This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer (raw, json) Hash identifier: 5kR/wldtXc1aGJxU4B0LK4PqBZI8sGmdQl1nxe3qKx0= Subject key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C31E72E577C437488A3D6B37AFC7DE497 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 07:42:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56322 IP: 91.219.236.0/22 IP: 185.163.204.0/24 IP: 195.20.115.0/24 IP: 2a10:c800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:e7:2e:57:7c:43:74:88:a3:d6:b3:7a:fc:7d:e4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 07:42:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:e1:18:14:96:f4:b4:e6:cc:79:7b:70:f9: 23:42:47:8e:54:b0:de:71:30:88:a8:cc:7d:60:29: fd:18:8d:7c:85:ee:2c:e3:7f:df:fd:37:72:87:c0: 64:f5:7e:11:3e:fe:b5:77:d4:2d:4d:ff:13:32:df: 12:a1:d9:df:30:20:b0:04:cf:6d:78:bb:10:05:16: 4b:20:98:8e:27:51:67:fe:56:77:ff:de:e2:69:4e: 03:28:a6:57:86:b6:14:e7:8a:eb:4f:0f:23:c9:61: 23:d0:43:40:71:69:e0:ce:9f:ef:c5:49:1e:6b:17: 38:f0:c7:10:b5:38:07:f6:9e:61:d6:56:ca:7f:ce: d7:94:cd:29:bf:11:d4:85:2f:b5:c0:54:70:34:31: 5a:4d:56:ad:99:6f:09:d1:2d:92:d0:bd:b0:38:84: e5:cb:74:0d:d0:0b:c1:10:b5:cf:10:23:7b:ce:37: 1c:f0:5b:8d:d6:e5:24:07:ef:dc:71:ef:32:a3:19: 02:66:bf:af:7c:d5:62:8e:74:b1:3f:7d:16:3b:97: af:59:a7:9e:73:f9:66:f8:72:ed:50:5d:26:b1:57: c2:1f:48:cb:68:ee:d6:b3:ae:73:de:58:64:cf:3d: f5:20:97:4c:d0:97:d1:57:2c:0b:ed:ad:99:df:fa: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.236.0/22 185.163.204.0/24 195.20.115.0/24 IPv6: 2a10:c800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56322 Signature Algorithm: sha256WithRSAEncryption 41:67:71:07:cb:7c:d8:9c:bf:c5:12:19:31:10:3a:9a:3a:1b: 57:2f:8d:62:3d:3f:2c:f6:4d:7a:64:02:80:3c:cd:7c:8e:f4: 96:a8:22:af:3c:fa:06:d6:97:6e:f5:f3:f2:b9:c7:f9:60:79: b0:f6:c2:f1:5c:db:b5:27:55:2b:47:eb:41:07:fd:b4:ce:7a: 71:92:21:a7:7a:db:cd:70:1e:b0:71:a4:65:f5:60:1f:ce:2a: af:80:f1:22:6c:6b:b7:30:3a:3a:41:d0:48:36:01:a8:3e:b4: ac:06:0d:58:04:83:ad:42:32:24:d4:9e:02:f7:b7:6b:b8:0c: b9:fe:fb:75:19:21:b1:0d:29:fd:8f:cc:d7:79:da:63:4e:4b: c0:b9:1d:26:fc:24:93:dc:20:46:e1:67:91:81:a0:41:3d:a9: 47:6d:d9:44:e3:1a:8e:d9:a7:84:3f:58:63:f7:3e:a8:57:a8: 88:57:7f:b0:07:12:05:44:5e:09:0f:61:51:51:f3:fa:b2:f0: 18:6e:46:ef:e6:92:5d:9f:c3:76:3a:8b:f4:d5:6d:7c:6b:cc: 06:a0:1f:a5:78:5f:7f:ee:07:ad:66:32:89:50:53:eb:8d:6b: 01:78:e9:8f:d0:48:ca:92:8c:e7:3c:ab:db:a7:9b:08:31:f8: cd:68:7c:b7 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZwx5y5XfEN0iKPWs3r8feSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MDc0MjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDM2N2JjMTlmMDY2OTk2NDkwYTIwNjY3NGM4ZGE4ZjVlZDJjZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11HhGBSW9LTmzHl7cPkjQkeOVLDe cTCIqMx9YCn9GI18he4s43/f/Tdyh8Bk9X4RPv61d9QtTf8TMt8SodnfMCCwBM9t eLsQBRZLIJiOJ1Fn/lZ3/97iaU4DKKZXhrYU54rrTw8jyWEj0ENAcWngzp/vxUke axc48McQtTgH9p5h1lbKf87XlM0pvxHUhS+1wFRwNDFaTVatmW8J0S2S0L2wOITl y3QN0AvBELXPECN7zjcc8FuN1uUkB+/cce8yoxkCZr+vfNVijnSxP30WO5evWaee c/lm+HLtUF0msVfCH0jLaO7Ws65z3lhkzz31IJdM0JfRVywL7a2Z3/oGQQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFK02e8GfBmmWSQogZnTI2o9e0s0OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzNjYzg0 OC03ODYxLTRjZTEtODcwZC04NGI2N2I0NzBiMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvM2NjODQ4 LTc4NjEtNGNlMS04NzBkLTg0YjY3YjQ3MGIwNC8xL3JUWjd3WjhHYVpaSkNpQm1k TWphajE3U3pRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCW9vsAwQAuaPMAwQAwxRzMA0EAgACMAcDBQMq EMgAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcAjANBgkqhkiG9w0BAQsFAAOC AQEAQWdxB8t82Jy/xRIZMRA6mjobVy+NYj0/LPZNemQCgDzNfI70lqgirzz6BtaX bvXz8rnH+WB5sPbC8VzbtSdVK0frQQf9tM56cZIhp3rbzXAesHGkZfVgH84qr4Dx ImxrtzA6OkHQSDYBqD60rAYNWASDrUIyJNSeAve3a7gMuf77dRkhsQ0p/Y/M13na Y05LwLkdJvwkk9wgRuFnkYGgQT2pR23ZROMajtmnhD9YY/c+qFeoiFd/sAcSBURe CQ9hUVHz+rLwGG5G7+aSXZ/DdjqL9NVtfGvMBqAfpXhff+4HrWYyiVBT641rAXjp j9BIypKM5zyr26ebCDH4zWh8tw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:53 2026 by rpki-client