This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer File: z32kMRhYgiWjduwhScczbEYzZEA.cer (raw, json) Hash identifier: pbkjPtIkHBh+7FOPEXkmEN8BNRxykl+HlDPe1YwOPD4= Subject key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED39BF037F30477462595F08477712 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12829 IP: 79.134.160.0/19 IP: 80.80.128.0/19 IP: 87.252.160.0/19 IP: 95.168.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:39:bf:03:7f:30:47:74:62:59:5f:08:47:77:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf7da43118588225a376ec2149c7336c46336440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:45:30:42:8c:72:2d:11:c9:d0:b0:0e:a3: 93:7f:4c:82:c5:ab:48:21:f2:6a:c4:df:71:cd:ef: d1:16:7b:4e:71:59:0e:7e:ab:5d:26:c0:a5:ec:25: 1e:da:5d:d6:72:ae:e2:fc:c9:89:9e:dc:38:ed:da: d4:1a:85:0a:bb:1c:e5:7d:4a:6d:c4:78:41:24:8c: 93:17:03:74:a3:db:70:07:85:f9:2f:6a:70:31:d6: cc:16:95:fb:7b:06:d0:e3:02:07:0a:fa:94:55:26: df:2f:fd:23:e7:06:77:94:65:26:46:32:ba:40:54: 10:ca:ba:76:a4:46:7e:da:91:a2:be:32:05:ed:93: fa:17:ac:b3:08:08:4d:65:d1:8f:8e:04:b2:db:55: 25:82:7b:f6:27:89:c5:44:83:d8:e5:af:9e:8e:21: 85:d0:1c:2e:ff:b0:47:1f:6b:50:ce:8b:c4:f5:0e: 5e:91:54:e7:9d:f1:31:ad:25:79:52:2a:7c:ca:c7: 3b:e0:d6:63:ef:39:b8:0e:26:13:fd:0f:41:a9:b2: db:40:c4:5d:63:dc:ae:23:d9:82:24:d5:f6:d6:4e: 02:09:63:21:48:28:65:33:61:7d:83:07:54:64:ae: 17:8b:f3:e3:27:75:e0:39:90:e0:2b:19:2e:ad:05: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.134.160.0/19 80.80.128.0/19 87.252.160.0/19 95.168.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12829 Signature Algorithm: sha256WithRSAEncryption 12:fb:e8:0f:8e:fa:07:6c:71:f9:10:f5:c8:e5:a2:89:ec:f0: aa:54:b6:04:ed:4b:0f:ef:f0:9e:c6:ce:03:1a:9b:79:46:2d: 89:d7:47:75:17:83:32:f2:d6:b5:1f:4a:61:4d:b6:c6:5b:a2: c0:b7:81:15:54:d2:35:0b:5c:fd:96:c2:17:ce:52:3f:81:47: fd:d2:2b:2a:8f:af:29:95:67:15:2d:71:0f:f8:ac:4f:07:ce: 04:4b:13:17:7d:5f:b0:b2:ec:31:de:e3:5e:29:cc:7b:46:f1: 51:77:70:ea:2e:aa:a1:f4:6f:e5:16:07:60:d4:b0:dd:d6:68: 75:e1:47:13:9a:04:3b:ae:39:3b:66:99:bf:b6:4c:63:af:dd: cc:82:b6:5a:a3:79:f2:59:d8:13:34:59:42:84:62:72:05:50: 46:3c:0f:6b:10:bf:46:83:20:79:a9:b9:cf:f0:49:c0:79:a6: ce:01:09:36:65:97:5f:40:69:5b:fa:81:80:48:ba:a4:fb:54: 2d:ca:d4:af:58:97:7d:c4:95:73:38:e7:56:66:88:c0:56:85: b4:9f:52:74:82:f3:fe:bc:b0:6e:5c:b7:36:aa:f2:08:e1:88: 78:90:33:6a:5e:35:ec:49:b8:70:a3:c8:e4:66:bc:e2:dd:f8: 6e:02:c7:d1 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt57Tm/A38wR3RiWV8IR3cSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjdkYTQzMTE4NTg4MjI1YTM3NmVjMjE0OWM3MzM2YzQ2MzM2NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp15FMEKMci0RydCwDqOTf0yCxatI IfJqxN9xze/RFntOcVkOfqtdJsCl7CUe2l3Wcq7i/MmJntw47drUGoUKuxzlfUpt xHhBJIyTFwN0o9twB4X5L2pwMdbMFpX7ewbQ4wIHCvqUVSbfL/0j5wZ3lGUmRjK6 QFQQyrp2pEZ+2pGivjIF7ZP6F6yzCAhNZdGPjgSy21Ulgnv2J4nFRIPY5a+ejiGF 0Bwu/7BHH2tQzovE9Q5ekVTnnfExrSV5Uip8ysc74NZj7zm4DiYT/Q9BqbLbQMRd Y9yuI9mCJNX21k4CCWMhSChlM2F9gwdUZK4Xi/PjJ3XgOZDgKxkurQVcbwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFM99pDEYWIIlo3bsIUnHM2xGM2RAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzBlNGE3 NS1jYjU4LTQ0YWEtOWRkNS1jNWYxN2VhYjQxZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMGU0YTc1 LWNiNTgtNDRhYS05ZGQ1LWM1ZjE3ZWFiNDFkNS8xL3ozMmtNUmhZZ2lXamR1d2hT Y2N6YkVZelpFQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQFT4agAwQFUFCAAwQFV/ygAwQFX6jgMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAjIdMA0GCSqGSIb3DQEBCwUAA4IBAQAS++gPjvoH bHH5EPXI5aKJ7PCqVLYE7UsP7/Cexs4DGpt5Ri2J10d1F4My8ta1H0phTbbGW6LA t4EVVNI1C1z9lsIXzlI/gUf90isqj68plWcVLXEP+KxPB84ESxMXfV+wsuwx3uNe Kcx7RvFRd3DqLqqh9G/lFgdg1LDd1mh14UcTmgQ7rjk7Zpm/tkxjr93MgrZao3ny WdgTNFlChGJyBVBGPA9rEL9GgyB5qbnP8EnAeabOAQk2ZZdfQGlb+oGASLqk+1Qt ytSvWJd9xJVzOOdWZojAVoW0n1J0gvP+vLBuXLc2qvII4Yh4kDNqXjXsSbhwo8jk Zrzi3fhuAsfR -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:53 2026 by rpki-client