This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer File: z13l9P7Bb1FvC8TWMcJidmP5BfM.cer (raw, json) Hash identifier: pzP63ARoEp5Lxqx9tK7g9SLc+/Ot+d60Fhj81TfU/J4= Subject key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C74F9EE91F611588CD089713D905AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197082 IP: 91.217.225.0/24 IP: 185.75.216.0/22 IP: 2a05:4dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4f:9e:e9:1f:61:15:88:cd:08:97:13:d9:05:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:82:31:8e:11:4a:9d:5b:86:3d:a4:f5:6a:52: 68:9d:e1:62:01:fe:7a:e2:da:ed:71:e7:b5:10:e2: c5:eb:60:3e:6e:69:3e:4a:71:fc:b0:42:5c:fd:2b: 8a:5a:ca:b4:dd:d3:62:49:56:e4:b9:67:ac:0a:06: cd:7e:26:00:8d:a0:51:87:98:61:fd:10:0a:82:bf: b0:55:06:f7:55:5c:30:d5:85:44:84:74:f7:9c:40: 88:88:10:13:4f:4f:92:d1:08:09:f3:9c:6b:65:b1: e4:bf:30:c6:d9:1a:c0:1f:f0:a3:a8:e0:80:41:28: ba:04:8e:de:84:45:1f:bf:1e:cd:91:32:a8:05:fe: 95:39:c9:d5:3c:42:39:2a:7e:96:a1:b5:ee:6d:04: 31:0f:a2:86:99:dc:0a:46:f1:db:d1:91:8e:43:ab: 98:6e:b9:10:f0:eb:d8:1f:dd:f7:f4:18:6e:37:c8: ba:15:33:ff:05:78:d6:40:f4:a6:38:74:64:bb:90: a5:d6:bf:f0:84:54:04:41:c6:f6:fa:17:07:e4:2e: 30:47:8a:89:02:c9:52:07:8b:e3:ac:4f:6d:5e:69: 74:e8:85:c3:65:6a:df:b9:c2:27:3d:94:aa:d2:14: 00:9f:8b:e2:57:0e:88:ce:90:2f:c1:b7:05:9b:1c: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.225.0/24 185.75.216.0/22 IPv6: 2a05:4dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197082 Signature Algorithm: sha256WithRSAEncryption a4:67:25:ef:36:81:1c:87:79:56:d4:ab:26:4e:4f:1a:3c:9b: 41:e6:47:98:3c:a4:d7:10:0a:d6:2b:96:ce:47:56:35:86:97: 44:89:19:cb:a9:96:14:3d:60:e0:35:4d:59:4f:99:2d:ec:e9: b8:e8:e0:88:35:c9:ba:22:23:f3:59:de:6b:75:b9:e1:70:dd: ef:d7:db:15:8a:b8:cc:f8:c7:c3:4b:4d:95:23:80:2a:f4:28: e9:2a:e1:bb:b0:09:fc:28:68:e4:42:59:83:08:89:27:be:d6: 6e:30:c3:40:36:61:e7:d8:21:29:d1:1a:9f:1d:c6:ce:71:8b: d7:a7:5d:90:95:be:e0:d1:c4:3b:34:e5:00:dd:e4:25:72:00: 24:a9:48:87:93:9b:11:63:05:5d:dc:0a:72:03:01:fb:e7:e8: 44:99:04:0b:39:de:99:3d:a7:d2:6a:5a:84:a9:1d:e1:c1:99: 70:1b:d0:27:ea:7d:4f:5f:a0:bc:60:f2:d5:ea:cf:f6:0d:18: f4:d3:23:28:85:37:d3:76:a3:fa:6d:bf:a8:b1:f6:7f:7f:6b: af:2a:66:5b:8f:99:ee:8f:af:3f:8d:b4:7a:37:e6:80:d6:77: 5d:1c:a8:a9:98:d2:de:35:5c:0f:c3:4e:85:a5:f6:82:7a:5f: 50:a7:c5:f5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3x0+e6R9hFYjNCJcT2QWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjVkZTVmNGZlYzE2ZjUxNmYwYmM0ZDYzMWMyNjI3NjYzZjkwNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioIxjhFKnVuGPaT1alJoneFiAf56 4trtcee1EOLF62A+bmk+SnH8sEJc/SuKWsq03dNiSVbkuWesCgbNfiYAjaBRh5hh /RAKgr+wVQb3VVww1YVEhHT3nECIiBATT0+S0QgJ85xrZbHkvzDG2RrAH/CjqOCA QSi6BI7ehEUfvx7NkTKoBf6VOcnVPEI5Kn6WobXubQQxD6KGmdwKRvHb0ZGOQ6uY brkQ8OvYH9339BhuN8i6FTP/BXjWQPSmOHRku5Cl1r/whFQEQcb2+hcH5C4wR4qJ AslSB4vjrE9tXml06IXDZWrfucInPZSq0hQAn4viVw6IzpAvwbcFmxxKxwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM9d5fT+wW9RbwvE1jHCYnZj+QXzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2UxZTY3 MC02MjZhLTRjMTUtYTY2OS02ZmUxNDk0ZmJjMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZTFlNjcw LTYyNmEtNGMxNS1hNjY5LTZmZTE0OTRmYmMyYy8xL3oxM2w5UDdCYjFGdkM4VFdN Y0ppZG1QNUJmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9nhAwQCuUvYMA0EAgACMAcDBQMqBU3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMB2jANBgkqhkiG9w0BAQsFAAOCAQEApGcl 7zaBHId5VtSrJk5PGjybQeZHmDyk1xAK1iuWzkdWNYaXRIkZy6mWFD1g4DVNWU+Z LezpuOjgiDXJuiIj81nea3W54XDd79fbFYq4zPjHw0tNlSOAKvQo6Srhu7AJ/Cho 5EJZgwiJJ77WbjDDQDZh59ghKdEanx3GznGL16ddkJW+4NHEOzTlAN3kJXIAJKlI h5ObEWMFXdwKcgMB++foRJkECznemT2n0mpahKkd4cGZcBvQJ+p9T1+gvGDy1erP 9g0Y9NMjKIU303aj+m2/qLH2f39rrypmW4+Z7o+vP420ejfmgNZ3XRyoqZjS3jVc D8NOhaX2gnpfUKfF9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:49 2026 by rpki-client