This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer File: jzAoLIbxBGuTEkzycOEU5fAm_3M.cer (raw, json) Hash identifier: aVMJoIqR+tEltNJagDAwdhcfleyHEvy16r7y/f0LIAw= Subject key identifier: 8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3682B8253AB4DD2E1272E879A2E310 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.159.220.0/22 IP: 2a03:b0a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:82:b8:25:3a:b4:dd:2e:12:72:e8:79:a2:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f30282c86f1046b93124cf270e114e5f026ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:44:39:c3:91:0e:26:ac:a6:f0:1e:f7:1a:52: a4:3f:3d:d9:6f:d7:37:9c:6e:c6:f5:43:f4:40:be: 78:8b:94:6a:1f:dd:c1:d3:50:b9:6d:0b:99:0e:5c: 60:99:b9:c4:72:02:8c:0d:f8:88:6e:04:9c:0c:80: 5c:c4:28:e3:76:65:d4:c3:f9:02:0c:b9:4b:06:8b: c9:44:7c:bf:f8:ad:cc:d2:89:fd:cb:70:f3:35:d4: ee:9c:13:e0:0c:ff:85:ff:3e:5d:7f:74:47:a9:07: 1d:14:b7:c3:de:34:0a:c6:2a:8a:2a:96:31:b3:10: 4a:fe:99:fe:4a:27:7e:ad:65:bd:14:42:3a:75:fe: 9f:82:88:c1:94:f0:3c:1e:85:e6:40:c6:66:44:c6: ca:1d:9d:76:c6:17:23:3e:8c:57:77:a3:b7:9a:0d: f8:10:fe:da:56:ba:f4:db:60:17:a2:0f:1b:8b:30: ef:f4:48:e7:fd:76:2c:ee:cf:cb:40:43:e4:dd:34: ee:39:47:12:04:53:54:4f:03:03:e5:a5:a3:33:60: a4:87:b0:53:c7:73:47:bb:f4:fc:d5:6b:00:eb:c8: d4:b3:50:b4:21:cc:a3:20:2b:f3:eb:89:35:36:6d: c6:49:a6:b9:1f:33:a5:a1:58:1c:5d:49:b2:36:ed: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.220.0/22 IPv6: 2a03:b0a0::/32 Signature Algorithm: sha256WithRSAEncryption 87:fa:93:07:b9:ec:4e:bd:b8:db:b1:1e:f0:82:af:8f:09:a8: 4c:23:06:e1:9f:ac:a1:88:92:5f:95:07:d0:78:27:af:92:ac: 13:30:9e:18:bb:e0:ab:f6:41:25:24:73:e1:63:7a:6e:6b:77: c4:cd:29:26:d0:d2:07:0b:02:e8:a1:f2:24:ae:9e:28:de:fc: bf:e9:e1:3f:83:64:f9:2f:2c:8c:57:e3:6c:c6:bb:6f:57:a8: 7b:61:7d:e5:ed:36:9b:3b:0b:76:45:4a:98:27:2c:42:6a:9c: 1e:0a:af:05:b1:76:6e:9f:1b:d0:86:56:aa:e1:f5:b2:c1:a0: d4:01:73:7a:42:69:9b:3a:e1:e9:5a:96:55:fa:2c:a1:b2:9a: 29:2d:67:b1:dc:89:63:e9:cf:25:fa:02:51:e1:e0:81:fe:f5: 49:d1:a3:05:a4:c1:c7:3c:68:f0:fb:b0:f1:05:af:36:cb:ac: d5:a6:64:dc:9e:71:09:ac:d4:76:f1:36:40:1f:73:44:bb:3c: 1a:4f:e3:39:f8:bc:f3:cc:aa:74:80:20:ce:cc:e2:38:6e:de: c9:64:f9:f8:76:9d:50:05:3c:8c:6b:50:99:e6:4b:33:fc:f1: 6c:fd:e9:b9:78:1f:12:d5:e3:f7:77:78:68:49:23:b2:d4:3f: c4:16:24:3b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NoK4JTq03S4Scuh5ouMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjMwMjgyYzg2ZjEwNDZiOTMxMjRjZjI3MGUxMTRlNWYwMjZmZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UQ5w5EOJqym8B73GlKkPz3Zb9c3 nG7G9UP0QL54i5RqH93B01C5bQuZDlxgmbnEcgKMDfiIbgScDIBcxCjjdmXUw/kC DLlLBovJRHy/+K3M0on9y3DzNdTunBPgDP+F/z5df3RHqQcdFLfD3jQKxiqKKpYx sxBK/pn+Sid+rWW9FEI6df6fgojBlPA8HoXmQMZmRMbKHZ12xhcjPoxXd6O3mg34 EP7aVrr022AXog8bizDv9Ejn/XYs7s/LQEPk3TTuOUcSBFNUTwMD5aWjM2Ckh7BT x3NHu/T81WsA68jUs1C0IcyjICvz64k1Nm3GSaa5HzOloVgcXUmyNu3bCwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFI8wKCyG8QRrkxJM8nDhFOXwJv9zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzZjZDc5 OC0zMWQ0LTQ0NzgtOTk2Mi1mOTg3OTZmNTEwMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvNmNkNzk4 LTMxZDQtNDQ3OC05OTYyLWY5ODc5NmY1MTAyMi8xL2p6QW9MSWJ4Qkd1VEVrenlj T0VVNWZBbV8zTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ/cMA0EAgACMAcDBQAqA7CgMA0GCSqGSIb3 DQEBCwUAA4IBAQCH+pMHuexOvbjbsR7wgq+PCahMIwbhn6yhiJJflQfQeCevkqwT MJ4Yu+Cr9kElJHPhY3pua3fEzSkm0NIHCwLoofIkrp4o3vy/6eE/g2T5LyyMV+Ns xrtvV6h7YX3l7TabOwt2RUqYJyxCapweCq8FsXZunxvQhlaq4fWywaDUAXN6Qmmb OuHpWpZV+iyhspopLWex3Ilj6c8l+gJR4eCB/vVJ0aMFpMHHPGjw+7DxBa82y6zV pmTcnnEJrNR28TZAH3NEuzwaT+M5+LzzzKp0gCDOzOI4bt7JZPn4dp1QBTyMa1CZ 5ksz/PFs/em5eB8S1eP3d3hoSSOy1D/EFiQ7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:37 2026 by rpki-client