This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer File: cz2mpsToscTOPyBLtL_Z2GoPVh4.cer (raw, json) Hash identifier: qS7TF0uDBi5c2Mvx5TxpiSrC/vEgsp3Dc/w0JeR6WSE= Subject key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFF73E5D61BF4CACC783F9493A283 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51280 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ff:73:e5:d6:1b:f4:ca:cc:78:3f:94:93:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:00:7e:8e:00:ec:c4:2a:1f:6b:30:83:f6: d1:01:65:11:47:90:7f:72:cc:1a:87:d4:41:82:36: 57:71:fa:86:1a:71:3e:41:74:96:69:00:f8:4a:78: 3b:70:fa:9b:08:d7:55:16:b5:d4:48:81:1c:47:5b: 7c:c9:f9:45:72:ec:b1:7f:e4:7f:d5:78:93:c8:5d: 8a:09:39:89:ea:05:2f:66:1a:3d:1b:6d:98:8b:cd: cf:f4:36:4c:0a:37:15:8c:21:41:ed:94:05:fc:7d: 19:a1:20:a2:6c:3c:40:cf:3c:56:45:65:0b:e1:f6: 59:a2:69:01:c2:26:54:bf:01:e4:8d:8d:49:08:bc: aa:3a:ca:59:91:52:7e:89:d1:d5:38:c4:2b:ae:71: c0:9b:43:cc:3f:d2:ef:45:10:9e:e5:b9:b7:00:6e: 57:21:23:87:05:af:05:55:51:0d:b2:b5:c9:b2:d5: 12:f7:b5:d7:57:38:70:2e:0c:fc:7a:19:e5:8d:0b: 47:2a:27:2f:b3:56:03:2b:58:ef:f7:fe:54:d3:cc: 73:5e:0f:fc:8b:80:9f:f3:6b:45:e0:ce:09:e4:13: 85:e2:da:5e:93:30:20:a0:c1:df:46:16:ec:1d:1b: c5:7a:3f:e4:c1:d5:cc:12:a5:eb:08:f5:d2:67:26: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 51280 Signature Algorithm: sha256WithRSAEncryption 84:86:da:77:11:98:82:06:02:ef:3b:05:30:71:8c:2b:d9:a0: 58:43:e7:9a:76:04:0c:e8:f2:dd:68:ee:71:8d:d3:10:b8:7b: aa:d0:2c:08:82:33:28:f7:c6:70:18:4c:5e:0d:00:c5:41:18: 7a:dc:41:e1:64:c7:72:f4:dc:b8:d1:82:cf:5a:64:8f:9a:67: 1f:01:5d:df:ed:26:e8:7b:ab:a3:55:13:1b:2c:df:4d:82:16: de:9b:1d:96:c3:fb:46:40:8f:02:67:2c:1f:ca:10:99:1c:ea: ec:d5:2d:23:d8:51:b0:21:36:0d:e0:a1:cc:b8:75:14:ad:34: c5:72:14:6d:3f:39:6a:2e:fa:64:11:33:18:9c:ad:92:bd:81: 5f:6a:f9:d7:7e:8f:88:15:75:53:d8:6d:a8:83:d4:b4:e9:f3: 8d:36:bc:d7:c1:2c:70:bf:8d:33:7c:38:19:ed:c6:a8:40:90: 5d:c5:c3:97:8a:72:4c:cc:6c:97:20:7b:94:d1:ad:6a:93:7d: 88:8b:54:74:28:8f:b9:78:48:7b:7c:ab:8e:e6:8e:93:a7:46: 4b:f0:d6:d3:9d:50:44:84:07:1d:b2:0e:f8:ef:a9:cf:62:1f: 81:4c:3c:dd:0d:06:ef:f2:d0:59:ff:46:5b:d5:3b:e5:2d:2c: fc:93:25:a8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9Wv9z5dYb9MrMeD+Uk6KDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzNkYTZhNmM0ZThiMWM0Y2UzZjIwNGJiNGJmZDlkODZhMGY1NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFYAfo4A7MQqH2swg/bRAWURR5B/ cswah9RBgjZXcfqGGnE+QXSWaQD4Sng7cPqbCNdVFrXUSIEcR1t8yflFcuyxf+R/ 1XiTyF2KCTmJ6gUvZho9G22Yi83P9DZMCjcVjCFB7ZQF/H0ZoSCibDxAzzxWRWUL 4fZZomkBwiZUvwHkjY1JCLyqOspZkVJ+idHVOMQrrnHAm0PMP9LvRRCe5bm3AG5X ISOHBa8FVVENsrXJstUS97XXVzhwLgz8ehnljQtHKicvs1YDK1jv9/5U08xzXg/8 i4Cf82tF4M4J5BOF4tpekzAgoMHfRhbsHRvFej/kwdXMEqXrCPXSZyYgZwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHM9pqbE6LHEzj8gS7S/2dhqD1YeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzNkMTJi OC1kMGU4LTRlNDYtODQ4YS0wMTdlMmIyNWQ4ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvM2QxMmI4 LWQwZTgtNGU0Ni04NDhhLTAxN2UyYjI1ZDg4Ni8xL2N6Mm1wc1Rvc2NUT1B5Qkx0 TF9aMkdvUFZoNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDIUDANBgkqhkiG9w0BAQsFAAOCAQEAhIbadxGYggYC 7zsFMHGMK9mgWEPnmnYEDOjy3WjucY3TELh7qtAsCIIzKPfGcBhMXg0AxUEYetxB 4WTHcvTcuNGCz1pkj5pnHwFd3+0m6Huro1UTGyzfTYIW3psdlsP7RkCPAmcsH8oQ mRzq7NUtI9hRsCE2DeChzLh1FK00xXIUbT85ai76ZBEzGJytkr2BX2r5136PiBV1 U9htqIPUtOnzjTa818EscL+NM3w4Ge3GqECQXcXDl4pyTMxslyB7lNGtapN9iItU dCiPuXhIe3yrjuaOk6dGS/DW051QRIQHHbIO+O+pz2IfgUw83Q0G7/LQWf9GW9U7 5S0s/JMlqA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:49 2026 by rpki-client