This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer File: pzfikBac_OajOKZrykXP5jXRVEY.cer (raw, json) Hash identifier: JaC/wWAH0cNWyKdVY0A+uPvczVxyM8BjkrPi8Ogiifs= Subject key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB86B3A79DBDCC2B0E5A7AB6335EC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207426 IP: 185.81.240.0/22 IP: 2a03:65e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:86:b3:a7:9d:bd:cc:2b:0e:5a:7a:b6:33:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a737e290169cfce6a338a66bca45cfe635d15446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:a1:cb:0f:2d:b4:6e:60:b1:6e:cd:89:40: ad:a4:3f:dd:4a:36:e6:ac:f8:bb:5b:12:2d:47:ef: f1:6d:d4:7e:27:81:24:20:a0:7a:c2:17:de:bd:65: 4e:4e:bd:a1:8f:f8:15:5d:07:da:d6:02:7d:60:b2: fa:9b:4e:91:96:c1:8e:2a:03:06:0d:ec:16:67:c6: ba:01:c3:6a:53:98:50:a6:86:65:04:ac:20:4c:37: 95:58:aa:d5:d9:44:4f:03:87:43:06:23:4c:78:95: 60:87:77:3e:64:c7:35:2f:23:b7:55:6e:45:4d:05: 71:74:1e:70:a3:82:1b:f6:c5:aa:90:ef:3d:83:0c: e1:54:cf:d7:a1:5c:36:37:d2:75:34:5f:d7:f2:1f: 29:33:65:52:01:9a:da:d7:be:92:1a:23:7b:ee:0e: 5a:17:f7:ca:27:a7:48:7a:93:da:00:8f:72:c8:60: 61:61:28:21:1f:ac:e7:26:56:1d:66:c5:15:7e:3d: 55:e5:b7:9f:4d:6f:8d:fd:50:f4:9c:45:b0:da:c8: 05:99:1a:7c:4e:7f:cf:70:ca:dc:5f:f7:df:36:a6: 34:3d:93:e0:53:74:4f:18:8f:57:e6:aa:d2:0d:ca: df:c4:b3:72:82:eb:03:04:70:86:b4:1d:7a:5f:61: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.240.0/22 IPv6: 2a03:65e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207426 Signature Algorithm: sha256WithRSAEncryption 44:46:b6:58:45:88:6a:ae:56:0c:1c:0f:22:f5:4e:15:10:b2: d9:2e:63:f7:14:2b:5a:63:13:02:4f:89:e5:ac:f2:35:a5:19: c1:93:30:7f:29:36:14:ae:d8:78:26:0d:4f:6f:75:00:df:5c: 6e:f9:8a:64:a7:7a:92:83:be:c3:6d:6f:a1:24:76:e6:1d:3d: 02:8b:39:d6:5b:7a:dc:36:d8:cb:ec:f8:b7:57:1a:9e:b5:eb: c4:7b:01:ad:f6:e3:13:63:45:9d:64:51:09:d0:aa:5d:ec:de: 89:b0:02:66:78:5f:79:0a:5a:09:c0:d4:b0:b8:74:ef:b1:29: c1:fc:f6:b8:5a:bb:de:10:68:5e:61:76:21:4a:0e:32:01:b2: 26:31:0c:27:6f:ff:b6:6b:29:dd:e1:57:79:39:e3:99:57:0b: 0a:f5:05:98:ac:8f:0c:72:f1:58:76:f6:18:9b:02:04:45:a6: c9:66:d2:cc:5c:9b:3a:c9:d3:bb:65:4c:9c:2a:67:eb:5c:0b: d5:05:bb:8d:9e:96:57:b1:2d:0e:48:d7:4b:c6:bc:93:46:fb: d4:99:a8:66:90:b2:aa:1d:0a:e8:6c:d3:f9:bf:9f:9d:3a:b1: cf:ed:04:d3:9c:97:2e:3b:07:a3:9b:6f:12:80:df:08:7d:8b: 42:42:fe:03 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt264azp529zCsOWnq2M17AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzM3ZTI5MDE2OWNmY2U2YTMzOGE2NmJjYTQ1Y2ZlNjM1ZDE1NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyKhyw8ttG5gsW7NiUCtpD/dSjbm rPi7WxItR+/xbdR+J4EkIKB6whfevWVOTr2hj/gVXQfa1gJ9YLL6m06RlsGOKgMG DewWZ8a6AcNqU5hQpoZlBKwgTDeVWKrV2URPA4dDBiNMeJVgh3c+ZMc1LyO3VW5F TQVxdB5wo4Ib9sWqkO89gwzhVM/XoVw2N9J1NF/X8h8pM2VSAZra176SGiN77g5a F/fKJ6dIepPaAI9yyGBhYSghH6znJlYdZsUVfj1V5befTW+N/VD0nEWw2sgFmRp8 Tn/PcMrcX/ffNqY0PZPgU3RPGI9X5qrSDcrfxLNygusDBHCGtB16X2ETcQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKc34pAWnPzmozima8pFz+Y10VRGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2FmYTlh Zi1mZTVlLTQwMjMtYWMwZi03NmQyNjdhMjQ4OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvYWZhOWFm LWZlNWUtNDAyMy1hYzBmLTc2ZDI2N2EyNDg5ZC8xL3B6ZmlrQmFjX09hak9LWnJ5 a1hQNWpYUlZFWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVHwMA0EAgACMAcDBQAqA2XgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqQjANBgkqhkiG9w0BAQsFAAOCAQEAREa2WEWIaq5W DBwPIvVOFRCy2S5j9xQrWmMTAk+J5azyNaUZwZMwfyk2FK7YeCYNT291AN9cbvmK ZKd6koO+w21voSR25h09Aos51lt63DbYy+z4t1canrXrxHsBrfbjE2NFnWRRCdCq XezeibACZnhfeQpaCcDUsLh077Epwfz2uFq73hBoXmF2IUoOMgGyJjEMJ2//tmsp 3eFXeTnjmVcLCvUFmKyPDHLxWHb2GJsCBEWmyWbSzFybOsnTu2VMnCpn61wL1QW7 jZ6WV7EtDkjXS8a8k0b71JmoZpCyqh0K6GzT+b+fnTqxz+0E05yXLjsHo5tvEoDf CH2LQkL+Aw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:26 2026 by rpki-client