This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer File: z2hDzhUimoAj2X-iejflkniyv9c.cer (raw, json) Hash identifier: b7ojZiC4ZvblL8k9EeCXveQRLICDBbr3oAlHqHnIAGE= Subject key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F05F8C7013C62E0C26E2AA11CCEAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197944 IP: 91.230.90.0/24 IP: 2001:67c:24dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:05:f8:c7:01:3c:62:e0:c2:6e:2a:a1:1c:ce:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:78:eb:db:62:52:80:40:58:71:ba:26:90:cb: b2:49:bd:df:cb:df:25:c5:05:72:de:3d:8b:06:69: 87:0d:dc:8f:00:71:2c:dd:44:98:95:59:85:25:49: 7c:22:e0:1c:c3:21:11:15:f1:38:63:80:2a:4d:93: 04:40:06:f0:b9:85:66:9a:bd:d7:14:58:42:4c:31: e4:a1:a0:33:43:cb:08:a9:3e:f9:76:5a:63:87:0e: 65:60:36:9b:e2:11:96:98:60:34:b2:c3:3e:f7:b1: 54:f5:f7:5f:17:0e:de:61:ac:e5:aa:05:09:f6:0d: 4a:bd:93:d5:51:5b:6c:b6:f4:94:24:cd:1a:f6:55: a3:5e:11:6e:eb:a3:4d:52:eb:eb:cd:54:cb:f0:79: e6:38:ef:34:6c:17:63:bc:0b:1b:49:a4:61:ad:31: a1:f7:cb:1b:1e:93:85:2a:aa:d2:01:2c:08:49:ca: c9:05:83:36:54:e1:1a:a6:e0:d4:49:64:b4:dd:71: 83:0d:05:a8:cb:40:dd:eb:33:5e:b0:61:53:63:b4: c6:1b:10:d5:2c:78:1c:33:ad:98:f2:cc:13:51:65: c1:bb:ba:b4:10:bb:8e:76:a3:b6:78:ec:17:f0:41: ae:37:2d:b2:5f:d6:39:21:b2:c8:ac:45:60:79:01: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.90.0/24 IPv6: 2001:67c:24dc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197944 Signature Algorithm: sha256WithRSAEncryption 18:77:04:35:f6:7b:ce:86:a4:60:9e:ee:26:31:09:b8:3b:fb: b1:49:dd:ae:12:66:b4:bc:8f:41:1e:46:6f:74:ad:ae:14:44: 17:52:8e:9e:6f:39:7d:3b:79:66:b5:6e:17:24:55:d4:82:68: 3b:4a:46:dc:dd:0d:37:1a:d8:b9:63:93:81:ff:6b:8f:c4:03: b3:12:93:24:a3:05:22:3b:01:ec:e6:de:8f:26:35:71:e8:14: 4c:75:28:5a:fd:79:c5:5e:94:5a:e9:d5:52:82:17:2e:44:e2: 8e:f2:04:38:6a:04:39:0f:78:a0:cc:16:ac:db:16:ca:fe:5c: 77:5d:36:73:62:a9:e6:9e:37:83:6b:f5:fc:09:ac:42:f4:38: e6:37:7e:9b:c0:1e:40:bc:66:e8:5b:e3:52:e3:c2:98:c5:dc: 41:19:cc:ca:c3:50:d3:d6:00:31:22:c2:44:d7:9f:7e:26:d8: d8:e7:13:93:02:90:83:de:4d:e2:0a:79:fa:67:ec:d9:e3:37: 87:d8:71:5a:d0:4c:20:db:6f:51:bc:3a:65:43:40:a9:0d:55: 99:bf:d1:71:e9:66:f6:1c:3c:21:f9:a1:f4:a3:9c:7b:3e:4c: db:91:1d:4f:22:33:e8:a8:0c:56:6f:32:0d:15:05:f7:80:41: f0:73:c1:89 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8fwX4xwE8YuDCbiqhHM6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjY4NDNjZTE1MjI5YTgwMjNkOTdmYTI3YTM3ZTU5Mjc4YjJiZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Hjr22JSgEBYcbomkMuySb3fy98l xQVy3j2LBmmHDdyPAHEs3USYlVmFJUl8IuAcwyERFfE4Y4AqTZMEQAbwuYVmmr3X FFhCTDHkoaAzQ8sIqT75dlpjhw5lYDab4hGWmGA0ssM+97FU9fdfFw7eYazlqgUJ 9g1KvZPVUVtstvSUJM0a9lWjXhFu66NNUuvrzVTL8HnmOO80bBdjvAsbSaRhrTGh 98sbHpOFKqrSASwIScrJBYM2VOEapuDUSWS03XGDDQWoy0Dd6zNesGFTY7TGGxDV LHgcM62Y8swTUWXBu7q0ELuOdqO2eOwX8EGuNy2yX9Y5IbLIrEVgeQE1aQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFM9oQ84VIpqAI9l/ono35ZJ4sr/XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzc2MWI0 OC02OWVhLTQwZTQtOGQ3Yy02NGNkMTk0ZjdmNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNzYxYjQ4 LTY5ZWEtNDBlNC04ZDdjLTY0Y2QxOTRmN2Y0Zi8xL3oyaER6aFVpbW9BajJYLWll amZsa25peXY5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+ZaMA8EAgACMAkDBwAgAQZ8JNwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwU4MA0GCSqGSIb3DQEBCwUAA4IBAQAYdwQ19nvO hqRgnu4mMQm4O/uxSd2uEma0vI9BHkZvdK2uFEQXUo6ebzl9O3lmtW4XJFXUgmg7 Skbc3Q03Gti5Y5OB/2uPxAOzEpMkowUiOwHs5t6PJjVx6BRMdSha/XnFXpRa6dVS ghcuROKO8gQ4agQ5D3igzBas2xbK/lx3XTZzYqnmnjeDa/X8CaxC9DjmN36bwB5A vGboW+NS48KYxdxBGczKw1DT1gAxIsJE159+JtjY5xOTApCD3k3iCnn6Z+zZ4zeH 2HFa0Ewg229RvDplQ0CpDVWZv9Fx6Wb2HDwh+aH0o5x7PkzbkR1PIjPoqAxWbzIN FQX3gEHwc8GJ -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:30 2026 by rpki-client