This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer (raw, json) Hash identifier: ISBv6zB+6xrTF8f5s7/z3ifOn3yTD/KfIW15C1bfcq4= Subject key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB54F15188FD822271565F8E3D0DAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.66.108.0/22 IP: 185.117.168.0/22 IP: 2a0e:f0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:f1:51:88:fd:82:22:71:56:5f:8e:3d:0d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:bb:1c:c8:de:ff:30:65:16:fa:9c:3a:b1: f3:04:69:b5:3e:22:77:5d:ad:e8:d1:1c:00:07:c7: 23:bf:d9:5b:b6:11:bd:63:b1:3b:14:06:31:ac:09: df:2e:bd:d6:3d:55:af:1d:ff:73:1a:28:96:2b:cd: 46:60:4c:4d:b2:d8:1c:e1:8f:df:e8:aa:26:66:9d: f8:7f:fe:97:03:9e:69:77:fb:0b:44:86:0e:ac:2f: 13:d0:80:05:fa:dd:db:b1:be:5b:c5:b1:a7:ae:92: 08:95:b6:fd:3c:42:8f:16:97:71:04:82:ad:9d:4e: b0:1a:01:c3:f7:08:8a:90:1c:1e:22:6b:29:37:13: a6:d5:0a:ab:fb:de:69:f0:10:d3:fb:54:45:2f:e5: c9:ad:22:a6:bf:03:6a:56:6c:5d:0b:f6:bf:b9:6b: 90:18:26:56:74:09:9d:7b:b6:e7:68:9d:24:c0:0d: 33:4e:a7:f1:78:b0:44:e5:c0:61:1f:c7:4e:d9:e2: 71:61:51:c9:29:2d:74:d5:e8:63:43:fc:82:f7:ae: 45:bb:71:c1:37:55:75:44:00:a2:dd:97:a1:3b:cf: d9:6d:cd:e4:d5:0f:4d:0e:1a:5e:aa:48:af:b0:70: ed:f9:76:7f:51:02:e6:dc:f3:2b:1f:15:a5:24:d9: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.108.0/22 185.117.168.0/22 IPv6: 2a0e:f0c0::/29 Signature Algorithm: sha256WithRSAEncryption 04:78:70:6c:b6:12:00:f2:bc:d5:c0:4c:0b:22:a1:50:ba:cf: 5f:79:ff:b7:ba:a1:4b:94:f5:8a:74:85:9b:ca:da:c5:f7:aa: 7d:75:15:e3:a2:ad:64:9a:6f:08:71:ab:52:a8:f6:ff:63:43: f9:66:33:8d:20:f7:02:b4:38:d7:2e:1a:de:c0:ff:4c:8a:98: 4f:d2:7c:c0:1b:2d:6c:e3:d5:56:8f:71:a0:ad:15:5b:4c:fe: 58:f6:4f:92:b0:48:d0:44:26:f5:3e:03:cf:6c:3b:d9:38:17: 30:b4:0d:4e:fd:dc:e3:51:fb:a1:c6:d1:78:a0:ea:31:34:b6: 0d:af:3b:06:55:5e:68:48:82:a9:57:f8:83:98:9b:89:65:0c: 81:7b:8e:85:54:42:f6:78:db:4a:c5:f4:4b:a9:f8:3d:15:a8: 07:71:9d:25:df:e6:51:54:4e:ac:1a:12:bf:2b:af:7b:2a:ed: 0c:88:a4:0c:72:db:2e:be:ba:64:6c:ec:cc:0a:f9:4d:52:df: a6:fb:e7:91:ef:ea:f0:f7:bf:2b:5e:c7:8d:db:b3:df:61:4e: a1:30:28:e1:a0:d5:d2:c2:87:e9:c6:e2:17:a3:da:95:40:18: fa:13:f6:d5:5c:f9:53:93:6b:f8:68:86:b9:c5:80:ac:90:49: 3b:73:af:cd -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt261TxUYj9giJxVl+OPQ2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjM2NDBkYTdmMWJjMjNlZDQ1OTlmODRhMDg1M2M4Mzk5ZjM1ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c67HMje/zBlFvqcOrHzBGm1PiJ3 Xa3o0RwAB8cjv9lbthG9Y7E7FAYxrAnfLr3WPVWvHf9zGiiWK81GYExNstgc4Y/f 6KomZp34f/6XA55pd/sLRIYOrC8T0IAF+t3bsb5bxbGnrpIIlbb9PEKPFpdxBIKt nU6wGgHD9wiKkBweImspNxOm1Qqr+95p8BDT+1RFL+XJrSKmvwNqVmxdC/a/uWuQ GCZWdAmde7bnaJ0kwA0zTqfxeLBE5cBhH8dO2eJxYVHJKS101ehjQ/yC965Fu3HB N1V1RACi3ZehO8/Zbc3k1Q9NDhpeqkivsHDt+XZ/UQLm3PMrHxWlJNkf6QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFJ82QNp/G8I+1FmfhKCFPIOZ811yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2JiNDdj Mi1mMTBiLTRhNzctOGIwMy1lZGMzMzY2NTJlZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvYmI0N2My LWYxMGItNGE3Ny04YjAzLWVkYzMzNjY1MmVkNy8xL256WkEybjhid2o3VVdaLUVv SVU4ZzVuelhYSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUJsAwQCuXWoMA0EAgACMAcDBQMqDvDAMA0G CSqGSIb3DQEBCwUAA4IBAQAEeHBsthIA8rzVwEwLIqFQus9fef+3uqFLlPWKdIWb ytrF96p9dRXjoq1kmm8IcatSqPb/Y0P5ZjONIPcCtDjXLhrewP9MiphP0nzAGy1s 49VWj3GgrRVbTP5Y9k+SsEjQRCb1PgPPbDvZOBcwtA1O/dzjUfuhxtF4oOoxNLYN rzsGVV5oSIKpV/iDmJuJZQyBe46FVEL2eNtKxfRLqfg9FagHcZ0l3+ZRVE6sGhK/ K697Ku0MiKQMctsuvrpkbOzMCvlNUt+m++eR7+rw978rXseN27PfYU6hMCjhoNXS wofpxuIXo9qVQBj6E/bVXPlTk2v4aIa5xYCskEk7c6/N -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:02 2026 by rpki-client