This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer File: _zpsebd2C8TOC4xmtIGvrTCiV24.cer (raw, json) Hash identifier: luOgHj8yePmyVxe49qorJXYhNJGIRB8Y43YJc/HWEr4= Subject key identifier: FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDA831132E4BE73B7C083F83F08089982 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 08:26:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208797 IP: 195.244.14.0/23 IP: 2a04:e0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:83:11:32:e4:be:73:b7:c0:83:f8:3f:08:08:99:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 08:26:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:15:76:1b:62:35:f9:5b:03:dd:e8:72:f8: 75:6c:3c:44:1f:ef:54:2c:34:38:9f:8e:30:ae:17: 84:d4:28:3a:94:4c:a9:f0:53:99:50:1c:32:cd:63: c6:55:9d:c5:8c:f3:74:e4:e7:4d:83:f7:32:5d:37: 4e:51:f2:1b:68:66:3a:8c:c9:bd:61:b5:e0:b1:06: 9f:4d:eb:95:5e:ec:26:6d:5e:e6:fd:c5:93:13:5a: cb:b6:18:4f:bc:fb:6c:7d:2d:5d:a2:47:c9:35:42: ad:26:b2:82:98:14:1b:0e:f1:fd:2f:47:8a:44:3c: e6:6c:12:1b:54:7e:ce:d6:58:91:1e:dc:21:6f:d4: d3:51:b4:5e:52:ed:81:bd:56:3d:79:9d:54:51:46: 2e:dc:6c:fa:be:67:bc:ee:ea:bb:df:7b:e7:35:91: fd:bd:92:25:56:28:97:57:21:f0:2f:e1:bf:c7:5d: 7a:5d:c1:85:ba:df:bd:bc:b3:1c:3b:f0:77:32:ea: 0e:1c:65:ef:31:bc:cb:e2:6e:b2:99:76:77:5a:2f: 66:27:1a:10:d8:49:c8:d3:84:0c:6a:65:fe:ec:44: 5a:a6:c9:f6:f1:3c:41:12:af:36:ae:cb:f3:50:38: f3:af:b1:41:da:e6:4f:fd:d1:6b:69:35:db:f8:7b: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.14.0/23 IPv6: 2a04:e0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208797 Signature Algorithm: sha256WithRSAEncryption 90:98:01:3c:f5:db:6d:40:7b:50:26:fb:38:57:c2:2f:a6:0a: d8:ac:d0:7a:d0:e6:08:a4:c9:01:12:f8:63:36:bb:a8:6e:9c: 54:ff:91:1e:a5:d6:d3:70:23:07:da:87:d0:55:32:ac:53:fa: 4f:08:79:ee:28:4d:32:80:d2:a7:7d:ee:f5:c8:ca:51:3f:b7: 95:3e:97:b7:a6:34:ea:51:bf:90:c0:9a:6c:7c:0c:8c:68:98: 44:1d:9b:38:14:d9:8a:b7:b9:c4:eb:d8:44:0a:ad:62:b3:5a: ae:7b:27:75:69:84:7b:c2:d4:b6:f4:b6:bd:07:a0:e9:b7:94: 5a:91:d2:f3:64:48:e2:73:29:f0:27:e4:1d:2e:34:c6:fc:4a: d6:29:85:c7:f5:f9:ad:ff:73:b7:70:2e:04:60:b5:f9:7e:3d: 9b:94:1e:b1:15:72:2f:f9:c2:f9:4c:d9:5f:26:9b:6a:07:dd: d3:21:1c:1c:75:d9:5a:34:11:2e:2d:0e:48:e6:f4:82:d8:0e: 49:1d:79:00:e6:1e:c1:de:aa:b6:db:c7:26:83:cf:f7:a6:31: 26:86:b9:7e:c6:b1:30:9a:9d:56:74:a4:65:a6:5a:86:d1:f8: 41:4c:cb:ef:4d:03:6f:93:d5:09:ee:15:ec:ab:a1:15:0d:08: 45:7b:11:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvagxEy5L5zt8CD+D8ICJmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMDgyNjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjNhNmM3OWI3NzYwYmM0Y2UwYjhjNjZiNDgxYWZhZDMwYTI1NzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBsVdhtiNflbA93ocvh1bDxEH+9U LDQ4n44wrheE1Cg6lEyp8FOZUBwyzWPGVZ3FjPN05OdNg/cyXTdOUfIbaGY6jMm9 YbXgsQafTeuVXuwmbV7m/cWTE1rLthhPvPtsfS1dokfJNUKtJrKCmBQbDvH9L0eK RDzmbBIbVH7O1liRHtwhb9TTUbReUu2BvVY9eZ1UUUYu3Gz6vme87uq733vnNZH9 vZIlViiXVyHwL+G/x116XcGFut+9vLMcO/B3MuoOHGXvMbzL4m6ymXZ3Wi9mJxoQ 2EnI04QMamX+7ERapsn28TxBEq82rsvzUDjzr7FB2uZP/dFraTXb+HvOlwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP86bHm3dgvEzguMZrSBr60wolduMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzAxMjA1 Yi02MmUyLTQ1NjktYjk3MS1kNWFlMTBiZDViZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMDEyMDVi LTYyZTItNDU2OS1iOTcxLWQ1YWUxMGJkNWJmMC8xL196cHNlYmQyQzhUT0M0eG10 SUd2clRDaVYyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBw/QOMA0EAgACMAcDBQMqBODAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvnTANBgkqhkiG9w0BAQsFAAOCAQEAkJgBPPXbbUB7 UCb7OFfCL6YK2KzQetDmCKTJARL4Yza7qG6cVP+RHqXW03AjB9qH0FUyrFP6Twh5 7ihNMoDSp33u9cjKUT+3lT6Xt6Y06lG/kMCabHwMjGiYRB2bOBTZire5xOvYRAqt YrNarnsndWmEe8LUtvS2vQeg6beUWpHS82RI4nMp8CfkHS40xvxK1imFx/X5rf9z t3AuBGC1+X49m5QesRVyL/nC+UzZXyabagfd0yEcHHXZWjQRLi0OSOb0gtgOSR15 AOYewd6qttvHJoPP96YxJoa5fsaxMJqdVnSkZaZahtH4QUzL700Db5PVCe4V7Kuh FQ0IRXsRRw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:44:54 2026 by rpki-client