This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer File: dZxU7z8HSxxmiPmXVM2KONmfbKw.cer (raw, json) Hash identifier: 38JeKTRp7N9nKjKC6KZ3x3gkESqde9K7hfNefi/JpHw= Subject key identifier: 75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B359ACC500227581446672E2BD08265 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61212 IP: 185.15.12.0/22 IP: 2a03:bbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9a:cc:50:02:27:58:14:46:67:2e:2b:d0:82:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:d7:3c:8d:ba:30:bb:f0:b8:b2:81:a7:57: 1d:ec:e3:f4:c4:08:98:2f:ff:52:28:72:9f:41:77: 84:9d:7b:fa:89:45:e4:6e:11:68:21:b7:24:b3:8b: b0:3c:98:94:39:99:20:cb:f4:83:38:2d:7c:2c:cf: 91:25:8e:16:ca:7f:52:97:07:09:88:cf:1b:cc:d6: ae:0f:cb:38:e7:b6:69:1d:8f:7d:be:e5:63:0b:d1: b2:38:4c:00:b0:4e:d9:f2:31:a1:bb:6a:b3:ee:f4: ef:b8:58:0e:5f:c4:79:7d:10:1e:ef:1e:0c:bd:1a: fa:6f:ce:76:30:07:65:42:b1:bf:7d:21:60:bf:ac: b0:c2:ac:87:ce:fd:94:8e:b2:0f:5b:77:5c:39:b1: 1c:23:da:27:9d:4f:18:29:83:84:32:38:c0:84:44: 37:24:6d:09:8b:1e:73:a8:6e:bc:31:b3:64:b7:d3: b0:4c:8c:58:1b:26:fd:7b:c5:3f:90:4f:1e:56:b4: 27:b1:4e:36:5d:38:e4:66:df:ef:2c:54:03:e3:fe: 9c:ea:4f:de:92:d5:ef:26:c4:85:98:45:e1:5a:7a: 4a:93:b6:ff:6b:b3:9b:62:6b:7f:a4:91:64:4b:89: 19:9c:db:78:6e:d9:a9:2f:e8:1f:c1:ac:5a:52:52: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.12.0/22 IPv6: 2a03:bbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61212 Signature Algorithm: sha256WithRSAEncryption a1:6c:2d:e4:af:ce:ec:9d:c2:34:54:7b:8d:5b:cb:4a:e2:28: a8:6b:bc:f1:63:e4:8e:61:c4:0e:64:dc:31:17:e0:c3:ee:7f: 2d:78:c7:fd:af:7e:a7:fe:e3:07:02:30:db:45:59:44:13:15: 52:e9:d2:7c:dd:cf:bb:50:13:76:d4:dd:4a:f5:f7:0d:21:c1: 96:a3:91:0f:8f:c9:61:0b:3c:72:5d:9a:b4:40:2f:66:ad:f9: dd:70:34:c0:2c:35:de:39:96:99:1c:91:b8:71:31:6c:4a:db: 6c:72:e7:28:c6:a5:44:39:86:eb:f2:b1:17:d5:00:e4:a2:46: 12:25:ac:48:29:e7:ed:fb:71:c0:fd:d0:4d:47:37:38:9a:8c: f5:c6:e1:3c:d8:19:e0:a4:ee:97:1f:a3:e3:e9:f3:57:1b:92: 7e:76:c0:14:af:42:6f:39:f7:dd:f6:9d:3b:57:99:02:15:4b: 4a:63:86:e1:71:96:6b:ad:29:31:94:4e:ef:4d:59:04:3d:c1: 72:2b:bd:14:2d:2f:f3:dc:0c:a4:fd:8a:30:5d:6e:f6:cb:d8: ec:c5:df:a6:62:e2:c2:a7:c6:b2:04:f9:9e:2f:78:91:7c:cc: bf:e9:dd:25:bd:19:43:1c:7d:02:76:b5:7d:c3:9a:68:aa:4a: bd:5d:1f:5d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NZrMUAInWBRGZy4r0IJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTljNTRlZjNmMDc0YjFjNjY4OGY5OTc1NGNkOGEzOGQ5OWY2Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn7XPI26MLvwuLKBp1cd7OP0xAiY L/9SKHKfQXeEnXv6iUXkbhFoIbcks4uwPJiUOZkgy/SDOC18LM+RJY4Wyn9SlwcJ iM8bzNauD8s457ZpHY99vuVjC9GyOEwAsE7Z8jGhu2qz7vTvuFgOX8R5fRAe7x4M vRr6b852MAdlQrG/fSFgv6ywwqyHzv2UjrIPW3dcObEcI9onnU8YKYOEMjjAhEQ3 JG0Jix5zqG68MbNkt9OwTIxYGyb9e8U/kE8eVrQnsU42XTjkZt/vLFQD4/6c6k/e ktXvJsSFmEXhWnpKk7b/a7ObYmt/pJFkS4kZnNt4btmpL+gfwaxaUlKIzQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHWcVO8/B0scZoj5l1TNijjZn2ysMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzViZWFh MC00YTMxLTQxNjgtOTliNC00NGQyOTY1N2JhYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvNWJlYWEw LTRhMzEtNDE2OC05OWI0LTQ0ZDI5NjU3YmFiNy8xL2RaeFU3ejhIU3h4bWlQbVhW TTJLT05tZmJLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ8MMA0EAgACMAcDBQAqA7vAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDvHDANBgkqhkiG9w0BAQsFAAOCAQEAoWwt5K/O7J3C NFR7jVvLSuIoqGu88WPkjmHEDmTcMRfgw+5/LXjH/a9+p/7jBwIw20VZRBMVUunS fN3Pu1ATdtTdSvX3DSHBlqORD4/JYQs8cl2atEAvZq353XA0wCw13jmWmRyRuHEx bErbbHLnKMalRDmG6/KxF9UA5KJGEiWsSCnn7ftxwP3QTUc3OJqM9cbhPNgZ4KTu lx+j4+nzVxuSfnbAFK9Cbzn33fadO1eZAhVLSmOG4XGWa60pMZRO701ZBD3Bciu9 FC0v89wMpP2KMF1u9svY7MXfpmLiwqfGsgT5ni94kXzMv+ndJb0ZQxx9Ana1fcOa aKpKvV0fXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:20 2026 by rpki-client