This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer File: pkzfoBYCORcDN7pgk0ugbkW4zRE.cer (raw, json) Hash identifier: fzEr3jUqkkCsHB//pxxceecolx6p5TffCvsuO1TtfR8= Subject key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36BF410B260FB49003728555FE588B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205760 IP: 185.196.76.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bf:41:0b:26:0f:b4:90:03:72:85:55:fe:58:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a64cdfa0160239170337ba60934ba06e45b8cd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:58:7f:fb:c6:24:e8:3a:8e:6a:9c:3f:23: e1:d4:6c:13:0c:cf:31:c9:40:67:5c:4d:e8:59:eb: d8:fb:9f:d2:98:d0:52:7e:39:ce:24:bc:67:e2:6a: 47:9f:bf:a2:32:85:48:ce:78:65:33:51:27:8f:e3: ef:44:cb:b5:87:74:f5:6a:ed:b7:d8:86:80:49:e9: d1:0f:4b:a7:22:81:bf:83:1f:61:47:b5:05:f9:62: 4f:7a:ae:99:06:42:32:25:1d:c1:78:2a:f6:35:4d: d2:b7:8d:88:c8:e2:1d:d4:e8:ae:75:3c:49:e0:76: 51:18:95:73:11:db:86:23:dc:3c:44:69:ad:c3:b8: 8f:fb:bf:12:e6:b0:2a:7b:3b:aa:92:95:f8:fa:a8: bf:fe:5d:a6:34:a1:4e:7f:fc:d5:66:70:24:10:9f: b0:dc:5b:c2:31:53:1e:e3:f7:6c:af:ec:55:ef:7e: b2:1a:44:70:36:30:9d:f7:9b:92:67:3c:7f:67:8b: c9:b5:10:92:49:35:58:ad:b4:42:8b:22:3d:ab:9e: 7a:40:d2:8a:49:36:4d:85:bf:53:e5:4a:f2:5a:b0: 9f:22:ff:28:9a:5e:17:c6:d9:1c:68:5e:f9:a3:9a: 5c:d0:4f:6d:62:e1:7b:79:9b:3f:fb:9e:71:d3:23: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.76.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205760 Signature Algorithm: sha256WithRSAEncryption 6f:6d:73:2b:a7:3a:65:9c:31:df:4e:f2:80:f5:3a:dd:37:48: 16:af:d6:6f:96:4d:51:29:20:e0:b5:cd:1e:09:97:2e:da:1b: 9f:d4:9d:b4:f6:c5:e9:99:7b:0f:5b:a1:78:37:9a:da:12:97: 1d:eb:10:d2:c0:f5:5e:66:36:2f:e2:3e:13:0b:cb:1b:78:37: 55:03:8c:22:a9:20:47:9e:da:23:36:8c:c6:3e:7f:ca:f2:5b: 75:eb:3a:b9:02:da:14:c7:c0:af:a1:38:e8:cf:4e:28:f0:47: b1:86:52:81:3e:21:8a:cc:d3:43:b4:dc:b3:96:03:1c:21:72: 87:0b:5a:15:ac:70:9f:c5:85:92:37:9d:bc:0a:90:a8:a2:01: c3:30:db:84:b7:8a:7f:e9:a2:e1:d6:db:8f:48:f1:08:76:eb: 65:51:8c:7e:3e:66:0f:b1:ba:a0:28:9d:6a:d6:d2:6f:fd:cb: 1c:03:7e:22:17:25:ba:d9:50:77:68:87:45:3f:98:3d:e2:e7: bf:82:8c:f7:61:9c:d0:ce:24:fd:03:f9:83:0a:34:8f:8c:98: d4:ce:55:82:33:3b:59:a3:ad:a9:24:2f:30:6e:f3:ad:b5:b4: 8c:cb:4d:f2:67:48:f0:1e:c4:09:b5:bd:bc:e1:0e:3e:6e:f5: 94:50:56:97 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7Nr9BCyYPtJADcoVV/liLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjRjZGZhMDE2MDIzOTE3MDMzN2JhNjA5MzRiYTA2ZTQ1YjhjZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7tYf/vGJOg6jmqcPyPh1GwTDM8x yUBnXE3oWevY+5/SmNBSfjnOJLxn4mpHn7+iMoVIznhlM1Enj+PvRMu1h3T1au23 2IaASenRD0unIoG/gx9hR7UF+WJPeq6ZBkIyJR3BeCr2NU3St42IyOId1OiudTxJ 4HZRGJVzEduGI9w8RGmtw7iP+78S5rAqezuqkpX4+qi//l2mNKFOf/zVZnAkEJ+w 3FvCMVMe4/dsr+xV736yGkRwNjCd95uSZzx/Z4vJtRCSSTVYrbRCiyI9q556QNKK STZNhb9T5UryWrCfIv8oml4XxtkcaF75o5pc0E9tYuF7eZs/+55x0yONIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKZM36AWAjkXAze6YJNLoG5FuM0RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0Lzc1NDM5 ZC1mYjA2LTRiNjMtODRhMy04YmQzYzZjNzA0ZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNzU0Mzlk LWZiMDYtNGI2My04NGEzLThiZDNjNmM3MDRkYy8xL3BremZvQllDT1JjRE43cGdr MHVnYmtXNHpSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCucRMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMjwDANBgkqhkiG9w0BAQsFAAOCAQEAb21zK6c6ZZwx307ygPU63TdIFq/Wb5ZN USkg4LXNHgmXLtobn9SdtPbF6Zl7D1uheDea2hKXHesQ0sD1XmY2L+I+EwvLG3g3 VQOMIqkgR57aIzaMxj5/yvJbdes6uQLaFMfAr6E46M9OKPBHsYZSgT4hiszTQ7Tc s5YDHCFyhwtaFaxwn8WFkjedvAqQqKIBwzDbhLeKf+mi4dbbj0jxCHbrZVGMfj5m D7G6oCidatbSb/3LHAN+IhclutlQd2iHRT+YPeLnv4KM92Gc0M4k/QP5gwo0j4yY 1M5VgjM7WaOtqSQvMG7zrbW0jMtN8mdI8B7ECbW9vOEOPm71lFBWlw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:29 2026 by rpki-client