This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer File: z-A2c7iPCK9i_mUqGPb6nINLWO0.cer (raw, json) Hash identifier: rg9l8WBFLNVaGpSEtS5ZeLLL9nAhEB0kGkTC4tGNK/0= Subject key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D151F3962B9CF42FAD2B50DEAA9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203822 IP: 31.207.48.0/22 IP: 185.69.60.0/22 IP: 2a03:2fa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d1:51:f3:96:2b:9c:f4:2f:ad:2b:50:de:aa:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:b1:9d:51:41:d3:fc:f9:c9:13:10:b2:ef: b7:8d:38:71:6f:8d:66:12:fd:10:50:fd:d6:cd:07: 3b:70:02:20:a2:ae:e9:7b:81:a7:b9:4f:cb:92:ef: cf:22:06:f7:19:e3:e3:76:63:65:78:f0:d9:f9:f7: ce:29:67:05:5a:82:f0:e6:2a:68:e7:4e:a0:47:53: c8:95:25:a5:2a:2f:85:9e:ce:9d:49:21:60:4d:a7: 2a:b8:9e:1f:42:69:b8:8e:65:3c:1b:40:24:5d:cd: 0a:6f:c2:d0:27:9e:9e:cb:af:f8:38:97:6c:06:29: 4a:d6:67:26:a3:38:29:a6:90:f8:d6:f5:a5:d5:91: 12:8e:b7:ee:28:ea:42:3f:f6:e0:51:8f:7e:22:19: 5d:0f:8b:8b:74:07:62:27:b2:42:fd:00:63:48:e4: 32:0e:04:f7:80:fd:5d:be:ae:43:80:fc:99:80:40: b5:a8:32:91:b1:44:70:6f:20:18:10:c0:c1:95:15: d7:cc:45:cd:ba:c2:96:e7:30:b8:07:f2:8f:1d:fe: 93:41:00:c3:89:79:ae:67:8a:4c:36:3b:fe:c5:52: fd:43:a6:38:d3:21:d2:03:a4:aa:fa:ba:d6:eb:70: c3:81:ee:ab:7b:ab:42:24:01:33:ff:0f:61:bf:b4: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.48.0/22 185.69.60.0/22 IPv6: 2a03:2fa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203822 Signature Algorithm: sha256WithRSAEncryption 64:92:e7:b2:01:81:f8:d8:84:83:e9:fc:4f:03:85:01:7a:95: fe:74:c8:a2:4e:34:63:b5:ba:95:11:4f:50:f3:b4:1b:39:62: 9c:fa:7a:a6:a4:ca:e7:59:bd:8a:49:7e:d0:01:4d:82:d3:6f: 4c:6b:c2:3c:f0:73:ae:cc:1f:63:b7:38:5e:0e:4f:3a:55:96: 8c:31:d3:8e:17:52:0c:f9:4f:58:e2:9a:88:a0:80:9e:91:94: ce:c6:e2:01:5d:8a:95:14:ae:61:f5:f3:09:52:9b:f4:6f:27: d9:18:9d:08:1f:32:14:a4:93:f6:fc:b4:97:d3:2b:5d:d0:1c: df:47:29:e3:c9:8c:78:73:7a:14:24:b2:ee:13:94:10:0b:91: ae:37:52:bb:fe:5b:73:eb:26:74:cb:f8:1c:80:ba:27:aa:0f: 10:a3:52:60:a9:47:7f:bc:0a:d7:74:5d:de:4b:21:88:bb:f2: e7:aa:b4:83:01:52:4e:9b:dc:88:b9:9c:a6:7b:58:31:52:63: 96:b5:d8:62:fc:ca:70:56:5f:68:2b:e8:c1:52:86:0a:b3:c4: 8d:f1:54:d2:e3:2c:45:dc:2d:15:ec:e7:96:6f:50:30:17:c1: 48:2a:20:ca:83:88:20:bb:5b:43:7d:2a:b0:7a:4b:c8:d3:4b: 32:26:f5:49 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WNFR85YrnPQvrStQ3qqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmUwMzY3M2I4OGYwOGFmNjJmZTY1MmExOGY2ZmE5YzgzNGI1OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j2xnVFB0/z5yRMQsu+3jThxb41m Ev0QUP3WzQc7cAIgoq7pe4GnuU/Lku/PIgb3GePjdmNlePDZ+ffOKWcFWoLw5ipo 506gR1PIlSWlKi+Fns6dSSFgTacquJ4fQmm4jmU8G0AkXc0Kb8LQJ56ey6/4OJds BilK1mcmozgpppD41vWl1ZESjrfuKOpCP/bgUY9+IhldD4uLdAdiJ7JC/QBjSOQy DgT3gP1dvq5DgPyZgEC1qDKRsURwbyAYEMDBlRXXzEXNusKW5zC4B/KPHf6TQQDD iXmuZ4pMNjv+xVL9Q6Y40yHSA6Sq+rrW63DDge6re6tCJAEz/w9hv7TY9QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM/gNnO4jwivYv5lKhj2+pyDS1jtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2ZiZWU2 NS04YTg4LTRkMTMtOWViNy03YTEyZWVkZjhlNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZmJlZTY1 LThhODgtNGQxMy05ZWI3LTdhMTJlZWRmOGU1Yy8xL3otQTJjN2lQQ0s5aV9tVXFH UGI2bklOTFdPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCH88wAwQCuUU8MA0EAgACMAcDBQAqAy+gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMcLjANBgkqhkiG9w0BAQsFAAOCAQEAZJLn sgGB+NiEg+n8TwOFAXqV/nTIok40Y7W6lRFPUPO0GzlinPp6pqTK51m9ikl+0AFN gtNvTGvCPPBzrswfY7c4Xg5POlWWjDHTjhdSDPlPWOKaiKCAnpGUzsbiAV2KlRSu YfXzCVKb9G8n2RidCB8yFKST9vy0l9MrXdAc30cp48mMeHN6FCSy7hOUEAuRrjdS u/5bc+smdMv4HIC6J6oPEKNSYKlHf7wK13Rd3kshiLvy56q0gwFSTpvciLmcpntY MVJjlrXYYvzKcFZfaCvowVKGCrPEjfFU0uMsRdwtFeznlm9QMBfBSCogyoOIILtb Q30qsHpLyNNLMib1SQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:42 2026 by rpki-client