This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer (raw, json) Hash identifier: X3EmSLT6icHOmntVn7zQ6keC4s6XK3Xr7i9pIpGRp5M= Subject key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77595C6CA2105947C23E5746EA13FC32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199342 IP: 185.11.152.0/22 IP: 2a03:7640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:6c:a2:10:59:47:c2:3e:57:46:ea:13:fc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=759d27ce072ca336d3afaab8879f94ec63455669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:1d:c6:dc:2e:07:22:89:4e:1c:5a:92:6a: cb:cc:99:33:22:2c:d9:d9:56:e3:7d:40:50:ac:d0: 89:5c:e9:d6:ff:85:54:15:ab:24:1d:02:a5:33:1f: 2a:25:03:d7:4c:8a:ba:e7:33:10:99:c9:3a:ca:fb: a0:ba:d2:d0:40:07:f7:9a:f3:6a:cb:01:9a:a6:9f: c2:83:4c:7f:6e:7b:78:33:53:e9:b5:7e:53:8b:71: eb:c2:34:e2:7e:d3:06:43:f1:91:ea:c7:b6:1e:c4: cb:08:08:90:9f:e6:dc:60:1a:84:88:1f:42:24:fc: c3:cb:33:d2:75:56:64:57:cc:a7:66:36:ec:8b:0b: 9a:a3:54:d3:27:ba:88:ff:ba:d2:3b:58:6b:df:99: 3b:3a:08:32:c3:a3:a7:c7:63:af:c6:02:0d:90:e1: 28:58:f1:04:3f:5a:b2:b0:5c:c6:7d:1b:56:b0:f8: ae:29:b4:46:5a:1f:4a:4c:db:77:f2:08:99:f8:e7: 8f:c6:bc:85:49:aa:1d:b1:a9:4b:7f:d1:45:6e:fb: e3:31:3e:83:1e:dc:57:3b:33:83:dc:bc:d6:e4:52: 6d:7b:82:15:3d:e3:c6:e7:ef:2e:be:ca:ee:98:f4: 13:7c:ec:36:ad:5a:f8:1b:a6:f4:6e:bf:f5:2d:97: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.152.0/22 IPv6: 2a03:7640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199342 Signature Algorithm: sha256WithRSAEncryption 13:fc:ef:3d:bc:a0:34:b6:0d:c1:17:c7:54:db:ee:e2:7b:44: 1d:05:a8:f7:0f:6d:51:24:28:df:b9:7e:8d:bc:d4:f7:f6:7c: db:ee:59:68:b6:ca:f7:d4:f0:e1:ca:71:49:64:94:a2:7f:d5: 17:3a:4d:86:bd:44:1f:fc:91:19:5d:e9:92:5c:12:02:da:fe: 91:e4:1a:7a:41:a7:f5:9c:9d:3d:a6:86:5b:96:06:39:80:b4: db:21:01:f0:cc:c2:f7:51:8b:12:4a:16:8a:2b:0c:c7:a8:74: 72:e7:d5:e2:fc:f3:cd:6d:5c:0d:a2:61:e8:b7:a8:ba:48:58: 93:f2:7b:8d:ac:e3:ef:28:48:b0:b7:b3:17:c8:ad:61:ce:fe: ef:68:b3:6b:f7:f3:5e:04:64:57:69:fe:22:0c:7d:cc:8f:a8: fd:7b:c8:2e:62:b0:f7:86:0e:89:8e:ae:d3:dd:be:9d:79:ad: db:09:bb:de:6c:1c:93:16:b9:4b:65:5e:af:44:2b:77:4f:67: 59:21:47:2b:66:0f:0e:7e:95:60:08:28:e1:f1:ac:a8:d5:b6: 4d:db:40:4a:0e:40:c0:94:37:bf:cf:b3:50:ed:24:14:e8:64: 1f:ab:48:73:44:aa:74:8f:bf:f5:d9:22:2b:34:00:95:37:c4: 40:b2:95:89 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WVxsohBZR8I+V0bqE/wyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTlkMjdjZTA3MmNhMzM2ZDNhZmFhYjg4NzlmOTRlYzYzNDU1NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNsdxtwuByKJThxakmrLzJkzIizZ 2VbjfUBQrNCJXOnW/4VUFaskHQKlMx8qJQPXTIq65zMQmck6yvugutLQQAf3mvNq ywGapp/Cg0x/bnt4M1PptX5Ti3HrwjTiftMGQ/GR6se2HsTLCAiQn+bcYBqEiB9C JPzDyzPSdVZkV8ynZjbsiwuao1TTJ7qI/7rSO1hr35k7Oggyw6Onx2OvxgINkOEo WPEEP1qysFzGfRtWsPiuKbRGWh9KTNt38giZ+OePxryFSaodsalLf9FFbvvjMT6D HtxXOzOD3LzW5FJte4IVPePG5+8uvsrumPQTfOw2rVr4G6b0br/1LZetawIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHWdJ84HLKM206+quIeflOxjRVZpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2YxN2Ey Ny00NTk5LTQ1YjUtYTY2ZS03MDEyM2Y0OTUxMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZjE3YTI3 LTQ1OTktNDViNS1hNjZlLTcwMTIzZjQ5NTExMC8xL2RaMG56Z2Nzb3piVHI2cTRo NS1VN0dORlZtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQuYMA0EAgACMAcDBQAqA3ZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKrjANBgkqhkiG9w0BAQsFAAOCAQEAE/zvPbygNLYN wRfHVNvu4ntEHQWo9w9tUSQo37l+jbzU9/Z82+5ZaLbK99Tw4cpxSWSUon/VFzpN hr1EH/yRGV3pklwSAtr+keQaekGn9ZydPaaGW5YGOYC02yEB8MzC91GLEkoWiisM x6h0cufV4vzzzW1cDaJh6LeoukhYk/J7jazj7yhIsLezF8itYc7+72iza/fzXgRk V2n+Igx9zI+o/XvILmKw94YOiY6u092+nXmt2wm73mwckxa5S2Ver0Qrd09nWSFH K2YPDn6VYAgo4fGsqNW2TdtASg5AwJQ3v8+zUO0kFOhkH6tIc0SqdI+/9dkiKzQA lTfEQLKViQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:30 2026 by rpki-client