This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer (raw, json) Hash identifier: YgHb3uO5bTHTuhI6xWypAUk1oQLG3G4OkKFY8YsCvY8= Subject key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F5BB55591913D80919BE04AE4920 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201010 IP: 185.89.24.0/22 IP: 2a05:d500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:bb:55:59:19:13:d8:09:19:be:04:ae:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:db:75:11:64:3c:b6:b9:db:89:46:33:9f: 24:7f:c7:a8:0f:21:83:04:28:90:60:c0:d9:7c:e3: 51:c6:80:7f:b2:e0:7d:bb:40:c0:aa:01:c5:b2:60: bf:71:3a:bd:4c:3b:d0:7e:d4:57:22:29:f8:87:eb: e5:cf:83:40:14:c0:77:9d:41:d9:5e:b7:c1:0a:6e: 21:63:d3:ac:64:6f:97:93:49:46:49:3b:ef:21:0b: 5e:b5:92:01:a0:1f:26:12:a8:2f:bd:dd:2f:48:70: a8:29:93:2d:3a:33:04:e4:75:d0:77:da:dc:8b:15: ba:5a:11:a4:68:a9:5d:d9:ed:46:87:92:1f:56:3c: 9a:c9:d5:bc:da:2e:b1:be:7c:33:c4:f8:bf:33:2f: ca:d6:fc:8a:db:46:fa:1e:8f:db:f4:57:78:14:dc: d7:8c:fd:37:d0:19:49:ba:a8:18:92:82:49:cd:0a: 5e:98:cd:d6:29:75:5a:16:f6:1b:f5:58:bb:4c:b5: db:86:75:b2:67:ed:e7:59:ec:46:37:e5:0d:1b:59: 26:6d:97:76:04:b4:a2:e5:33:89:86:f4:7b:7f:18: ca:0e:3d:61:37:92:f4:a7:bf:2d:58:43:90:3e:e4: 5c:d7:f8:5c:cd:d5:2a:e7:9f:7b:08:4e:7c:33:d7: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.24.0/22 IPv6: 2a05:d500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201010 Signature Algorithm: sha256WithRSAEncryption 23:b7:ea:74:a7:d8:8e:a7:73:c0:3c:4f:ee:b6:ab:54:9e:7a: 99:e3:82:44:58:0d:c5:2d:ed:0a:86:de:96:f0:fc:07:85:d2: 1f:98:ee:8f:4b:25:47:d6:38:63:a6:79:8c:eb:cf:af:b6:48: f6:1e:86:4d:bc:f3:bd:a6:4e:02:fd:a3:4a:d3:f3:94:04:0c: 0b:c5:5d:0c:06:58:c4:79:76:a7:5f:03:f2:31:96:e7:0d:aa: 08:8d:b9:54:1f:65:3f:a7:b5:26:0d:e5:a3:57:e3:d7:d8:50: 10:30:c3:85:b6:d6:c8:bb:e8:9f:95:3f:2f:c3:7d:ba:bc:be: 55:14:c2:55:d0:58:ef:52:6e:2a:ca:f1:68:18:2a:17:d7:a9: 29:37:48:43:97:a6:20:8f:e5:59:c4:fb:db:8d:55:d0:1c:be: 82:98:df:8c:38:07:3b:c0:f9:da:8f:0a:cb:1c:82:a8:26:b8: b1:54:cb:af:55:43:b4:e0:59:52:1b:3e:34:0f:63:3b:61:50: c6:08:18:98:0c:26:49:8d:f5:94:d9:f6:f0:63:bc:81:64:10: 5b:70:d7:f3:7f:11:04:ca:e3:21:b1:0f:8a:1e:6f:00:9a:5d: f1:fb:e6:2a:02:52:d0:dd:3b:5a:99:42:7d:d7:f1:08:80:43: da:7d:56:fe -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ovW7VVkZE9gJGb4ErkkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzMzYmQxMTFmZDhjYjc2ZjQ4ODNiYmJjYmZkYTU5ZGI2NmVkMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSXbdRFkPLa524lGM58kf8eoDyGD BCiQYMDZfONRxoB/suB9u0DAqgHFsmC/cTq9TDvQftRXIin4h+vlz4NAFMB3nUHZ XrfBCm4hY9OsZG+Xk0lGSTvvIQtetZIBoB8mEqgvvd0vSHCoKZMtOjME5HXQd9rc ixW6WhGkaKld2e1Gh5IfVjyaydW82i6xvnwzxPi/My/K1vyK20b6Ho/b9Fd4FNzX jP030BlJuqgYkoJJzQpemM3WKXVaFvYb9Vi7TLXbhnWyZ+3nWexGN+UNG1kmbZd2 BLSi5TOJhvR7fxjKDj1hN5L0p78tWEOQPuRc1/hczdUq5597CE58M9dh1wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKczvREf2Mt29Ig7u8v9pZ22btLeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzA3M2Ix OS0wODM5LTQzYWMtOGI1Yi0wOGNlZDkyYzk3NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvMDczYjE5 LTA4MzktNDNhYy04YjViLTA4Y2VkOTJjOTc3MC8xL3B6TzlFUl9ZeTNiMGlEdTd5 XzJsbmJadTB0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVkYMA0EAgACMAcDBQMqBdUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRMjANBgkqhkiG9w0BAQsFAAOCAQEAI7fqdKfYjqdz wDxP7rarVJ56meOCRFgNxS3tCobelvD8B4XSH5juj0slR9Y4Y6Z5jOvPr7ZI9h6G TbzzvaZOAv2jStPzlAQMC8VdDAZYxHl2p18D8jGW5w2qCI25VB9lP6e1Jg3lo1fj 19hQEDDDhbbWyLvon5U/L8N9ury+VRTCVdBY71JuKsrxaBgqF9epKTdIQ5emII/l WcT7241V0By+gpjfjDgHO8D52o8KyxyCqCa4sVTLr1VDtOBZUhs+NA9jO2FQxggY mAwmSY31lNn28GO8gWQQW3DX838RBMrjIbEPih5vAJpd8fvmKgJS0N07WplCfdfx CIBD2n1W/g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:54 2026 by rpki-client