This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer File: jz-dhbyzpBNjYsV3Pp0U455SlFM.cer (raw, json) Hash identifier: OkpENC+IsDaQxG5jFR1QckBixhuPMlotpxSc0IIROnE= Subject key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C071CC588274597882D3421141D5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 209.16.144.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:07:1c:c5:88:27:45:97:88:2d:34:21:14:1d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:3f:ac:e9:02:22:27:b8:06:a1:3d:0a:fa: c5:5a:05:2d:cc:c9:f8:33:c7:08:b9:77:74:ee:6a: f9:97:9d:8f:62:d3:1a:2c:e2:ac:08:98:42:ba:40: 06:de:14:94:7f:18:e6:fe:6f:c0:ea:a4:b4:d1:9c: e5:8a:0c:1f:6d:10:94:32:76:ed:bd:7d:ad:b2:9a: 67:a0:29:97:37:1e:53:7c:d9:bf:71:07:be:28:06: 4b:00:23:64:cd:c3:2c:08:96:5a:aa:e1:95:9a:69: 1d:e0:96:2e:52:0f:b4:11:8d:fa:73:9b:56:ef:98: b1:9b:49:d2:c6:0d:07:5a:83:da:a1:11:49:c3:03: ec:0a:06:97:38:4b:f6:34:9c:99:52:9c:64:94:1d: e7:32:f2:b0:42:15:eb:7d:a0:fe:bf:c5:28:dc:df: 8b:15:9d:70:33:1f:9d:9a:f6:f9:f3:a3:73:4d:23: fc:73:28:ea:c5:db:6e:93:23:da:c6:31:0c:cc:8b: de:04:f4:d4:32:46:af:b5:31:2d:7a:db:5d:8c:de: 59:60:ea:89:85:16:89:10:74:57:1c:bd:04:1f:e9: c1:d4:a7:50:f0:5e:25:ee:4f:27:1f:cc:a4:5e:8d: f0:2d:a9:d0:88:18:b6:67:aa:24:6d:2c:ff:15:71: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.16.144.0/23 Signature Algorithm: sha256WithRSAEncryption 39:9d:02:e1:36:60:6c:79:20:bb:58:fa:7d:fc:4d:c7:47:33: ee:15:fd:8e:65:7e:78:0f:a0:69:67:49:2a:f6:56:55:ed:8d: b8:8b:33:c6:55:c4:0a:08:3e:0c:87:5e:3a:63:c6:15:7c:57: 95:c1:49:03:85:af:f2:34:be:85:53:46:bb:87:59:d4:fc:21: 24:ba:d7:c6:f5:f8:22:82:00:97:5f:e7:e1:bd:3a:43:47:60: a4:c1:5c:e4:47:0e:20:85:ef:54:d8:93:98:45:8d:9d:45:c8: 08:a4:01:dd:d3:f7:d6:1a:85:90:3b:ee:47:5d:58:ec:17:26: 15:60:59:34:68:1f:62:9f:1e:4d:4d:1d:95:1d:8c:cc:f3:6f: 03:02:1a:40:6d:ba:c6:64:e0:81:94:a8:45:51:fa:4e:f9:75: 71:31:77:ad:33:87:9c:c0:07:bc:a6:92:1c:1a:aa:56:a7:20: 33:23:6d:15:26:08:96:60:22:26:00:e0:1b:53:45:2f:dd:c1: b3:e2:c3:d1:bd:a7:35:27:fd:fd:af:4d:2d:ff:fa:f9:6e:dc: 63:4d:64:f3:5d:92:39:eb:ca:c0:47:70:87:f5:01:4f:1f:8e: 04:35:2e:8a:43:c4:38:d1:5b:5f:a8:7d:97:46:aa:91:3e:35: 5a:e0:39:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XAccxYgnRZeILTQhFB1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjNmOWQ4NWJjYjNhNDEzNjM2MmM1NzczZTlkMTRlMzllNTI5NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMo/rOkCIie4BqE9CvrFWgUtzMn4 M8cIuXd07mr5l52PYtMaLOKsCJhCukAG3hSUfxjm/m/A6qS00ZzligwfbRCUMnbt vX2tsppnoCmXNx5TfNm/cQe+KAZLACNkzcMsCJZaquGVmmkd4JYuUg+0EY36c5tW 75ixm0nSxg0HWoPaoRFJwwPsCgaXOEv2NJyZUpxklB3nMvKwQhXrfaD+v8Uo3N+L FZ1wMx+dmvb586NzTSP8cyjqxdtukyPaxjEMzIveBPTUMkavtTEtettdjN5ZYOqJ hRaJEHRXHL0EH+nB1KdQ8F4l7k8nH8ykXo3wLanQiBi2Z6okbSz/FXGCbwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFI8/nYW8s6QTY2LFdz6dFOOeUpRTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2JiMGJi YS1mMDk1LTQyM2UtOTJkMi03OTk1YmY2MDgwM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYmIwYmJh LWYwOTUtNDIzZS05MmQyLTc5OTViZjYwODAzYi8xL2p6LWRoYnl6cEJOallzVjNQ cDBVNDU1U2xGTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQB0RCQMA0GCSqGSIb3DQEBCwUAA4IBAQA5nQLh NmBseSC7WPp9/E3HRzPuFf2OZX54D6BpZ0kq9lZV7Y24izPGVcQKCD4Mh146Y8YV fFeVwUkDha/yNL6FU0a7h1nU/CEkutfG9fgiggCXX+fhvTpDR2CkwVzkRw4ghe9U 2JOYRY2dRcgIpAHd0/fWGoWQO+5HXVjsFyYVYFk0aB9inx5NTR2VHYzM828DAhpA bbrGZOCBlKhFUfpO+XVxMXetM4ecwAe8ppIcGqpWpyAzI20VJgiWYCImAOAbU0Uv 3cGz4sPRvac1J/39r00t//r5btxjTWTzXZI568rAR3CH9QFPH44ENS6KQ8Q40Vtf qH2XRqqRPjVa4Dnx -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:19 2026 by rpki-client