46:89:72:5b:28:ba:ec:e7:e4:12:a4:55:bb:86:07:d6:de:a1: 2d:0c:06:d7:bc:ce:87:cc:3f:11:83:22:a7:ff:6d:09:c7:2b: 11:9f:a7:8b:9b:5e:75:45:e8:7a:64:12:2d:d9:cb:c0:c3:8e: d6:3c:9e:d1:88:66:ef:a1:0c:c9:2c:3b:ac:92:38:4e:86:12: 73:2f:98:90:5d:da:3e:0a:1b:22:dd:fb:39:07:7d:60:25:45: c0:19:9d:f9:c3:07:22:56:94:b4:00:73:43:5c:ec:31:90:db: b2:44:f3:d3:53:f6:28:f8:27:15:87:fd:48:cd:8a:bb:1e:f9: 47:e8:0f:45:33:24:e2:7e:28:37:1d:f5:7e:4e:2f:70:b6:ea: 8e:ef:86:4c:b9:61:76:d6:63:a8:69:ca:aa:77:b9:0c:6b:fb: e7:10:f2:38 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WPwCKaOUEinDo1rhexTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDY4MzZjOTIxNGZhYWExNjc5OGE5M2U4NzczZTU5OTUzNGIyOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaJ+jNtN0WzRap4fpy8PG9yCBLO5 AqvgNb4ENakZdJ9SqcqROvPiWnia3PdmRocEefK6RiLWWJcK1P3aCzDJtrTHJ8wg 1eo9iDKA7GXzkdA6Av5bMK/fMZmZztqaicnRv7boMGk+hVotmW+rbtQyKR+zhDB+ E9tImb4vj2fmh+SwOMAlOUTRj4tfW3xQCTGzq2/1MxJOO/2QtEHXKFmWKjZnr4r0 +AcR5DIuFe5PQcgzwerlTxLW8UqxJbFl4hECSTkfHMjvLW1NjEjTwoobnulb1R2x cGtGGEBbe662g1WVJgZT2Hdg5/g/x955G6wwjSS+gjwCRORZMlP6S8oHpwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGRoNskhT6qhZ5ipPodz5ZlTSynXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzNkOTQ3 ZC01ODgxLTQyZTYtYjM1Zi01ZTgyMmYzMTA2MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvM2Q5NDdk LTU4ODEtNDJlNi1iMzVmLTVlODIyZjMxMDYzOC8xL1pHZzJ5U0ZQcXFGbm1Lay1o M1BsbVZOTEtkYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW4RnMA0EAgACMAcDBQMqEyYAMA0GCSqGSIb3 DQEBCwUAA4IBAQB424YMULZ7jY+v7oK5brNjdn2oC0BWPLScVfUcHjmCoSEOudjC OsnFohTIRDiGKrHXBu/NBBmToCspLSigIqzrWaWaV4ecqsiEvx8MvjbV7WYMciuN yUH6CMZGiXJbKLrs5+QSpFW7hgfW3qEtDAbXvM6HzD8RgyKn/20JxysRn6eLm151 Reh6ZBIt2cvAw47WPJ7RiGbvoQzJLDuskjhOhhJzL5iQXdo+Chsi3fs5B31gJUXA GZ35wwciVpS0AHNDXOwxkNuyRPPTU/Yo+CcVh/1IzYq7HvlH6A9FMyTifig3HfV+ Ti9wtuqO74ZMuWF21mOoacqqd7kMa/vnEPI4 -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:35 2026 by rpki-client