This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer File: czQP17PChWN63ADx5h4rjkAmWPM.cer (raw, json) Hash identifier: 4egSxUcG2pofDHgY2p3NmvcKAgLHPW6jlzLA9GlxlZQ= Subject key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33EA87439E7A89D3BC8DFD476CAF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51299 IP: 185.158.144.0/22 IP: 194.61.87.0/24 IP: 2a07:ae00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3e:a8:74:39:e7:a8:9d:3b:c8:df:d4:76:ca:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:0c:b2:69:ba:ee:ee:8f:c9:fd:9f:9f:d0: c1:c1:16:dc:a8:67:c0:d4:e6:74:aa:03:a7:4e:e2: 08:b8:15:d7:60:24:16:39:3e:ab:c9:06:c3:47:96: 95:76:23:86:8c:46:76:26:dc:c9:ab:d1:b7:c1:bb: 1e:ba:88:92:b9:bf:e1:0a:ec:cf:5a:dd:d6:cb:7e: 8e:e1:d9:6c:31:6e:80:05:5d:41:d9:ea:f1:b6:bb: 99:8c:59:c0:db:24:5d:fb:8a:d8:af:5a:38:65:f0: 3c:d7:f6:5f:b0:f7:d4:b1:ee:dc:5d:7d:18:d1:54: 1e:44:28:4c:b4:45:02:db:06:05:d7:26:f5:b9:f9: 56:f5:ec:f6:46:37:50:ee:39:37:a2:19:a9:f3:e5: 20:ff:88:90:fd:70:62:7b:c1:4b:3f:65:40:75:fd: c0:db:eb:13:18:2d:c6:0b:29:48:e9:fc:ce:61:03: c0:d7:9a:e6:9b:0e:b4:45:9b:31:f8:a7:25:ab:c6: c9:65:bf:ae:0e:a8:76:fc:ce:7f:bd:2e:a7:9f:12: 44:38:6f:6b:10:f8:a2:65:b7:cd:d3:b0:cb:a0:70: 80:6a:61:4c:c3:ec:d8:ab:af:c8:c7:08:72:52:53: ec:8d:d9:06:66:2e:72:15:57:19:1d:01:ad:25:8e: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.144.0/22 194.61.87.0/24 IPv6: 2a07:ae00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51299 Signature Algorithm: sha256WithRSAEncryption 60:f4:6a:d4:5c:2c:92:37:1d:56:30:3f:30:45:08:cc:03:64: 2c:b4:f6:5d:a0:39:ae:84:f5:fb:81:4f:97:2a:7c:db:09:f1: e9:f1:3e:5d:10:ac:5c:37:07:f7:54:07:2e:ab:e7:6b:64:e6: 03:1b:1d:e2:c3:a1:c6:a4:8c:69:0a:d2:08:b9:fe:73:d2:af: a5:c3:a3:93:47:e1:69:3d:41:80:49:91:4f:94:54:5d:fd:1e: ca:12:7f:35:b4:42:5c:59:0b:4a:97:d4:fc:07:16:66:ee:11: 6e:d8:21:1a:39:6e:c4:6d:42:6f:5a:38:5e:8c:94:23:25:93: 68:21:18:00:cf:7e:60:da:89:f8:16:c4:e4:bd:cf:b8:cf:43: c4:76:c6:39:5a:ee:e3:4b:ce:e3:59:d7:26:db:91:4e:ce:51: 88:5b:04:b9:28:e7:34:a3:03:db:5a:6a:c1:fb:90:d8:e4:c5: 76:91:7c:f6:cd:ab:85:dc:a5:b6:6d:7b:70:60:ae:2f:23:34: a6:49:49:2f:6a:5f:b3:fb:a9:37:9a:be:5d:2c:3c:78:6d:5b: 53:64:fe:0b:61:9f:a1:8d:a1:9f:a9:d7:01:c3:40:d3:98:ad: 84:fa:a9:2e:8a:44:d6:2b:32:bd:20:b5:60:ec:77:b5:e5:0e: 78:96:7b:7a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4oz6odDnnqJ07yN/Udsr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzM0MGZkN2IzYzI4NTYzN2FkYzAwZjFlNjFlMmI4ZTQwMjY1OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW0Msmm67u6Pyf2fn9DBwRbcqGfA 1OZ0qgOnTuIIuBXXYCQWOT6ryQbDR5aVdiOGjEZ2JtzJq9G3wbseuoiSub/hCuzP Wt3Wy36O4dlsMW6ABV1B2erxtruZjFnA2yRd+4rYr1o4ZfA81/ZfsPfUse7cXX0Y 0VQeRChMtEUC2wYF1yb1uflW9ez2RjdQ7jk3ohmp8+Ug/4iQ/XBie8FLP2VAdf3A 2+sTGC3GCylI6fzOYQPA15rmmw60RZsx+Kclq8bJZb+uDqh2/M5/vS6nnxJEOG9r EPiiZbfN07DLoHCAamFMw+zYq6/IxwhyUlPsjdkGZi5yFVcZHQGtJY5yEwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHM0D9ezwoVjetwA8eYeK45AJljzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzBiNGRi YS0wNzQ3LTRlMGYtODAzNi1mMjIyMzYwNmM1MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMGI0ZGJh LTA3NDctNGUwZi04MDM2LWYyMjIzNjA2YzUzOC8xL2N6UVAxN1BDaFdONjNBRHg1 aDRyamtBbVdQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZ6QAwQAwj1XMA0EAgACMAcDBQMqB64AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDIYzANBgkqhkiG9w0BAQsFAAOCAQEAYPRq 1FwskjcdVjA/MEUIzANkLLT2XaA5roT1+4FPlyp82wnx6fE+XRCsXDcH91QHLqvn a2TmAxsd4sOhxqSMaQrSCLn+c9KvpcOjk0fhaT1BgEmRT5RUXf0eyhJ/NbRCXFkL SpfU/AcWZu4RbtghGjluxG1Cb1o4XoyUIyWTaCEYAM9+YNqJ+BbE5L3PuM9DxHbG OVru40vO41nXJtuRTs5RiFsEuSjnNKMD21pqwfuQ2OTFdpF89s2rhdyltm17cGCu LyM0pklJL2pfs/upN5q+XSw8eG1bU2T+C2GfoY2hn6nXAcNA05ithPqpLopE1isy vSC1YOx3teUOeJZ7eg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:07 2026 by rpki-client