This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer File: pZDvI7RWydsg0wdCkysBf8VyTlY.cer (raw, json) Hash identifier: aK+/nXgTXf2SMowhacHGdmZDWUqzQ7+kMhKizH//1Gc= Subject key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B42CA2E3B259D0C1B7BD88777398 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43804 IP: 193.200.203.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b4:2c:a2:e3:b2:59:d0:c1:b7:bd:88:77:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a590ef23b456c9db20d30742932b017fc5724e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:79:1e:b7:67:c2:fe:e1:be:77:c8:cf:4e: fc:36:be:8f:94:8a:8e:6a:5a:97:4c:2e:f2:f6:2b: 29:42:ea:f7:67:8d:8f:c6:9d:7b:02:d7:c2:65:37: 5c:b7:06:42:bb:f8:32:76:1e:4a:26:44:24:f5:51: f2:43:fa:23:df:7a:32:7f:9f:5d:c3:0b:3e:53:fd: 4f:9b:e5:b2:02:76:9b:ac:a1:a0:87:97:6f:8f:ba: 64:31:9e:74:17:e5:9b:87:be:13:cd:ad:29:c5:3f: b0:af:01:c6:71:2d:3f:9a:88:d0:13:c5:8e:bf:97: 0c:ea:22:dd:e4:20:b1:a1:e8:a0:53:f4:36:37:cd: 31:c9:0d:d3:17:09:99:22:68:ea:21:a6:43:9e:3a: 68:92:b7:67:10:da:bd:4b:00:57:da:2d:06:d2:e0: 28:7b:99:4a:10:af:d0:ac:60:95:a6:de:92:09:01: ad:50:e0:c4:a9:dd:d0:c9:1e:d4:b0:4f:c0:b7:6c: a6:e5:28:08:2b:64:2f:09:fc:6f:13:d2:f8:f0:19: 3a:35:19:8e:29:3a:04:31:29:ef:41:e3:27:4c:bd: 43:a6:d4:0c:c0:d9:28:51:86:05:2d:e3:ca:24:51: 52:31:14:a9:ee:72:cc:2c:ab:43:0c:57:60:d8:0d: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.203.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43804 Signature Algorithm: sha256WithRSAEncryption 82:c7:a8:04:99:d1:fb:30:a4:59:e2:e4:86:81:20:e6:34:c2: f9:95:18:7d:cd:cb:13:a4:c5:94:6e:50:3d:68:17:2b:b9:f5: 4a:a3:36:bc:5f:dc:4d:23:27:da:9c:b7:71:24:3e:68:52:86: 15:a8:88:e0:9f:84:49:79:ea:7d:ae:07:3f:45:18:05:5a:0c: 76:a0:e5:2f:94:f0:be:cf:d8:23:cb:36:2d:26:db:4d:ef:35: 78:66:6e:47:a6:7f:c9:49:9c:a8:b5:d3:fd:fe:14:84:e8:85: bb:3a:5d:30:75:a3:f4:c6:2f:00:65:62:50:16:3a:bb:84:ad: 7b:b2:a1:e7:e4:19:b8:c2:be:5f:42:34:90:19:9c:42:99:49: 3b:2d:00:ef:d5:45:a5:ad:51:03:80:12:88:3d:81:9a:da:8d: ae:78:7a:8c:dc:8f:c3:2e:29:64:4f:d3:f8:92:ed:a5:ed:0e: 17:47:08:2f:25:b1:65:8f:07:94:c6:31:ac:46:c1:d2:bd:35: b7:0b:00:7d:7e:7b:b1:bd:e5:34:87:8f:db:18:b4:7c:6e:32: a0:fc:0d:71:1e:67:0b:be:f7:d4:27:40:9a:46:18:39:a3:01: 46:30:12:6c:ef:fb:62:92:6e:ef:84:e0:c7:ba:f3:b5:6c:ff: 91:a3:5f:0c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xrQsouOyWdDBt72Id3OYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTkwZWYyM2I0NTZjOWRiMjBkMzA3NDI5MzJiMDE3ZmM1NzI0ZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzt5Hrdnwv7hvnfIz078Nr6PlIqO alqXTC7y9ispQur3Z42Pxp17AtfCZTdctwZCu/gydh5KJkQk9VHyQ/oj33oyf59d wws+U/1Pm+WyAnabrKGgh5dvj7pkMZ50F+Wbh74Tza0pxT+wrwHGcS0/mojQE8WO v5cM6iLd5CCxoeigU/Q2N80xyQ3TFwmZImjqIaZDnjpokrdnENq9SwBX2i0G0uAo e5lKEK/QrGCVpt6SCQGtUODEqd3QyR7UsE/At2ym5SgIK2QvCfxvE9L48Bk6NRmO KToEMSnvQeMnTL1DptQMwNkoUYYFLePKJFFSMRSp7nLMLKtDDFdg2A2ewQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKWQ7yO0VsnbINMHQpMrAX/Fck5WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzMxODVj NC1kNzI0LTQzNWQtODI3Ny0xNTJkMjA0ZWJmYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMzE4NWM0 LWQ3MjQtNDM1ZC04Mjc3LTE1MmQyMDRlYmZhMy8xL3BaRHZJN1JXeWRzZzB3ZENr eXNCZjhWeVRsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcjLMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCrHDANBgkqhkiG9w0BAQsFAAOCAQEAgseoBJnR+zCkWeLkhoEg5jTC+ZUYfc3L E6TFlG5QPWgXK7n1SqM2vF/cTSMn2py3cSQ+aFKGFaiI4J+ESXnqfa4HP0UYBVoM dqDlL5Twvs/YI8s2LSbbTe81eGZuR6Z/yUmcqLXT/f4UhOiFuzpdMHWj9MYvAGVi UBY6u4Ste7Kh5+QZuMK+X0I0kBmcQplJOy0A79VFpa1RA4ASiD2BmtqNrnh6jNyP wy4pZE/T+JLtpe0OF0cILyWxZY8HlMYxrEbB0r01twsAfX57sb3lNIeP2xi0fG4y oPwNcR5nC7731CdAmkYYOaMBRjASbO/7YpJu74Tgx7rztWz/kaNfDA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:50 2026 by rpki-client