This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer File: jzaP655VO90TFWJYSjNTsddVXFA.cer (raw, json) Hash identifier: 7isSKhTVUVWjx80xYZDATVUVmCcitEd6odLi6uVxjCo= Subject key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C73C33572A91115618572253176E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201565 IP: 89.35.206.0/23 IP: 94.176.184.0/23 IP: 185.11.232.0/22 IP: 185.59.96.0/22 IP: 185.62.248.0/22 IP: 185.91.148.0/22 IP: 2a03:7e40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c7:3c:33:57:2a:91:11:56:18:57:22:53:17:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f368feb9e553bdd131562584a3353b1d7555c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:77:01:c5:98:ab:d1:91:5e:10:d4:b4:06: 2b:24:b2:76:61:9c:4a:e4:80:75:ac:2d:9f:31:9d: bf:18:30:f6:a0:3f:c6:d2:4c:bf:e2:a3:74:87:89: 36:27:9b:7c:da:5b:f5:d4:d4:29:04:54:e2:a9:0f: 45:78:9f:a4:88:05:51:e0:4b:2a:78:ca:6b:4d:54: 1d:36:23:a4:1a:44:2c:8e:82:87:d2:c5:7f:30:34: 6b:9d:d0:db:7c:55:f2:63:ef:8f:38:49:4d:cb:72: 9d:20:2a:09:4d:91:cb:c7:aa:e5:6f:68:40:ed:02: 20:18:79:45:a6:65:2f:41:23:ae:a5:84:fc:2f:7c: 67:3d:cc:ac:4b:7e:e3:6e:c8:cb:5f:9f:98:5e:fa: c9:2a:54:08:3b:50:a1:a1:0a:81:a6:09:03:9c:23: 4a:ea:79:10:c3:43:98:7d:3e:09:d9:67:b9:5d:3d: 75:1d:4c:1e:fb:71:f5:6a:63:aa:39:4e:51:d3:46: 4d:3e:87:87:e7:85:10:56:13:f3:89:b2:5a:77:da: ee:44:b4:ee:d3:76:fe:13:65:76:90:c4:11:20:db: 72:6a:42:e5:11:bb:b7:5d:2b:f4:d9:c3:48:5e:7d: e4:17:f8:13:23:ea:e2:8a:9a:c1:5e:60:37:1c:65: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.206.0/23 94.176.184.0/23 185.11.232.0/22 185.59.96.0/22 185.62.248.0/22 185.91.148.0/22 IPv6: 2a03:7e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201565 Signature Algorithm: sha256WithRSAEncryption 76:33:18:9f:5f:af:27:c9:fe:3a:6d:f8:b0:1b:57:a7:be:2d: ee:24:ff:c8:95:ab:d0:56:01:84:b7:1e:9e:2f:ec:be:d3:45: 7b:95:3e:d8:71:2d:30:d8:66:4a:c6:8f:8b:ff:ed:75:7f:3c: 2b:97:fd:c3:28:5e:18:f7:84:a3:7b:8b:3b:27:9d:55:4e:13: 73:30:96:3f:3c:ca:80:54:6c:7c:de:91:49:fd:5f:da:dc:60: 1e:a6:fa:37:70:86:a5:cf:9b:b2:5d:50:ad:61:1d:e3:27:14: df:6d:ff:cc:d0:95:43:78:36:bc:5f:65:18:32:1f:30:04:fd: 7c:7c:ab:db:60:40:87:ea:46:dc:65:f8:9f:e9:d3:ed:2d:2c: b4:99:75:f1:44:b0:16:76:13:26:30:0a:16:eb:75:24:f1:35: dd:75:1a:e3:2d:36:dc:7f:7a:70:5c:b9:80:3f:f0:d3:a4:9e: 0b:82:5a:04:86:df:f1:b7:ae:6b:1b:38:c4:dc:34:e1:d5:83: b8:41:d2:e6:ac:54:87:1d:f8:0e:61:26:51:07:56:13:17:9d: 12:a8:7f:85:4c:ef:a9:c1:38:3c:70:ca:09:2d:ca:0c:e2:20: 00:c1:d3:2d:22:6c:15:74:0d:e9:29:a0:f4:85:26:8f:d6:43: 3a:f7:ee:5b -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt4NMc8M1cqkRFWGFciUxduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjM2OGZlYjllNTUzYmRkMTMxNTYyNTg0YTMzNTNiMWQ3NTU1YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYt3AcWYq9GRXhDUtAYrJLJ2YZxK 5IB1rC2fMZ2/GDD2oD/G0ky/4qN0h4k2J5t82lv11NQpBFTiqQ9FeJ+kiAVR4Esq eMprTVQdNiOkGkQsjoKH0sV/MDRrndDbfFXyY++POElNy3KdICoJTZHLx6rlb2hA 7QIgGHlFpmUvQSOupYT8L3xnPcysS37jbsjLX5+YXvrJKlQIO1ChoQqBpgkDnCNK 6nkQw0OYfT4J2We5XT11HUwe+3H1amOqOU5R00ZNPoeH54UQVhPzibJad9ruRLTu 03b+E2V2kMQRINtyakLlEbu3XSv02cNIXn3kF/gTI+riiprBXmA3HGVKdwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFI82j+ueVTvdExViWEozU7HXVVxQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzA1NDdj Yi1jNWRjLTRlMmYtYWZmNy0zZWNhN2RmMmFlNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMDU0N2Ni LWM1ZGMtNGUyZi1hZmY3LTNlY2E3ZGYyYWU1Ny8xL2p6YVA2NTVWTzkwVEZXSllT ak5Uc2RkVlhGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQBWSPOAwQBXrC4AwQCuQvoAwQCuTtgAwQCuT74 AwQCuVuUMA0EAgACMAcDBQAqA35AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMT XTANBgkqhkiG9w0BAQsFAAOCAQEAdjMYn1+vJ8n+Om34sBtXp74t7iT/yJWr0FYB hLceni/svtNFe5U+2HEtMNhmSsaPi//tdX88K5f9wyheGPeEo3uLOyedVU4TczCW PzzKgFRsfN6RSf1f2txgHqb6N3CGpc+bsl1QrWEd4ycU323/zNCVQ3g2vF9lGDIf MAT9fHyr22BAh+pG3GX4n+nT7S0stJl18USwFnYTJjAKFut1JPE13XUa4y023H96 cFy5gD/w06SeC4JaBIbf8beuaxs4xNw04dWDuEHS5qxUhx34DmEmUQdWExedEqh/ hUzvqcE4PHDKCS3KDOIgAMHTLSJsFXQN6Smg9IUmj9ZDOvfuWw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:58:00 2026 by rpki-client