This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer (raw, json) Hash identifier: hjjiLJKZ7bZvl0AlPyELZlmZxEaPjhC+4lFp4OqcSm8= Subject key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA39F9DBEB4E6BA11369BE127A170FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48231 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9f:9d:be:b4:e6:ba:11:36:9b:e1:27:a1:70:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19d46a6a336353a90f174fa990fc2241201eb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:a4:3c:a1:c7:36:51:49:ef:6f:45:7b:37: c8:04:7b:b1:66:73:e7:97:87:d2:11:ea:3e:76:26: 28:c9:eb:71:40:85:27:68:84:34:9c:5b:af:b9:8c: cf:c5:82:b2:01:57:41:aa:5e:c6:e1:87:6b:8b:5c: 2a:cd:47:d4:a6:66:6b:85:c2:32:91:f4:48:db:f0: 26:f4:5e:6b:14:63:71:7e:97:c7:88:be:73:d5:37: ac:b9:71:fc:8f:b0:7d:e7:69:6c:60:a4:95:53:fd: ee:c8:c1:6b:5f:65:43:69:f8:13:95:3a:1e:1d:f0: 6f:c3:83:3a:13:4b:36:4c:b2:d6:4c:6f:31:fb:b4: 1c:31:8f:fa:d3:76:eb:8a:b5:f3:d7:e0:e3:66:7b: 44:26:3c:9f:3f:03:d3:07:3c:89:9b:2d:6e:49:63: c8:fa:af:44:db:01:0e:66:0f:fc:62:5d:06:b1:f8: 44:4e:72:26:44:03:25:38:99:7e:c2:8e:c7:f0:fa: e4:06:6b:30:e1:06:ac:73:ea:0f:16:f6:17:4f:2c: 88:5b:c9:7d:93:c1:31:39:2a:9a:a9:11:ab:ab:66: 07:07:60:2c:cf:59:df:ec:f1:a9:f6:49:e3:12:b1: 0a:be:8e:3e:37:30:60:6f:bb:bb:96:b8:73:c6:f0: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48231 Signature Algorithm: sha256WithRSAEncryption 3e:39:98:90:2a:9c:30:0e:4f:2f:40:41:c9:59:d0:f6:98:f9: cf:67:1d:80:4a:98:63:23:fa:75:d4:3a:85:88:e4:2e:a8:8b: 2e:63:93:f5:d8:0c:97:d3:bc:c1:b6:42:f5:37:cb:73:46:a9: 4d:14:98:ba:ec:70:ed:d4:84:98:60:1f:42:41:00:51:a9:23: 55:42:36:42:88:b9:79:ae:79:39:b5:eb:13:e2:39:7d:71:3f: d3:c5:1c:72:26:c9:0a:a6:b1:5a:60:ad:47:85:3e:e0:e1:18: f6:9a:8c:4a:51:7a:3b:80:17:4f:ca:97:bc:28:c7:da:67:c3: 3d:4e:e1:e8:70:8d:d4:3c:3c:1e:b3:89:23:bd:fe:a0:d1:51: d6:c1:29:99:21:bb:53:9d:ef:af:f7:36:dd:49:aa:a7:fa:bc: f6:c3:5c:c4:55:97:a7:ec:31:9e:96:62:6e:7b:78:3b:1f:ec: 18:59:72:b8:05:ac:11:e4:4d:fb:61:61:bb:88:f3:54:1a:5f: 30:4f:c3:eb:c1:3c:00:71:c3:a2:55:13:d3:79:21:2b:e8:90: cc:69:3b:15:60:0d:aa:4e:e8:bb:46:1d:22:46:3a:cd:5a:59: 5a:17:bd:1c:e3:e7:93:c0:fb:59:9f:fa:6f:45:e1:3b:c9:56: d6:65:69:02 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7o5+dvrTmuhE2m+EnoXD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTlkNDZhNmEzMzYzNTNhOTBmMTc0ZmE5OTBmYzIyNDEyMDFlYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWkPKHHNlFJ729FezfIBHuxZnPn l4fSEeo+diYoyetxQIUnaIQ0nFuvuYzPxYKyAVdBql7G4Ydri1wqzUfUpmZrhcIy kfRI2/Am9F5rFGNxfpfHiL5z1TesuXH8j7B952lsYKSVU/3uyMFrX2VDafgTlToe HfBvw4M6E0s2TLLWTG8x+7QcMY/603brirXz1+DjZntEJjyfPwPTBzyJmy1uSWPI +q9E2wEOZg/8Yl0GsfhETnImRAMlOJl+wo7H8PrkBmsw4Qasc+oPFvYXTyyIW8l9 k8ExOSqaqRGrq2YHB2Asz1nf7PGp9knjErEKvo4+NzBgb7u7lrhzxvD7fwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLGdRqajNjU6kPF0+pkPwiQSAescMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2UyZjRl MS1hNzBhLTRjYTEtOTIxYy01OTRjNjlmYjA3MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvZTJmNGUx LWE3MGEtNGNhMS05MjFjLTU5NGM2OWZiMDcxMS8xL3NaMUdwcU0yTlRxUThYVDZt UV9DSkJJQjZ4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8ZzANBgkqhkiG9w0BAQsFAAOCAQEAPjmYkCqcMA5P L0BByVnQ9pj5z2cdgEqYYyP6ddQ6hYjkLqiLLmOT9dgMl9O8wbZC9TfLc0apTRSY uuxw7dSEmGAfQkEAUakjVUI2Qoi5ea55ObXrE+I5fXE/08UccibJCqaxWmCtR4U+ 4OEY9pqMSlF6O4AXT8qXvCjH2mfDPU7h6HCN1Dw8HrOJI73+oNFR1sEpmSG7U53v r/c23Umqp/q89sNcxFWXp+wxnpZibnt4Ox/sGFlyuAWsEeRN+2Fhu4jzVBpfME/D 68E8AHHDolUT03khK+iQzGk7FWANqk7ou0YdIkY6zVpZWhe9HOPnk8D7WZ/6b0Xh O8lW1mVpAg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:06 2026 by rpki-client