This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer (raw, json) Hash identifier: ZuSDMuF6yQY5DIb0VDhnYWKBpNV8ap7hAFYgcR2Kieg= Subject key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA542C440A82106A8DD092A5AA987AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41273 IP: 83.171.216.0/22 IP: 2a09:2f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:c4:40:a8:21:06:a8:dd:09:2a:5a:a9:87:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:59:31:5d:25:64:93:aa:42:33:76:48:c7: fb:a6:87:91:f3:05:21:39:10:01:69:23:b7:fc:82: f0:91:b7:cd:33:24:09:88:73:27:ae:47:06:7d:a9: 0b:5d:bc:7c:1b:81:f5:bf:34:a8:1d:30:44:66:0b: ab:27:1f:fa:db:fa:7b:81:53:60:45:fb:c9:71:d7: b2:b5:da:65:a2:08:50:2f:c8:5b:5e:c4:f4:d0:02: 03:fa:a8:7a:66:12:cf:48:b8:82:a9:da:d4:ad:8b: 48:4c:23:94:29:cb:a5:93:50:41:94:47:e6:cd:b5: cb:81:4b:17:88:b6:ca:bb:a3:ff:8d:ae:4a:a4:59: 61:58:6c:fd:8e:19:63:2e:e7:05:df:30:35:31:9d: 77:77:29:12:cd:c6:35:ad:64:2f:c8:5f:6f:b6:54: 7d:bb:14:af:3c:f8:9b:bd:3b:2e:ca:09:1c:1f:32: ae:a2:c0:01:b2:0d:bc:45:9d:84:08:e5:dd:7b:ac: 13:33:bc:d2:e7:02:ed:6f:d3:01:fd:2f:f9:17:b6: 04:6e:d2:d6:6d:d5:24:38:84:8d:85:a4:70:e6:b6: 1b:2b:f2:c7:35:27:0b:1b:1a:8d:5d:e9:31:48:43: 59:01:6c:62:89:af:aa:37:1b:9d:e2:71:2d:4a:40: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.216.0/22 IPv6: 2a09:2f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41273 Signature Algorithm: sha256WithRSAEncryption 2a:65:73:2c:28:db:2e:85:0c:c7:59:31:eb:38:06:56:0d:08: 9a:38:ec:84:24:b0:5e:47:df:c3:8f:fd:05:54:a1:99:4a:3e: 06:c1:af:ef:5d:ed:7d:0e:99:b5:26:63:16:4d:39:55:70:29: 4d:34:c8:cb:31:aa:cc:83:7c:f5:0a:48:23:03:2a:c4:c8:f8: c1:ee:cc:7f:48:9a:93:13:91:29:76:43:f6:d6:9b:7f:ac:b6: a8:e0:59:23:98:0c:49:c5:34:6e:7c:84:f7:3e:a7:47:23:46: e5:90:19:59:37:30:68:85:5b:90:d5:d2:b4:2e:94:27:6d:d0: 0d:08:47:1f:bf:ba:87:a7:dd:de:7d:82:4e:cd:28:f3:3d:ff: d6:4b:d0:ec:80:1a:9b:f7:79:ef:99:f0:4d:9f:76:3c:50:4f: e4:32:50:9d:e6:20:69:eb:20:49:68:2e:80:4b:7f:1b:a1:6e: 3f:83:70:ae:02:ca:ef:d9:ea:52:be:e8:fd:f9:87:e9:60:cf: 4e:b4:84:a2:d4:46:f7:43:05:59:4d:83:ff:8c:fb:68:c3:05: e9:ac:bf:a1:af:c0:a9:50:24:ef:5d:29:70:6c:78:03:40:d1: 65:57:b3:d4:fb:33:27:93:b1:d0:fb:39:c2:d4:64:a3:c9:8c: d0:0b:91:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pULEQKghBqjdCSpaqYetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjM3ZjEzYWJkOTgyNzdjNjkxZmM3NmNlOTMzNDEwZDVkM2YzN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4tZMV0lZJOqQjN2SMf7poeR8wUh ORABaSO3/ILwkbfNMyQJiHMnrkcGfakLXbx8G4H1vzSoHTBEZgurJx/62/p7gVNg RfvJcdeytdploghQL8hbXsT00AID+qh6ZhLPSLiCqdrUrYtITCOUKculk1BBlEfm zbXLgUsXiLbKu6P/ja5KpFlhWGz9jhljLucF3zA1MZ13dykSzcY1rWQvyF9vtlR9 uxSvPPibvTsuygkcHzKuosABsg28RZ2ECOXde6wTM7zS5wLtb9MB/S/5F7YEbtLW bdUkOISNhaRw5rYbK/LHNScLGxqNXekxSENZAWxiia+qNxud4nEtSkAicQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJs38Tq9mCd8aR/HbOkzQQ1dPzfIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2MyMDYz My1mNzk3LTRiNjUtYjk4My0wNmE0MTIzYjQ2MWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvYzIwNjMz LWY3OTctNGI2NS1iOTgzLTA2YTQxMjNiNDYxZS8xL216ZnhPcjJZSjN4cEg4ZHM2 VE5CRFYwX044Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCU6vYMA0EAgACMAcDBQMqCS8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwChOTANBgkqhkiG9w0BAQsFAAOCAQEAKmVzLCjbLoUM x1kx6zgGVg0ImjjshCSwXkffw4/9BVShmUo+BsGv713tfQ6ZtSZjFk05VXApTTTI yzGqzIN89QpIIwMqxMj4we7Mf0iakxORKXZD9tabf6y2qOBZI5gMScU0bnyE9z6n RyNG5ZAZWTcwaIVbkNXStC6UJ23QDQhHH7+6h6fd3n2CTs0o8z3/1kvQ7IAam/d5 75nwTZ92PFBP5DJQneYgaesgSWgugEt/G6FuP4NwrgLK79nqUr7o/fmH6WDPTrSE otRG90MFWU2D/4z7aMMF6ay/oa/AqVAk710pcGx4A0DRZVez1PszJ5Ox0Ps5wtRk o8mM0AuRHA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:48 2026 by rpki-client