This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer (raw, json) Hash identifier: 6rfCKvw0SU2/qlRjUjIFm53J11CYxU3CDFtx/0cxIFs= Subject key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82EC0FEFD5DFFAB17DB9A419CB95D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49683 IP: 31.25.234.0 -- 31.25.239.255 IP: 171.22.172.0/22 IP: 185.44.64.0/22 IP: 185.85.240.0/22 IP: 185.116.236.0/22 IP: 185.122.164.0/22 IP: 185.168.192.0/22 IP: 185.184.68.0/22 IP: 185.189.56.0/22 IP: 2a0a:2f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ec:0f:ef:d5:df:fa:b1:7d:b9:a4:19:cb:95:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662f55d377127f28ce26b78fd83becf41becad4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:da:66:02:e1:9a:53:00:57:3b:2d:cb:7d: fa:81:51:ac:67:95:76:34:a7:cb:6f:84:18:41:ee: 46:06:54:4f:c7:f7:ed:be:1c:34:ac:5c:83:24:cf: aa:79:46:4f:be:e7:5e:13:02:aa:3d:9d:f6:ba:dc: db:85:2d:d9:2a:5e:d2:41:29:7e:c0:a4:6e:da:03: 01:99:e8:06:73:19:f5:76:d0:12:90:0e:63:28:32: 87:02:8d:46:6b:54:60:d6:db:7f:59:48:0d:ae:59: a9:7d:d9:57:8d:31:13:43:98:22:8a:05:4b:3b:8c: fb:f2:47:91:bb:50:f9:3f:c4:d7:7d:a9:e2:58:59: 0c:15:b0:67:29:52:a1:c7:63:d5:e4:8d:1e:cd:52: 61:04:14:7f:11:ff:b7:14:2d:bd:f4:c3:24:24:d2: a1:33:ab:be:4e:9a:e6:09:15:35:7a:9f:6c:16:81: 9c:ba:ac:94:8c:5f:ee:26:79:57:f8:6c:36:de:65: ef:42:6d:39:fd:ce:0f:03:b8:db:44:20:4d:98:3c: 2d:98:41:97:d9:d6:c6:09:d0:59:4d:77:49:0c:76: c7:12:5c:b8:f3:93:6d:a7:5a:c4:35:4d:9d:04:55: 0c:ce:43:ac:fb:70:57:f6:f2:89:5e:d9:47:ba:4e: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.234.0-31.25.239.255 171.22.172.0/22 185.44.64.0/22 185.85.240.0/22 185.116.236.0/22 185.122.164.0/22 185.168.192.0/22 185.184.68.0/22 185.189.56.0/22 IPv6: 2a0a:2f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49683 Signature Algorithm: sha256WithRSAEncryption 2f:67:18:2c:6e:23:24:39:fe:40:fb:ce:f5:64:1f:21:aa:2b: 2e:ca:bc:8a:64:27:5e:87:fa:f6:b2:9a:e2:8d:ec:bb:fe:8a: cf:b3:d1:fd:75:aa:74:bf:1f:13:c5:f8:8b:d1:53:52:d5:f8: 27:f5:90:da:af:68:59:cb:5e:75:14:f5:42:26:f5:c2:8a:7c: 0b:14:8e:30:87:17:b6:f0:a8:a5:24:75:cd:2f:ea:a7:3a:7e: d3:2c:08:eb:81:3f:11:95:e1:0d:bc:1a:82:70:65:76:29:58: 03:e9:2a:c8:91:06:a9:54:a8:5f:cd:1c:f8:d1:38:37:0b:c9: 8b:c5:82:17:f0:31:31:99:3a:85:c4:79:2a:24:4c:73:f7:f2: bf:de:e9:44:ad:bb:ee:b6:50:ff:cf:d0:f0:e5:3d:4e:2d:c0: 76:09:60:c1:46:8a:82:fe:83:64:a4:00:1f:1d:36:e6:2f:00: 55:b9:1e:e9:5a:46:9b:fc:a2:df:81:e5:d8:89:01:c3:75:2e: 37:49:d7:ff:60:6b:c1:ee:8d:d4:60:5b:7a:1c:81:d3:41:ea: 8f:c1:c2:e4:88:02:f5:d0:d5:7e:a0:d6:11:47:33:42:1e:6b: ac:8e:c2:68:5f:05:4d:92:3b:f1:81:be:4d:38:50:e0:47:d4: 0b:eb:1c:10 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt/guwP79Xf+rF9uaQZy5XSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjJmNTVkMzc3MTI3ZjI4Y2UyNmI3OGZkODNiZWNmNDFiZWNhZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHaZgLhmlMAVzsty336gVGsZ5V2 NKfLb4QYQe5GBlRPx/ftvhw0rFyDJM+qeUZPvudeEwKqPZ32utzbhS3ZKl7SQSl+ wKRu2gMBmegGcxn1dtASkA5jKDKHAo1Ga1Rg1tt/WUgNrlmpfdlXjTETQ5giigVL O4z78keRu1D5P8TXfaniWFkMFbBnKVKhx2PV5I0ezVJhBBR/Ef+3FC299MMkJNKh M6u+TprmCRU1ep9sFoGcuqyUjF/uJnlX+Gw23mXvQm05/c4PA7jbRCBNmDwtmEGX 2dbGCdBZTXdJDHbHEly485Ntp1rENU2dBFUMzkOs+3BX9vKJXtlHuk5h/wIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFGYvVdN3En8ozia3j9g77PQb7K1LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzM4OGM3 MC1lNGM3LTQyMGQtODE4OC04YmUxNDYyNTMzNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMzg4Yzcw LWU0YzctNDIwZC04MTg4LThiZTE0NjI1MzM1Ni8xL1ppOVYwM2NTZnlqT0pyZVAy RHZzOUJ2c3JVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTBEBAIAATA+MAwDBAEfGeoDBAQfGeADBAKrFqwDBAK5LEADBAK5 VfADBAK5dOwDBAK5eqQDBAK5qMADBAK5uEQDBAK5vTgwDQQCAAIwBwMFAyoKLwAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMITMA0GCSqGSIb3DQEBCwUAA4IBAQAv ZxgsbiMkOf5A+871ZB8hqisuyryKZCdeh/r2sprijey7/orPs9H9dap0vx8TxfiL 0VNS1fgn9ZDar2hZy151FPVCJvXCinwLFI4whxe28KilJHXNL+qnOn7TLAjrgT8R leENvBqCcGV2KVgD6SrIkQapVKhfzRz40Tg3C8mLxYIX8DExmTqFxHkqJExz9/K/ 3ulErbvutlD/z9Dw5T1OLcB2CWDBRoqC/oNkpAAfHTbmLwBVuR7pWkab/KLfgeXY iQHDdS43Sdf/YGvB7o3UYFt6HIHTQeqPwcLkiAL10NV+oNYRRzNCHmusjsJoXwVN kjvxgb5NOFDgR9QL6xwQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:43 2026 by rpki-client