This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer File: xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer (raw, json) Hash identifier: IRc38x5S+Y2B5AwyLJEQYyHwHP3XhPloDy+i2NWx3dY= Subject key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6442BB8FDC38CCE2513C73CED3BD1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.105.187.0/24 IP: 2a09:af00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:44:2b:b8:fd:c3:8c:ce:25:13:c7:3c:ed:3b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c596785476efbae77f961d23057057fa036fb27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:16:b1:cb:98:e8:64:ec:97:ef:6c:07:eb: 4e:ac:5a:1e:43:88:35:10:52:a4:f4:43:83:cc:38: 1c:02:d4:76:82:7f:b7:b4:a2:f3:4c:e6:9e:56:7c: f6:54:6c:98:be:f2:9a:94:33:61:b7:7a:6b:5c:0b: 78:09:74:25:d3:7f:c0:74:34:73:a5:e3:65:3b:80: d1:da:40:e3:a5:dc:c5:14:1e:f8:76:ac:be:c4:f3: 54:bb:3a:c2:41:07:10:81:0d:72:dc:02:df:6d:3c: ac:97:23:0a:5d:ad:32:84:cb:8b:5a:af:09:6d:60: e4:2e:42:a9:1c:2d:b8:70:20:43:8a:76:66:9d:ce: 32:b8:1b:89:9c:c2:1c:55:8a:41:64:10:67:90:fa: 8b:2f:13:35:87:94:11:ab:57:18:7e:25:44:07:23: e3:f5:6c:69:28:d1:89:d7:60:e0:ed:1c:51:d2:84: ff:cd:3c:eb:bf:ec:74:75:d6:e8:d5:66:fe:56:b4: dc:56:e9:2a:f5:c7:47:5f:78:46:ff:d1:a9:fd:2d: e4:cb:d7:5b:46:21:65:50:4c:ae:45:75:0d:e4:3f: 6c:09:f2:95:3e:c3:e8:77:eb:ae:b6:77:2f:c2:7f: ba:ea:ee:a5:8e:65:8e:e3:7f:3a:91:8e:73:d0:05: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.187.0/24 IPv6: 2a09:af00::/29 Signature Algorithm: sha256WithRSAEncryption 76:30:e2:0e:b8:63:ea:96:ad:9f:46:62:e5:52:13:23:06:18: 44:f6:85:4e:fd:d8:7f:51:a2:28:2c:ba:a7:88:66:29:9c:b7: 93:8a:57:fc:74:85:59:37:4f:8f:94:93:bb:dd:6d:77:05:7b: 51:51:e5:96:e1:26:43:f7:c2:51:a2:07:00:55:98:d4:f4:67: f2:30:1e:6a:8c:58:e1:67:8a:26:b3:63:71:77:ae:4a:91:c2: 16:b4:ab:ce:91:09:0a:0e:b0:27:c0:f5:be:97:40:34:0f:cf: 93:d4:1a:65:86:c8:97:22:d1:7e:77:a2:b5:1b:8c:10:6e:8c: 3e:b4:73:2e:db:c1:6c:b5:49:28:cb:cc:f4:70:d2:24:ac:84: de:d2:71:ee:a4:5f:a4:b6:03:c3:17:88:3c:4c:63:5c:6b:15: d2:e0:4b:ef:d2:89:3c:85:03:7a:f9:3b:68:99:bc:2c:22:d2: be:f6:0b:31:b5:bf:a7:43:e0:57:fd:0b:89:67:dc:cf:42:53: 8d:02:b4:2d:bc:40:d1:91:57:a4:a4:81:c6:16:c6:95:89:64: 3a:f5:3a:fd:c2:28:88:30:0d:0e:3a:f1:28:b1:0b:55:59:49: 68:fb:83:ba:78:b5:ef:41:6d:5e:63:47:9a:bb:ca:6d:70:70: 89:0b:8f:a4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pkQruP3DjM4lE8c87TvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTk2Nzg1NDc2ZWZiYWU3N2Y5NjFkMjMwNTcwNTdmYTAzNmZiMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uEWscuY6GTsl+9sB+tOrFoeQ4g1 EFKk9EODzDgcAtR2gn+3tKLzTOaeVnz2VGyYvvKalDNht3prXAt4CXQl03/AdDRz peNlO4DR2kDjpdzFFB74dqy+xPNUuzrCQQcQgQ1y3ALfbTyslyMKXa0yhMuLWq8J bWDkLkKpHC24cCBDinZmnc4yuBuJnMIcVYpBZBBnkPqLLxM1h5QRq1cYfiVEByPj 9WxpKNGJ12Dg7RxR0oT/zTzrv+x0ddbo1Wb+VrTcVukq9cdHX3hG/9Gp/S3ky9db RiFlUEyuRXUN5D9sCfKVPsPod+uutncvwn+66u6ljmWO4386kY5z0AV13wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMWWeFR277rnf5YdIwVwV/oDb7J/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzRhZTk5 ZC1mNTUyLTQ3NmMtODE3Ny1lYmY1ZjA0MzM3NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvNGFlOTlk LWY1NTItNDc2Yy04MTc3LWViZjVmMDQzMzc3Mi8xL3haWjRWSGJ2dXVkX2xoMGpC WEJYLWdOdnNuOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwWm7MA0EAgACMAcDBQMqCa8AMA0GCSqGSIb3 DQEBCwUAA4IBAQB2MOIOuGPqlq2fRmLlUhMjBhhE9oVO/dh/UaIoLLqniGYpnLeT ilf8dIVZN0+PlJO73W13BXtRUeWW4SZD98JRogcAVZjU9GfyMB5qjFjhZ4oms2Nx d65KkcIWtKvOkQkKDrAnwPW+l0A0D8+T1BplhsiXItF+d6K1G4wQbow+tHMu28Fs tUkoy8z0cNIkrITe0nHupF+ktgPDF4g8TGNcaxXS4Evv0ok8hQN6+TtombwsItK+ 9gsxtb+nQ+BX/QuJZ9zPQlONArQtvEDRkVekpIHGFsaViWQ69Tr9wiiIMA0OOvEo sQtVWUlo+4O6eLXvQW1eY0eau8ptcHCJC4+k -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:03 2026 by rpki-client