This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer File: _z8mtUHwu6ilznHqU4EbRsFlerM.cer (raw, json) Hash identifier: 2L5B9H1jy1awayvh0jHLLwSUyvSLmpGpJRj4oN/hZr8= Subject key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF13A162CC0B0732A22079036E7B49E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34146 IP: 78.40.72.0/21 IP: 185.200.220.0/22 IP: 217.197.208.0/20 IP: 2a02:448::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:3a:16:2c:c0:b0:73:2a:22:07:90:36:e7:b4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:92:85:56:6e:00:43:4e:4b:2d:70:00:68: ab:2c:c3:2b:fd:c8:58:e1:90:f8:7c:b9:e6:b1:3c: 23:d5:d7:07:d7:29:94:cd:ae:52:d3:f0:40:6b:70: 1f:9c:cb:f1:3c:ea:6a:77:b0:d3:80:1b:79:37:e1: 0a:36:02:f4:ea:59:f9:89:eb:4d:c3:3c:f6:0d:a9: 6c:cd:6d:f9:2c:44:fc:6d:44:1f:40:cf:95:5e:79: 8b:6a:44:02:80:a5:6c:6f:3b:b6:ac:a3:07:b8:2f: d1:2c:06:60:fe:a7:f8:0f:f5:f7:e8:43:58:44:46: 66:cb:47:1e:48:56:0b:31:d6:e0:46:d7:a7:55:14: 35:fa:c0:dd:15:5a:c0:0f:6a:a4:16:93:e3:99:39: 09:81:d8:97:8e:a3:e9:0d:08:30:c9:9d:94:f1:e1: c5:65:c5:58:da:01:ed:30:60:31:a1:eb:2a:d4:ed: d1:ef:0a:13:48:10:ab:e0:4f:64:6f:75:ec:87:d6: de:e9:75:db:34:65:ee:29:32:dd:c2:f3:5c:8d:a8: 20:26:a0:a5:17:d5:de:f9:09:e5:9b:ef:68:8b:e8: e5:ed:dc:73:e9:11:eb:7c:8d:42:da:e3:2e:44:a7: ce:82:28:d4:d6:3a:16:3c:ea:80:17:62:45:5c:93: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.72.0/21 185.200.220.0/22 217.197.208.0/20 IPv6: 2a02:448::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34146 Signature Algorithm: sha256WithRSAEncryption 80:9c:81:14:18:d1:fd:67:78:1b:b6:5e:c3:06:c1:da:14:44: da:66:b7:fb:59:fe:44:86:45:3c:75:92:47:79:da:aa:8b:5f: d5:d0:dd:bc:04:25:c1:43:ed:4f:40:3e:91:6f:04:ee:fb:b3: 0d:b6:b4:04:3d:25:38:92:ba:8d:fb:40:e4:a4:b6:b7:38:98: 89:86:4e:3e:2f:c9:4b:08:31:aa:a2:87:26:7c:09:6d:fb:4e: 39:c5:54:40:e1:d3:89:82:9c:e8:5c:6a:75:64:f7:91:9f:6c: de:c9:67:35:8c:da:1f:28:f3:bd:6b:20:2a:8a:33:cd:ac:ba: c6:af:bf:a6:77:2b:6a:e0:23:f8:8e:71:58:49:f3:03:ab:6d: 0a:97:b2:4d:b9:a5:9d:28:10:ac:f4:1b:4c:f1:24:df:a2:7c: 6b:e3:5d:13:60:22:cc:33:f7:05:ed:b3:cc:8b:f2:72:d4:cf: 59:48:1d:5d:5e:e5:21:05:ad:ec:c5:0f:44:fc:9c:64:ec:03: 6b:e5:5b:9a:d6:c0:9d:9d:d9:36:a8:15:ad:d4:53:65:54:1c: 4a:16:29:c2:ad:bb:fc:08:bc:ad:93:24:30:0b:64:dc:21:39: df:32:76:49:d4:93:a8:bb:5a:bd:d9:ca:79:57:ae:86:d0:b3: f1:e9:fa:62 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/8ToWLMCwcyoiB5A257SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjNmMjZiNTQxZjBiYmE4YTVjZTcxZWE1MzgxMWI0NmMxNjU3YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyWShVZuAENOSy1wAGirLMMr/chY 4ZD4fLnmsTwj1dcH1ymUza5S0/BAa3AfnMvxPOpqd7DTgBt5N+EKNgL06ln5ietN wzz2DalszW35LET8bUQfQM+VXnmLakQCgKVsbzu2rKMHuC/RLAZg/qf4D/X36ENY REZmy0ceSFYLMdbgRtenVRQ1+sDdFVrAD2qkFpPjmTkJgdiXjqPpDQgwyZ2U8eHF ZcVY2gHtMGAxoesq1O3R7woTSBCr4E9kb3Xsh9be6XXbNGXuKTLdwvNcjaggJqCl F9Xe+Qnlm+9oi+jl7dxz6RHrfI1C2uMuRKfOgijU1joWPOqAF2JFXJPvXwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFP8/JrVB8Luopc5x6lOBG0bBZXqzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2E0OGFi Mi1kNTIzLTQwZjMtOTZiZi0xYzI2MGIxZTI4ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTQ4YWIy LWQ1MjMtNDBmMy05NmJmLTFjMjYwYjFlMjhkMS8xL196OG10VUh3dTZpbHpuSHFV NEViUnNGbGVyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDTihIAwQCucjcAwQE2cXQMA0EAgACMAcDBQMq AgRIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCFYjANBgkqhkiG9w0BAQsFAAOC AQEAgJyBFBjR/Wd4G7ZewwbB2hRE2ma3+1n+RIZFPHWSR3naqotf1dDdvAQlwUPt T0A+kW8E7vuzDba0BD0lOJK6jftA5KS2tziYiYZOPi/JSwgxqqKHJnwJbftOOcVU QOHTiYKc6FxqdWT3kZ9s3slnNYzaHyjzvWsgKoozzay6xq+/pncrauAj+I5xWEnz A6ttCpeyTbmlnSgQrPQbTPEk36J8a+NdE2AizDP3Be2zzIvyctTPWUgdXV7lIQWt 7MUPRPycZOwDa+VbmtbAnZ3ZNqgVrdRTZVQcShYpwq27/Ai8rZMkMAtk3CE53zJ2 SdSTqLtavdnKeVeuhtCz8en6Yg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:00 2026 by rpki-client