This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer File: fzP8QNLgMzu8e96rK9hZlUMBwPE.cer (raw, json) Hash identifier: McD08lqT1RrQPSO6Lx9HLdEF5R0rrNW8qwxuUygHdRk= Subject key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F12C68630498609B1B1C167630E2087 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204030 AS: 210161 IP: 87.101.84.0/22 IP: 185.116.80.0/22 IP: 2a06:7c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:c6:86:30:49:86:09:b1:b1:c1:67:63:0e:20:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:bb:34:4b:47:59:0b:92:f0:fd:ab:8b:b0: b8:94:d6:6c:23:0c:8c:12:3c:0e:db:85:89:50:ad: 60:e1:af:32:77:b1:67:b9:51:1d:e6:34:9d:54:90: 29:b7:17:15:11:0e:22:36:2a:52:2e:07:3a:19:ce: 11:62:4f:ac:cc:08:38:6a:15:5b:1d:b9:4e:b8:23: a0:91:23:77:51:6a:ff:43:25:f6:70:11:b9:4c:92: 95:47:2f:13:5c:4b:e6:a5:73:ec:aa:ba:1b:12:0d: ff:cb:fd:31:30:a7:dd:2f:82:9d:a7:d2:a1:dc:3d: 53:2d:07:76:dc:26:2f:98:66:f4:2d:90:8f:95:c0: 01:8f:b3:c5:7d:45:dd:60:1e:54:03:66:47:a7:e6: 66:e8:f5:6e:50:c2:dc:da:be:7b:eb:0b:f2:3f:10: 5d:5f:89:10:bf:44:7d:75:08:09:39:6c:0f:54:ae: bc:e4:ae:09:b5:8a:cc:6b:6e:52:3f:69:19:d1:9d: 7f:06:e0:05:8f:f7:b6:00:98:24:7b:b5:fa:a2:36: 0a:3b:dc:ba:22:3b:9b:18:71:7a:6f:99:86:52:00: 32:37:f4:db:72:85:0d:e5:41:75:9d:ea:3e:d8:a4: 63:f3:b8:0b:d1:36:89:4c:84:a2:25:a0:e0:35:5f: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.101.84.0/22 185.116.80.0/22 IPv6: 2a06:7c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204030 210161 Signature Algorithm: sha256WithRSAEncryption 03:32:93:ff:6b:4f:ca:b2:57:d5:1f:94:87:73:c2:e8:d1:4e: d2:e6:6f:25:0d:43:9d:92:73:7f:8b:c3:65:80:72:24:e6:49: 6a:96:dd:de:0c:b4:8b:58:11:fa:a4:6b:29:f5:bf:7a:48:63: 4b:51:03:09:59:08:50:0f:a8:e5:6f:25:fb:28:c4:94:79:00: 07:b7:52:e3:87:be:8c:58:a4:52:81:4e:c0:bb:ce:6c:d1:4c: cb:d9:52:e4:a5:5a:b3:a0:6f:fd:7e:d2:21:e8:04:3c:c7:e4: f6:c7:13:1d:b9:ec:d3:59:42:74:1a:79:c6:47:7b:42:9c:6a: df:fb:dc:1f:9a:be:11:3f:5c:3d:3e:66:63:f5:2b:de:4a:6a: 4a:21:34:0e:5e:12:28:99:a7:11:49:fb:fb:85:b0:7e:e3:2d: ef:22:18:3c:33:8a:e1:04:56:66:18:73:9d:05:89:fc:49:0c: 20:d5:00:e5:c5:01:89:12:b7:cf:2d:c2:8b:1d:d0:5d:ac:bc: 6f:44:c4:df:07:4c:31:f1:e9:ad:dc:65:15:f9:5c:1b:ff:9c: 10:c1:64:0c:2d:af:d4:9b:c8:51:80:7d:7e:76:31:63:a1:a7: b7:8d:ad:c1:e8:1d:27:cf:42:69:b8:65:71:28:cc:05:bb:16: 53:2a:02:60 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt/EsaGMEmGCbGxwWdjDiCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjMzZmM0MGQyZTAzMzNiYmM3YmRlYWIyYmQ4NTk5NTQzMDFjMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbu7NEtHWQuS8P2ri7C4lNZsIwyM EjwO24WJUK1g4a8yd7FnuVEd5jSdVJAptxcVEQ4iNipSLgc6Gc4RYk+szAg4ahVb HblOuCOgkSN3UWr/QyX2cBG5TJKVRy8TXEvmpXPsqrobEg3/y/0xMKfdL4Kdp9Kh 3D1TLQd23CYvmGb0LZCPlcABj7PFfUXdYB5UA2ZHp+Zm6PVuUMLc2r576wvyPxBd X4kQv0R9dQgJOWwPVK685K4JtYrMa25SP2kZ0Z1/BuAFj/e2AJgke7X6ojYKO9y6 IjubGHF6b5mGUgAyN/TbcoUN5UF1neo+2KRj87gL0TaJTISiJaDgNV/hCwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFH8z/EDS4DM7vHveqyvYWZVDAcDxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzY1YmYx ZC1lYzFkLTQwZTYtODQ5ZC03OTc5MGQ2NmQ3ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNjViZjFk LWVjMWQtNDBlNi04NDlkLTc5NzkwZDY2ZDdkMy8xL2Z6UDhRTkxnTXp1OGU5NnJL OWhabFVNQndQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCV2VUAwQCuXRQMA0EAgACMAcDBQMqBnyAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMc/gIDAzTxMA0GCSqGSIb3DQEBCwUAA4IB AQADMpP/a0/KslfVH5SHc8Lo0U7S5m8lDUOdknN/i8NlgHIk5klqlt3eDLSLWBH6 pGsp9b96SGNLUQMJWQhQD6jlbyX7KMSUeQAHt1Ljh76MWKRSgU7Au85s0UzL2VLk pVqzoG/9ftIh6AQ8x+T2xxMduezTWUJ0GnnGR3tCnGrf+9wfmr4RP1w9PmZj9Sve SmpKITQOXhIomacRSfv7hbB+4y3vIhg8M4rhBFZmGHOdBYn8SQwg1QDlxQGJErfP LcKLHdBdrLxvRMTfB0wx8emt3GUV+Vwb/5wQwWQMLa/Um8hRgH1+djFjoae3ja3B 6B0nz0JpuGVxKMwFuxZTKgJg -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:08 2026 by rpki-client