This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer File: jzASR05qobNrQgZN0XWzDtgi5zU.cer (raw, json) Hash identifier: CmkyE4iL4m2FTHwKylrTmYFSbkdVuk2Uv9cDVndSX/c= Subject key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C686A26BB9A08524443A3677155AB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205843 IP: 185.158.205.0/24 IP: 2a10:2140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:a2:6b:b9:a0:85:24:44:3a:36:77:15:5a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f3012474e6aa1b36b42064dd175b30ed822e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:61:ae:27:5b:6a:4e:78:33:e2:e7:4a:38: b2:d4:69:d9:13:fe:87:93:65:78:fd:6e:a1:17:79: ac:68:d8:55:1e:85:f6:03:74:80:c5:99:1d:d8:89: 68:ab:4a:e1:05:a3:0c:0b:90:e2:8d:fb:fb:6c:32: 54:43:be:e4:98:ae:a9:0b:fc:e1:ae:62:58:62:e2: 37:30:d6:c4:96:5b:42:6c:6b:3a:a8:64:94:f6:47: 50:64:6a:0f:06:34:f7:ed:c9:82:e7:a8:17:21:ac: 96:48:ce:41:2e:6e:31:60:0b:e5:1f:7f:f6:d6:db: 9c:84:97:8d:57:24:dd:5c:d6:70:e2:e7:4f:03:f7: c0:f7:24:0f:71:de:19:25:84:1f:35:0a:62:88:f5: 0a:0c:25:e7:fb:97:3c:8d:21:5e:f6:87:b4:13:d2: e9:4f:af:41:f7:bd:b6:ea:c3:d0:7a:0c:d9:0e:90: d0:fc:6f:2e:24:7d:5d:e2:3e:ae:db:37:d0:e3:4c: 10:88:4f:1c:93:7d:73:6e:b2:49:e5:c6:4b:fe:72: 0e:a9:6b:cc:b8:0f:6c:36:1a:9a:6c:52:aa:8c:fb: e9:f0:72:73:34:4f:9f:12:bd:df:ce:12:c8:a7:0f: 74:44:39:98:ea:a7:68:0d:98:df:b4:36:fb:11:8d: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.205.0/24 IPv6: 2a10:2140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205843 Signature Algorithm: sha256WithRSAEncryption 71:22:a0:23:62:e2:33:56:3d:d2:c0:e9:f4:3d:a7:17:e2:d8: 1e:2b:1b:87:c5:53:47:dd:16:e0:e2:ed:31:af:e8:bc:75:08: b3:fa:e6:bd:5f:e6:69:49:4b:f5:42:d3:bc:20:1e:c0:00:cf: be:02:c0:de:3d:93:6e:ac:5a:5e:4a:36:9e:22:af:2c:3a:af: f9:d0:1b:fb:3d:1e:f2:57:1a:dc:ec:f8:f1:1f:65:f7:97:db: 51:da:9b:96:da:99:87:65:f8:d4:00:87:5d:5f:a6:5c:5f:d3: 7d:06:45:60:fc:f0:5c:e5:3b:21:1b:69:5a:81:1a:1b:4c:50: 47:82:6b:fa:1c:c6:f0:8f:6a:79:82:16:5c:60:4d:ab:4c:31: d0:4c:c8:c4:c4:4a:e6:7e:75:dd:03:aa:d8:a5:ff:7d:99:09: 3e:b0:bd:15:cc:63:c7:a1:54:17:7b:a2:43:f4:87:b8:df:9e: ac:50:2c:2a:52:55:22:8c:0b:fe:65:ec:4d:60:43:c3:a7:4d: d6:42:be:41:4e:32:a4:12:7f:2c:42:e4:78:2d:2a:91:d8:a8: b7:f1:d0:e9:25:bb:ac:61:24:ea:be:e2:54:5d:f6:86:85:53: 6a:96:f6:08:44:99:28:ff:a3:5d:41:2e:1d:d6:71:62:66:00: 41:98:e7:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xoaia7mghSREOjZ3FVqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjMwMTI0NzRlNmFhMWIzNmI0MjA2NGRkMTc1YjMwZWQ4MjJlNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa5hridbak54M+LnSjiy1GnZE/6H k2V4/W6hF3msaNhVHoX2A3SAxZkd2Iloq0rhBaMMC5Dijfv7bDJUQ77kmK6pC/zh rmJYYuI3MNbElltCbGs6qGSU9kdQZGoPBjT37cmC56gXIayWSM5BLm4xYAvlH3/2 1tuchJeNVyTdXNZw4udPA/fA9yQPcd4ZJYQfNQpiiPUKDCXn+5c8jSFe9oe0E9Lp T69B97226sPQegzZDpDQ/G8uJH1d4j6u2zfQ40wQiE8ck31zbrJJ5cZL/nIOqWvM uA9sNhqabFKqjPvp8HJzNE+fEr3fzhLIpw90RDmY6qdoDZjftDb7EY2xzQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI8wEkdOaqGza0IGTdF1sw7YIuc1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzQxZWJi Zi04MGNhLTQxZTEtYjFjYy1jYTM3OGU1MjkzMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNDFlYmJm LTgwY2EtNDFlMS1iMWNjLWNhMzc4ZTUyOTMwYy8xL2p6QVNSMDVxb2JOclFnWk4w WFd6RHRnaTV6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZ7NMA0EAgACMAcDBQMqECFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkEzANBgkqhkiG9w0BAQsFAAOCAQEAcSKgI2LiM1Y9 0sDp9D2nF+LYHisbh8VTR90W4OLtMa/ovHUIs/rmvV/maUlL9ULTvCAewADPvgLA 3j2TbqxaXko2niKvLDqv+dAb+z0e8lca3Oz48R9l95fbUdqbltqZh2X41ACHXV+m XF/TfQZFYPzwXOU7IRtpWoEaG0xQR4Jr+hzG8I9qeYIWXGBNq0wx0EzIxMRK5n51 3QOq2KX/fZkJPrC9Fcxjx6FUF3uiQ/SHuN+erFAsKlJVIowL/mXsTWBDw6dN1kK+ QU4ypBJ/LELkeC0qkdiot/HQ6SW7rGEk6r7iVF32hoVTapb2CESZKP+jXUEuHdZx YmYAQZjnVA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:04 2026 by rpki-client