This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer File: ZnKfnQeG9ooezVxakrw5LYaRl14.cer (raw, json) Hash identifier: M05G96BENJg7SM5PUVRKCTIz3Evl5wLb64pFrcwpXPQ= Subject key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E53D01059771F4A94132CC1750B2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.226.168.0/22 IP: 2a09:fbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:53:d0:10:59:77:1f:4a:94:13:2c:c1:75:0b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:8d:5c:b8:21:cf:63:c7:17:5e:09:55:c8: bd:8b:6e:65:b7:39:62:be:1c:a5:8c:0f:23:a7:7d: 54:73:e8:12:b5:92:03:22:70:fc:e8:ba:1d:ab:83: 37:16:e7:72:0b:97:2a:9e:18:c7:b3:0f:4e:6b:4e: 2d:97:04:63:1a:40:1b:42:ad:37:bd:ba:73:33:c7: 0f:ae:69:e7:e7:b0:fe:b7:e5:0a:52:90:70:97:cd: 10:d6:90:f1:1a:a1:35:fe:62:8e:d6:27:34:a4:22: e5:7c:81:ce:4f:24:27:67:b7:6f:5d:df:e6:46:18: 64:83:c7:e8:b1:62:5f:ee:54:1f:1c:a3:a2:5e:8e: 7a:13:91:4a:ad:f3:b2:3e:bb:95:8b:6b:5e:3b:c6: 65:87:04:9a:5d:71:d0:36:95:9c:73:a8:25:e2:2c: 31:23:76:00:3f:85:87:70:41:92:ed:c2:f8:cf:3d: 1b:96:8b:d7:c9:52:b6:a8:31:6e:5d:95:eb:d1:d6: 78:ab:fe:f4:08:df:cb:94:59:2c:33:b7:27:03:53: fc:f6:c4:ef:4f:f3:a6:f3:87:48:d2:33:22:63:36: b4:ff:73:c8:19:d7:0f:56:67:40:39:0e:0c:b4:b0: 7c:fe:fc:7e:96:93:f5:23:a2:60:d9:76:8d:f5:2c: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.168.0/22 IPv6: 2a09:fbc0::/29 Signature Algorithm: sha256WithRSAEncryption 7d:e9:bd:a6:f8:2d:3f:bd:16:f1:41:20:fd:74:d5:b4:3b:0a: dd:72:6d:fe:2f:41:d9:65:b4:2a:9b:d9:86:82:f5:d8:d5:5d: a1:59:7c:80:25:89:1b:da:e3:4d:a4:5c:86:78:9a:a6:0d:b9: 10:c1:a3:9d:d6:a7:39:4c:30:5a:7c:53:51:58:c8:23:1b:57: b2:55:e8:45:d4:cb:9a:ea:b1:7e:89:a6:59:f3:ee:6b:b2:f7: 86:74:83:5b:ce:75:d9:a1:db:fb:dc:77:c1:82:01:08:a1:07: fa:cf:b8:fe:3a:ae:26:3f:11:40:8d:68:7c:18:f4:89:b3:fe: b2:0e:f6:6a:7f:7d:0f:43:73:8c:d5:b1:5a:d9:46:2f:86:ec: 06:f0:32:29:b4:98:5f:9a:cf:93:76:85:cd:6c:b1:fd:b4:7a: a5:b0:11:ad:f1:96:0f:cd:25:84:f3:e6:f3:d5:16:fa:08:b2: 33:4c:a0:3e:c0:3b:c8:29:02:7a:3e:39:8a:d0:20:9d:93:a9: e3:58:8b:c5:9a:f8:f4:31:a2:75:9a:87:67:c4:2e:8c:dc:68: 29:79:7f:90:ec:e3:41:54:11:09:df:bd:9a:37:da:81:c4:7f: ea:9f:e8:72:30:96:47:b3:fe:b9:90:14:8a:48:a9:8e:fe:7f: ab:dd:49:17 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5flPQEFl3H0qUEyzBdQsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjcyOWY5ZDA3ODZmNjhhMWVjZDVjNWE5MmJjMzkyZDg2OTE5NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz+NXLghz2PHF14JVci9i25ltzli vhyljA8jp31Uc+gStZIDInD86Lodq4M3FudyC5cqnhjHsw9Oa04tlwRjGkAbQq03 vbpzM8cPrmnn57D+t+UKUpBwl80Q1pDxGqE1/mKO1ic0pCLlfIHOTyQnZ7dvXd/m Rhhkg8fosWJf7lQfHKOiXo56E5FKrfOyPruVi2teO8ZlhwSaXXHQNpWcc6gl4iwx I3YAP4WHcEGS7cL4zz0blovXyVK2qDFuXZXr0dZ4q/70CN/LlFksM7cnA1P89sTv T/Om84dI0jMiYza0/3PIGdcPVmdAOQ4MtLB8/vx+lpP1I6Jg2XaN9SyBIwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGZyn50HhvaKHs1cWpK8OS2GkZdeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzM4NGQw My1mNDc5LTRiYjItYThhZC1hZDUxMGUwNWRhOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvMzg0ZDAz LWY0NzktNGJiMi1hOGFkLWFkNTEwZTA1ZGE5Mi8xL1puS2ZuUWVHOW9vZXpWeGFr cnc1TFlhUmwxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueKoMA0EAgACMAcDBQMqCfvAMA0GCSqGSIb3 DQEBCwUAA4IBAQB96b2m+C0/vRbxQSD9dNW0Owrdcm3+L0HZZbQqm9mGgvXY1V2h WXyAJYkb2uNNpFyGeJqmDbkQwaOd1qc5TDBafFNRWMgjG1eyVehF1Mua6rF+iaZZ 8+5rsveGdINbznXZodv73HfBggEIoQf6z7j+Oq4mPxFAjWh8GPSJs/6yDvZqf30P Q3OM1bFa2UYvhuwG8DIptJhfms+TdoXNbLH9tHqlsBGt8ZYPzSWE8+bz1Rb6CLIz TKA+wDvIKQJ6PjmK0CCdk6njWIvFmvj0MaJ1modnxC6M3GgpeX+Q7ONBVBEJ372a N9qBxH/qn+hyMJZHs/65kBSKSKmO/n+r3UkX -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:38 2026 by rpki-client