This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer File: gz8MJRPUNTtAzvg5F57r-HOCRcY.cer (raw, json) Hash identifier: pqh42JqD8Z5WF2zaby/+6qgJioz7Fo4cLryXdLYOLrY= Subject key identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59ED1B71A88EE1B0D1F634D377D57D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211712 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ed:1b:71:a8:8e:e1:b0:d1:f6:34:d3:77:d5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=833f0c2513d4353b40cef839179eebf8738245c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:98:b1:49:7c:ba:0f:e8:e5:19:88:45:e7: 1a:42:da:78:23:43:0d:fc:27:be:2b:5c:7f:e7:64: f2:1e:3f:48:77:50:40:7a:fa:bc:a5:34:46:53:d4: e6:17:af:2f:6a:37:98:c3:a7:66:db:0e:44:b0:cf: 35:63:4d:61:72:42:dc:7b:ac:16:dd:2d:3c:d3:e5: 54:46:a1:20:98:02:02:5f:f9:6f:60:45:b3:21:34: c5:a4:62:cb:78:f1:79:41:3b:9a:15:e1:2f:ed:62: 06:77:36:eb:3f:3b:66:b5:a7:2c:72:22:47:c5:59: 0e:1c:87:d5:36:93:94:c6:a9:e3:0b:d4:69:29:9a: 2e:22:b4:cb:f3:0f:5e:df:2c:b7:79:66:6e:f9:9a: dd:17:33:1b:d3:47:d1:8c:41:ad:ae:27:a3:e2:5b: 70:bc:fd:c0:0a:cb:f8:5a:b4:88:fe:aa:30:88:26: 63:3b:62:69:37:bc:55:71:f2:a7:81:3b:c0:77:6d: 74:27:38:93:67:78:df:9b:ef:37:cf:e7:99:6d:04: 53:97:36:ad:35:d9:15:59:66:58:8a:eb:b8:fc:3a: 40:bf:9d:1c:03:50:96:d3:27:9a:ab:cf:fa:11:9b: 04:22:5a:aa:3f:54:33:a5:14:d1:2b:c0:e6:54:bf: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211712 Signature Algorithm: sha256WithRSAEncryption 36:e2:58:82:96:76:c7:f6:3a:0b:67:70:e9:e4:be:0e:8b:85: 20:d5:b1:24:c5:fc:d7:49:a1:49:9f:03:8b:bc:b5:1c:38:15: 43:42:a2:49:9e:e4:42:80:87:fb:60:cb:ab:2f:7f:94:02:38: f1:d4:93:54:5b:ff:b9:94:33:4e:c5:22:8c:eb:cc:09:4c:bc: 51:19:f6:12:97:69:03:b9:7d:ef:3d:1e:9e:55:2d:3e:ac:07: 37:48:2d:3d:48:1a:88:84:a9:5e:d8:d8:1c:48:29:90:64:d9: 1c:25:7b:cb:78:62:c4:f4:67:39:78:1f:35:ea:21:51:69:0e: 77:6a:75:e7:db:e3:39:7d:09:99:74:02:e2:1d:78:0a:d8:46: cf:36:a7:ac:f6:5d:7a:00:ed:65:d3:89:bd:5b:de:2c:f9:1c: ec:bc:c1:4b:c8:f4:5b:ec:88:e0:95:9a:1a:9c:b6:d5:dd:b5: 4e:f7:a2:69:fd:80:72:eb:9f:09:95:d4:1d:11:bc:41:c9:24: 57:39:4d:71:fa:b8:97:46:1e:cd:a8:8a:0f:38:68:5e:b8:e2: 60:17:e4:0b:53:d0:62:32:0f:cf:43:4c:bf:db:4e:9d:f9:b9: 55:43:03:44:f7:b9:ae:25:a2:85:c7:e6:9b:1a:d1:02:c5:c1: ff:30:37:f8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6We0bcaiO4bDR9jTTd9V9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzNmMGMyNTEzZDQzNTNiNDBjZWY4MzkxNzllZWJmODczODI0NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww+YsUl8ug/o5RmIRecaQtp4I0MN /Ce+K1x/52TyHj9Id1BAevq8pTRGU9TmF68vajeYw6dm2w5EsM81Y01hckLce6wW 3S080+VURqEgmAICX/lvYEWzITTFpGLLePF5QTuaFeEv7WIGdzbrPztmtacsciJH xVkOHIfVNpOUxqnjC9RpKZouIrTL8w9e3yy3eWZu+ZrdFzMb00fRjEGtriej4ltw vP3ACsv4WrSI/qowiCZjO2JpN7xVcfKngTvAd210JziTZ3jfm+83z+eZbQRTlzat NdkVWWZYiuu4/DpAv50cA1CW0yeaq8/6EZsEIlqqP1QzpRTRK8DmVL+4LwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIM/DCUT1DU7QM74ORee6/hzgkXGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzlmMmZj OC04ZjJjLTQ3ZTAtOTdkYS1lZDA3ZWNmMmRjMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvOWYyZmM4 LThmMmMtNDdlMC05N2RhLWVkMDdlY2YyZGMzNi8xL2d6OE1KUlBVTlR0QXp2ZzVG NTdyLUhPQ1JjWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7ADANBgkqhkiG9w0BAQsFAAOCAQEANuJYgpZ2x/Y6 C2dw6eS+DouFINWxJMX810mhSZ8Di7y1HDgVQ0KiSZ7kQoCH+2DLqy9/lAI48dST VFv/uZQzTsUijOvMCUy8URn2EpdpA7l97z0enlUtPqwHN0gtPUgaiISpXtjYHEgp kGTZHCV7y3hixPRnOXgfNeohUWkOd2p159vjOX0JmXQC4h14CthGzzanrPZdegDt ZdOJvVveLPkc7LzBS8j0W+yI4JWaGpy21d21Tveiaf2AcuufCZXUHRG8QckkVzlN cfq4l0YezaiKDzhoXrjiYBfkC1PQYjIPz0NMv9tOnfm5VUMDRPe5riWihcfmmxrR AsXB/zA3+A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:47 2026 by rpki-client