This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer File: nZibOZjhn8APhnDPbJ10AXFc808.cer (raw, json) Hash identifier: 46mmKnxPA375cbEtyj2iFQd9ggW2bEDFZhYG5TbaLFY= Subject key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910A2697DD219A22739666F33338237 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13121 AS: 33817 IP: 46.231.224.0/21 IP: 91.195.74.0/23 IP: 91.235.68.0/22 IP: 185.179.212.0/22 IP: 193.28.184.0/24 IP: 194.50.81.0/24 IP: 213.169.64.0/19 IP: 2a01:6880::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a2:69:7d:d2:19:a2:27:39:66:6f:33:33:82:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c1:52:73:28:09:99:83:4d:a0:1e:4a:7d:3b: f1:2e:4b:de:43:fd:cb:b0:cd:1b:91:83:69:98:dd: a6:51:e6:59:f0:41:64:b7:b2:df:ee:35:a1:b0:d2: 26:f7:a6:b9:0e:1c:20:6e:d7:cd:2a:55:5b:dc:ef: 3f:b7:b8:6a:54:d8:c5:47:57:e8:64:b9:20:52:c0: 31:06:6c:11:9e:3e:d4:a9:df:b6:58:1d:72:e8:64: 8f:7b:af:c1:f2:aa:85:bf:49:64:77:ca:d2:dd:ce: 1f:d7:67:5d:39:d4:84:8e:ca:14:a9:73:ad:b2:53: 8f:0a:81:10:cf:40:78:a4:17:c5:12:60:47:ee:ac: c3:0b:ed:5f:b5:98:50:38:70:73:d9:ca:44:f1:67: f7:5d:e0:2d:98:ec:55:1c:7d:f1:a5:a2:4e:17:e3: 19:2b:f2:c0:4e:27:70:fd:f0:d7:ea:b2:98:e4:27: a7:12:cf:af:16:8a:e4:82:fb:f5:86:16:de:3f:f0: 9c:00:ce:5c:5e:b0:79:03:3a:74:32:75:74:af:8f: 89:13:31:9f:c0:63:32:d2:6a:c8:dd:6f:c2:e3:d4: c6:1b:3c:70:6a:0d:bf:b1:3c:b7:c3:c5:0a:07:b0: 6d:5c:ed:d1:11:7c:dc:da:fb:5c:08:56:c1:04:7c: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.224.0/21 91.195.74.0/23 91.235.68.0/22 185.179.212.0/22 193.28.184.0/24 194.50.81.0/24 213.169.64.0/19 IPv6: 2a01:6880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13121 33817 Signature Algorithm: sha256WithRSAEncryption 5b:01:f2:9a:4d:18:22:23:2a:fa:68:0c:b5:cf:d3:fc:1c:25: d0:53:10:ba:60:5b:58:73:50:26:a9:73:b5:d9:97:00:0e:1f: 0c:f7:11:04:26:17:c3:62:a2:af:92:ce:fa:03:72:9b:2a:35: 63:62:47:f9:8d:5c:bd:4e:c4:2a:d4:d6:40:0f:b0:1e:d4:74: e2:f6:3c:b8:85:4e:cf:5e:f1:61:8c:53:25:14:aa:5b:7c:34: 38:b4:69:a0:4e:a1:cc:a8:f2:12:0c:a0:97:1c:d7:0e:92:0d: 38:93:28:c9:bb:6a:be:2c:4a:c2:85:b4:28:dc:fe:5c:36:89: 05:2f:91:ed:db:6d:82:a0:3f:17:dc:08:a7:05:17:b6:1f:81: 55:c9:c6:87:b7:1b:ed:17:a1:66:d5:39:9d:3a:0a:dd:37:91: 06:08:d4:5e:2d:cb:c2:d2:7e:3c:2a:70:b9:89:86:75:56:7d: 67:77:75:1d:2b:c3:2b:2b:34:ab:99:46:89:03:65:e4:e7:cc: 09:a9:82:aa:8d:0d:1a:68:eb:28:ed:db:6d:bd:7c:d3:74:7a: 7d:60:f0:89:50:be:c2:37:c7:ab:c4:2a:dd:e1:5e:32:51:58: 1e:43:b0:7a:0c:e6:a7:c9:9e:86:d5:da:2c:9d:8f:17:02:f3: 5f:4b:3c:62 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt5EKJpfdIZoic5Zm8zM4I3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDk4OWIzOTk4ZTE5ZmMwMGY4NjcwY2Y2YzlkNzQwMTcxNWNmMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78FScygJmYNNoB5KfTvxLkveQ/3L sM0bkYNpmN2mUeZZ8EFkt7Lf7jWhsNIm96a5DhwgbtfNKlVb3O8/t7hqVNjFR1fo ZLkgUsAxBmwRnj7Uqd+2WB1y6GSPe6/B8qqFv0lkd8rS3c4f12ddOdSEjsoUqXOt slOPCoEQz0B4pBfFEmBH7qzDC+1ftZhQOHBz2cpE8Wf3XeAtmOxVHH3xpaJOF+MZ K/LATidw/fDX6rKY5CenEs+vForkgvv1hhbeP/CcAM5cXrB5Azp0MnV0r4+JEzGf wGMy0mrI3W/C49TGGzxwag2/sTy3w8UKB7BtXO3REXzc2vtcCFbBBHwR0wIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzhjNWY1 YS04MDRiLTRkZjYtODI3Yi1jN2NjZDc5NDMxMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvOGM1ZjVh LTgwNGItNGRmNi04MjdiLWM3Y2NkNzk0MzEwNi8xL25aaWJPWmpobjhBUGhuRFBi SjEwQVhGYzgwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDLufgAwQBW8NKAwQCW+tEAwQCubPUAwQAwRy4 AwQAwjJRAwQF1alAMA0EAgACMAcDBQAqAWiAMB4GCCsGAQUFBwEIAQH/BA8wDaAL MAkCAjNBAgMAhBkwDQYJKoZIhvcNAQELBQADggEBAFsB8ppNGCIjKvpoDLXP0/wc JdBTELpgW1hzUCapc7XZlwAOHwz3EQQmF8Nioq+SzvoDcpsqNWNiR/mNXL1OxCrU 1kAPsB7UdOL2PLiFTs9e8WGMUyUUqlt8NDi0aaBOocyo8hIMoJcc1w6SDTiTKMm7 ar4sSsKFtCjc/lw2iQUvke3bbYKgPxfcCKcFF7YfgVXJxoe3G+0XoWbVOZ06Ct03 kQYI1F4ty8LSfjwqcLmJhnVWfWd3dR0rwysrNKuZRokDZeTnzAmpgqqNDRpo6yjt 2229fNN0en1g8IlQvsI3x6vEKt3hXjJRWB5DsHoM5qfJnobV2iydjxcC819LPGI= -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:12 2026 by rpki-client