This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer File: _0zNsS_CLrhX-GxWWovFFR0FMrA.cer (raw, json) Hash identifier: OZu084YCcAcm+iqx2DYFR/uIoxc2avYxbYwKGJvQN/o= Subject key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B368DB0DC8535C702AC2A71E099B9D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 129.206.0.0/16 IP: 147.142.0.0/16 IP: 192.100.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8d:b0:dc:85:35:c7:02:ac:2a:71:e0:99:b9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:cc:5a:35:13:90:cf:95:b7:33:c8:68:72: 95:f0:00:b3:61:da:0c:8e:14:ff:d2:33:c5:db:bd: a5:51:0b:ee:41:e6:2f:f5:5c:dd:e8:fa:d3:22:a0: c5:0e:67:2c:76:7f:be:e3:62:ef:c8:ba:52:ec:21: bd:26:73:9b:13:36:ab:d7:45:da:34:0b:c3:45:80: 50:2a:af:c9:03:a0:18:39:68:76:64:fb:31:e3:a9: 7e:5d:ac:06:d7:1a:9c:13:b5:ee:37:5c:b2:ad:d6: e1:ba:d1:66:12:a5:ed:e5:63:b0:53:61:88:7e:d1: 02:54:99:c7:19:a1:69:64:07:19:3d:9f:52:02:0b: 12:46:f5:44:b0:f2:59:54:06:e4:6f:d4:b6:f4:7d: 71:84:b7:3f:9e:4b:21:4e:ec:e3:8b:29:59:8b:b4: 1f:2b:36:de:70:b4:9a:3d:17:fb:61:65:1f:d8:d4: 74:d6:b7:29:bd:98:70:80:b0:be:f5:ac:c2:bf:75: d2:04:7b:20:78:80:6b:67:04:d2:08:75:37:39:df: fa:80:aa:40:30:46:ac:89:a3:6f:e5:6e:96:4a:6e: 5b:b9:0d:52:bf:0c:f7:7d:73:29:f6:ec:62:47:cf: c8:85:f6:8a:48:44:74:12:cc:b5:16:18:29:3e:1c: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.206.0.0/16 147.142.0.0/16 192.100.98.0/24 Signature Algorithm: sha256WithRSAEncryption 00:93:2c:4b:f7:0d:2c:59:18:8d:20:de:7c:c5:0a:f5:d8:36: 1a:2e:ea:6b:4c:b8:08:5f:7b:7e:2a:dd:f3:cf:f3:4b:97:ad: 8d:3e:7f:e9:6e:00:3c:a2:73:64:95:97:2b:07:d3:d4:f8:6a: 93:21:ad:e2:b6:1e:c1:3b:ba:90:92:5a:2f:1c:d3:a7:d2:e5: a5:10:1d:a8:67:d9:1e:10:e5:67:4f:a3:44:d4:90:b7:90:cc: eb:70:ff:db:1f:2b:61:6f:fb:79:65:87:38:b8:34:fe:a4:92: 2c:20:eb:4e:77:74:38:0d:a9:a2:f4:78:35:95:4d:51:43:22: 32:df:4d:a2:a1:cd:69:fd:e3:55:d0:23:d5:cf:2a:d7:0c:66: 16:54:d4:9c:00:83:71:99:43:05:e0:b5:70:37:87:c9:03:c0: 2e:6d:b3:d5:67:75:d5:1b:0f:11:8c:f4:58:82:51:2b:b3:f7: eb:b0:ce:c5:08:d2:4a:35:5d:3f:d3:95:88:98:bb:93:be:a1: 33:32:2a:60:90:64:61:64:25:1c:4b:00:b4:11:1f:61:23:84: df:8b:d5:be:d7:c9:5e:7a:ed:27:97:fa:64:e3:93:0e:72:28: 22:2a:18:5c:c1:95:75:78:49:c4:88:38:04:2c:59:38:be:b6: 80:d0:2f:61 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgISAZt7No2w3IU1xwKsKnHgmbnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjRjY2RiMTJmYzIyZWI4NTdmODZjNTY1YThiYzUxNTFkMDUzMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyDMWjUTkM+VtzPIaHKV8ACzYdoM jhT/0jPF272lUQvuQeYv9Vzd6PrTIqDFDmcsdn++42LvyLpS7CG9JnObEzar10Xa NAvDRYBQKq/JA6AYOWh2ZPsx46l+XawG1xqcE7XuN1yyrdbhutFmEqXt5WOwU2GI ftECVJnHGaFpZAcZPZ9SAgsSRvVEsPJZVAbkb9S29H1xhLc/nkshTuzjiylZi7Qf KzbecLSaPRf7YWUf2NR01rcpvZhwgLC+9azCv3XSBHsgeIBrZwTSCHU3Od/6gKpA MEasiaNv5W6WSm5buQ1Svwz3fXMp9uxiR8/IhfaKSER0Esy1FhgpPhzw5QIDAQAB o4ICjjCCAoowHQYDVR0OBBYEFP9MzbEvwi64V/hsVlqLxRUdBTKwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzVlMzA3 MC00MjJhLTRiNTgtODAwYS1kYmE3Y2NhYzk0ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvNWUzMDcw LTQyMmEtNGI1OC04MDBhLWRiYTdjY2FjOTRlMi8xL18wek5zU19DTHJoWC1HeFdX b3ZGRlIwRk1yQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAATAQAwMAgc4DAwCTjgMEAMBkYjANBgkqhkiG9w0BAQsF AAOCAQEAAJMsS/cNLFkYjSDefMUK9dg2Gi7qa0y4CF97fird88/zS5etjT5/6W4A PKJzZJWXKwfT1PhqkyGt4rYewTu6kJJaLxzTp9LlpRAdqGfZHhDlZ0+jRNSQt5DM 63D/2x8rYW/7eWWHOLg0/qSSLCDrTnd0OA2povR4NZVNUUMiMt9NoqHNaf3jVdAj 1c8q1wxmFlTUnACDcZlDBeC1cDeHyQPALm2z1Wd11RsPEYz0WIJRK7P367DOxQjS SjVdP9OViJi7k76hMzIqYJBkYWQlHEsAtBEfYSOE34vVvtfJXnrtJ5f6ZOOTDnIo IioYXMGVdXhJxIg4BCxZOL62gNAvYQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:59 2026 by rpki-client