This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer File: mzYg1nmOfrGGY5xFSKBpavbjBYk.cer (raw, json) Hash identifier: UEtcdZg9uIh+nFu5Qf14e1FAJd0OxT1gS0uVW3mXsHY= Subject key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE655801161DAD3BBD9B03625E72EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.171.4.0/22 IP: 2a07:97c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:65:58:01:16:1d:ad:3b:bd:9b:03:62:5e:72:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b3620d6798e7eb186639c4548a0696af6e30589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:34:47:b7:f3:ba:dd:d3:07:74:5a:02:5a: e7:32:22:78:c7:ae:3b:b0:67:6b:ab:8e:ce:8a:86: b4:65:50:ed:70:4d:59:87:5f:77:97:ba:c4:cd:60: e2:27:33:d2:df:0c:a2:85:ec:b5:c3:3e:05:c0:ba: 8a:15:2f:0b:49:83:54:07:09:64:e4:d3:ad:b5:c8: 1d:14:15:29:95:86:6f:04:a8:ac:42:e1:c0:e4:70: b2:02:55:a0:9c:bb:44:a0:f4:2d:4e:07:50:ac:ca: 85:79:a0:bd:f2:a7:0d:e9:d0:67:a8:a8:75:91:03: 82:67:51:2d:ae:e6:57:eb:85:e6:9a:31:25:83:4c: be:fe:06:9c:11:d9:5f:3a:5a:cb:b0:5c:15:e9:47: 75:0e:3a:e0:05:9d:d9:4a:00:8c:e7:ea:05:64:ff: 37:89:c0:a5:2a:99:a4:97:dc:3a:96:11:ae:f1:7a: d2:bf:4b:06:74:8e:11:b4:ba:47:10:fd:bc:dc:5c: 07:13:db:1f:ea:c1:a0:52:7e:83:cf:9c:9d:42:62: f4:70:e7:ef:e0:ca:5e:c8:12:0f:13:70:41:d2:8c: bd:65:bf:5d:94:db:e3:48:48:db:d0:1f:30:1a:29: 5e:4c:fd:ac:04:9d:86:9e:30:1b:17:a8:3f:70:a4: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.4.0/22 IPv6: 2a07:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 5c:bb:f9:57:a2:36:9b:17:c1:0a:80:e0:50:fc:ac:cd:b7:90: 4e:33:1c:9e:41:e0:83:8a:e9:d2:a2:9e:02:fd:4d:44:98:3f: c9:fd:51:2c:7f:ee:66:c0:56:70:e7:d7:32:ef:1c:40:6c:c4: 2d:66:51:d0:3f:24:b9:56:f7:c7:c2:dd:d1:b8:42:f7:e5:78: dd:13:06:a8:36:70:da:0f:05:94:5f:27:6e:a7:fc:16:ee:ac: 8e:60:eb:c1:a0:f5:b7:80:57:e6:97:9a:69:65:75:9f:7c:13: 60:ef:8b:1f:76:86:55:2f:17:33:8d:04:5f:ba:b5:65:d5:5d: a8:14:45:00:2d:26:b9:81:34:d2:5d:87:58:ed:75:75:9b:3b: 6d:0a:4a:f6:ab:49:8d:b8:37:15:6f:1b:d6:34:0a:48:95:5c: af:b9:1a:43:1f:aa:1c:fe:4e:ad:1f:14:d5:4f:78:8b:65:69: d9:13:9e:ef:3e:db:11:0a:19:63:f9:66:44:f1:7e:e7:d5:45: a9:23:0d:57:52:c8:ac:9a:59:d2:f0:05:5b:3b:e5:08:cf:8c: 4d:82:cb:76:ee:4e:4e:e4:c8:dc:3f:9c:2b:98:62:0e:93:d2: c0:5a:56:47:2c:0a:e6:b5:00:df:4f:1b:f0:1f:a8:ca:52:18: 53:d7:aa:f1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87mVYARYdrTu9mwNiXnLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjM2MjBkNjc5OGU3ZWIxODY2MzljNDU0OGEwNjk2YWY2ZTMwNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQk0R7fzut3TB3RaAlrnMiJ4x647 sGdrq47Oioa0ZVDtcE1Zh193l7rEzWDiJzPS3wyihey1wz4FwLqKFS8LSYNUBwlk 5NOttcgdFBUplYZvBKisQuHA5HCyAlWgnLtEoPQtTgdQrMqFeaC98qcN6dBnqKh1 kQOCZ1EtruZX64XmmjElg0y+/gacEdlfOlrLsFwV6Ud1DjrgBZ3ZSgCM5+oFZP83 icClKpmkl9w6lhGu8XrSv0sGdI4RtLpHEP283FwHE9sf6sGgUn6Dz5ydQmL0cOfv 4MpeyBIPE3BB0oy9Zb9dlNvjSEjb0B8wGileTP2sBJ2GnjAbF6g/cKTZOwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJs2INZ5jn6xhmOcRUigaWr24wWJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzZiNjA0 Yi00ZWVkLTQzOTMtOGU4Yy1jYmEwNjMxZjI5M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNmI2MDRi LTRlZWQtNDM5My04ZThjLWNiYTA2MzFmMjkzZi8xL216WWcxbm1PZnJHR1k1eEZT S0JwYXZiakJZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuasEMA0EAgACMAcDBQMqB5fAMA0GCSqGSIb3 DQEBCwUAA4IBAQBcu/lXojabF8EKgOBQ/KzNt5BOMxyeQeCDiunSop4C/U1EmD/J /VEsf+5mwFZw59cy7xxAbMQtZlHQPyS5VvfHwt3RuEL35XjdEwaoNnDaDwWUXydu p/wW7qyOYOvBoPW3gFfml5ppZXWffBNg74sfdoZVLxczjQRfurVl1V2oFEUALSa5 gTTSXYdY7XV1mzttCkr2q0mNuDcVbxvWNApIlVyvuRpDH6oc/k6tHxTVT3iLZWnZ E57vPtsRChlj+WZE8X7n1UWpIw1XUsismlnS8AVbO+UIz4xNgst27k5O5MjcP5wr mGIOk9LAWlZHLArmtQDfTxvwH6jKUhhT16rx -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:12 2026 by rpki-client