This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer File: cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer (raw, json) Hash identifier: ATIC0BvmdgUocwsptO8eRx926xGBEfvIGgxOI/Bc51U= Subject key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77593DC033F40E41EEFCE73B9BEBB330 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.245.203.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3d:c0:33:f4:0e:41:ee:fc:e7:3b:9b:eb:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7190f5d5f92a486362177a42b3d5efda20e220e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:57:5c:bd:33:85:1b:60:c1:48:0b:7a:a8: f2:06:7a:e7:4d:f1:46:86:a4:d8:8f:95:13:9e:08: eb:8f:dc:35:34:c6:0e:6a:d8:7b:b1:15:09:01:93: 33:4e:0f:65:77:71:ec:ca:f9:94:60:76:92:6d:a9: 9d:f8:c7:bf:d6:8e:34:b7:01:e0:56:af:4b:49:7e: 88:99:f6:68:d9:67:25:9c:21:bd:fd:a3:f3:96:ff: f1:50:66:fa:5a:2d:73:4d:0b:e2:a1:b7:1e:91:dd: fa:f0:fa:34:6f:6c:b5:12:8e:8a:33:f3:11:b0:2d: 54:df:39:f8:0a:22:f9:9d:10:43:c9:e0:4a:39:b6: 21:22:67:48:e3:f6:34:f9:b2:12:66:1a:4d:02:6d: 8a:04:f8:c7:e2:f1:7c:b5:7a:87:d2:0f:b2:f8:87: 4d:fb:4e:be:41:35:35:a8:01:82:0c:ab:31:a0:75: 1c:27:cd:c5:19:b0:f3:18:3b:c9:14:ba:39:6b:c2: ae:88:47:a8:1c:59:c8:9c:5b:4e:d4:6c:56:9f:25: b4:80:49:68:46:6d:9e:ba:17:e0:41:1b:5b:5c:a1: 8c:cd:33:67:94:5e:20:6f:55:78:f2:47:3a:33:b1: aa:6b:c4:1d:c4:04:7f:fe:f6:2d:de:27:57:41:74: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:b6:10:b6:84:21:b4:d7:32:fb:25:6b:af:3b:1c:e4:0b:f2: 08:49:ae:a0:8e:d1:35:d5:fe:89:57:0a:0b:7e:2e:6e:5e:d0: fe:ef:b5:aa:96:4e:49:62:af:08:64:54:e8:a2:9e:ab:5d:3c: 4d:f6:85:1b:df:c7:cd:09:aa:88:0f:61:93:9f:6b:ae:4a:5e: a0:5b:8f:a4:75:1b:09:94:06:36:c4:b6:16:1d:e1:5e:02:26: 2d:6a:d1:10:df:96:c2:dc:d4:55:55:7f:c8:d7:c4:8c:9e:42: 8f:46:a6:26:81:e4:9d:fe:cc:90:f4:2c:b4:97:80:37:69:c1: 88:5f:1f:b0:96:66:a5:ec:eb:cf:3b:9a:c2:41:75:dc:b5:55: ef:aa:51:f9:c5:9b:fd:6d:9e:33:77:c9:4a:b3:6a:9d:e0:4e: 83:75:d6:5b:e7:55:28:76:1a:2f:44:9f:1c:06:a3:df:eb:72: f3:d8:7f:0f:17:54:5e:66:f1:cb:06:c6:dd:94:4f:56:30:02: e3:3b:ef:fe:ea:2d:71:83:22:fc:a4:a2:78:98:9b:56:de:db: 8b:03:47:b4:f0:76:a5:ef:f0:80:44:ee:17:0d:6c:32:eb:e4: f4:c8:b6:08:78:ac:8d:9d:cb:85:27:df:e7:f4:51:20:05:9a: f9:b9:fa:0c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WT3AM/QOQe785zub67MwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTkwZjVkNWY5MmE0ODYzNjIxNzdhNDJiM2Q1ZWZkYTIwZTIyMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+RXXL0zhRtgwUgLeqjyBnrnTfFG hqTYj5UTngjrj9w1NMYOath7sRUJAZMzTg9ld3HsyvmUYHaSbamd+Me/1o40twHg Vq9LSX6ImfZo2WclnCG9/aPzlv/xUGb6Wi1zTQviobcekd368Po0b2y1Eo6KM/MR sC1U3zn4CiL5nRBDyeBKObYhImdI4/Y0+bISZhpNAm2KBPjH4vF8tXqH0g+y+IdN +06+QTU1qAGCDKsxoHUcJ83FGbDzGDvJFLo5a8KuiEeoHFnInFtO1GxWnyW0gElo Rm2euhfgQRtbXKGMzTNnlF4gb1V48kc6M7Gqa8QdxAR//vYt3idXQXSe9QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHGQ9dX5KkhjYhd6QrPV79og4iDhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzY4YTAx NC03ZGJhLTQ0MzAtOGRkZS0wMWM4MjdkNmUwZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNjhhMDE0 LTdkYmEtNDQzMC04ZGRlLTAxYzgyN2Q2ZTBmZS8xL2NaRDExZmtxU0dOaUYzcENz OVh2MmlEaUlPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/XLMA0GCSqGSIb3DQEBCwUAA4IBAQAMthC2 hCG01zL7JWuvOxzkC/IISa6gjtE11f6JVwoLfi5uXtD+77Wqlk5JYq8IZFToop6r XTxN9oUb38fNCaqID2GTn2uuSl6gW4+kdRsJlAY2xLYWHeFeAiYtatEQ35bC3NRV VX/I18SMnkKPRqYmgeSd/syQ9Cy0l4A3acGIXx+wlmal7OvPO5rCQXXctVXvqlH5 xZv9bZ4zd8lKs2qd4E6DddZb51UodhovRJ8cBqPf63Lz2H8PF1ReZvHLBsbdlE9W MALjO+/+6i1xgyL8pKJ4mJtW3tuLA0e08Hal7/CARO4XDWwy6+T0yLYIeKyNncuF J9/n9FEgBZr5ufoM -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:11 2026 by rpki-client