This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer File: jzdbxsgRDxrXM993rPux1uxGXLg.cer (raw, json) Hash identifier: RO1XvEbOE1eTIj/tjRGCWfH3HevtrQNIGaRIffQeTls= Subject key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77587B4FB4BC49E72ED5F5F81B41ADE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201590 IP: 185.68.32.0/22 IP: 2a03:2960::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7b:4f:b4:bc:49:e7:2e:d5:f5:f8:1b:41:ad:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:68:b7:9c:5d:23:bb:8b:84:07:04:58:cf: be:4e:55:11:eb:dd:0a:28:19:27:42:b6:2b:9c:88: 41:ac:33:83:80:50:b0:90:a1:38:0b:2a:ed:30:51: 96:c5:b7:0c:08:c1:af:a1:ae:6a:b4:88:96:4f:f6: 71:68:3e:8c:fa:c5:da:f3:04:19:c5:fa:a1:cb:54: e3:4a:1a:20:27:fd:ea:d0:5f:b4:82:3d:1f:25:59: 0a:c1:38:13:e1:b5:db:0d:dc:c0:b2:52:7a:8c:b6: ea:97:c7:02:03:cb:c9:40:66:3e:f3:4a:4a:56:22: 24:0f:20:65:da:a8:40:f4:c5:bb:4a:da:d6:e8:ba: 48:9a:a8:2b:10:4c:1f:bc:a3:0e:b5:73:16:0f:dd: be:f9:0b:63:6d:bb:c7:4a:ad:52:2c:4b:df:ae:cf: ab:7d:17:1c:fc:7a:46:f0:32:1c:de:b1:34:9a:d9: 12:4f:34:47:50:a1:1f:b7:27:c3:af:7e:50:04:15: 03:33:e7:1e:c8:f8:5a:88:4e:5c:84:37:45:ae:82: 8f:4d:52:5c:eb:e9:9d:7b:96:e0:c6:65:05:65:24: 17:fb:7e:15:59:eb:b8:b2:eb:80:33:a2:9e:9a:b4: 48:ce:5e:77:80:6b:fd:8d:e8:ab:9e:51:aa:f7:ca: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.32.0/22 IPv6: 2a03:2960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201590 Signature Algorithm: sha256WithRSAEncryption 2f:2b:ea:4c:de:82:ba:35:ff:35:01:5c:eb:b0:fb:ec:ba:f9: d2:21:06:40:7b:1e:8c:ff:72:22:a9:75:48:c8:89:bd:90:c9: ad:14:eb:4f:4c:26:fe:1b:8d:d8:ac:da:eb:18:34:b9:79:44: fe:07:e1:68:37:02:82:f5:a4:35:9a:db:6e:a1:06:48:83:7a: 3a:c4:92:92:14:90:43:1f:ed:de:67:c5:e5:93:ea:eb:8e:28: 89:3c:7c:7e:41:1f:bb:d5:97:57:3f:fa:8f:bc:62:1e:ea:59: b0:96:a7:e0:62:6d:e3:1d:a6:91:ea:d7:95:bf:dc:b7:34:84: 32:7a:7e:7a:12:0f:3a:db:6a:70:5f:0d:9b:13:10:b1:10:b3: e0:d9:8d:fc:c6:87:35:dd:c1:d6:1b:e9:a5:fe:7f:aa:65:06: f6:0b:22:37:1f:06:d9:14:64:40:6b:f2:08:d1:f3:05:18:c6: e8:16:bc:42:b0:85:1b:0b:b9:40:dd:05:fe:61:f7:27:a3:11: f6:13:08:67:95:54:fe:bb:22:f6:cd:46:ea:38:01:c9:81:75: f8:d5:a0:7b:c5:f3:03:8f:d4:32:c1:23:db:eb:03:43:24:c0: 7d:a7:d2:4a:4e:f5:2b:c6:39:f4:86:26:7e:e9:bd:d2:7b:44: bc:2d:05:70 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WHtPtLxJ5y7V9fgbQa3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjM3NWJjNmM4MTEwZjFhZDczM2RmNzdhY2ZiYjFkNmVjNDY1Y2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Htot5xdI7uLhAcEWM++TlUR690K KBknQrYrnIhBrDODgFCwkKE4CyrtMFGWxbcMCMGvoa5qtIiWT/ZxaD6M+sXa8wQZ xfqhy1TjShogJ/3q0F+0gj0fJVkKwTgT4bXbDdzAslJ6jLbql8cCA8vJQGY+80pK ViIkDyBl2qhA9MW7StrW6LpImqgrEEwfvKMOtXMWD92++QtjbbvHSq1SLEvfrs+r fRcc/HpG8DIc3rE0mtkSTzRHUKEftyfDr35QBBUDM+ceyPhaiE5chDdFroKPTVJc 6+mde5bgxmUFZSQX+34VWeu4suuAM6KemrRIzl53gGv9jeirnlGq98rFkQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFI83W8bIEQ8a1zPfd6z7sdbsRly4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzc4Njhh NS1kNTAwLTRhZTEtYjNiNy04MDk4NTFhMDZiNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNzg2OGE1 LWQ1MDAtNGFlMS1iM2I3LTgwOTg1MWEwNmI2YS8xL2p6ZGJ4c2dSRHhyWE05OTNy UHV4MXV4R1hMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUQgMA0EAgACMAcDBQAqAylgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTdjANBgkqhkiG9w0BAQsFAAOCAQEALyvqTN6CujX/ NQFc67D77Lr50iEGQHsejP9yIql1SMiJvZDJrRTrT0wm/huN2Kza6xg0uXlE/gfh aDcCgvWkNZrbbqEGSIN6OsSSkhSQQx/t3mfF5ZPq644oiTx8fkEfu9WXVz/6j7xi HupZsJan4GJt4x2mkerXlb/ctzSEMnp+ehIPOttqcF8NmxMQsRCz4NmN/MaHNd3B 1hvppf5/qmUG9gsiNx8G2RRkQGvyCNHzBRjG6Ba8QrCFGwu5QN0F/mH3J6MR9hMI Z5VU/rsi9s1G6jgByYF1+NWge8XzA4/UMsEj2+sDQyTAfafSSk71K8Y59IYmfum9 0ntEvC0FcA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:32 2026 by rpki-client