This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer (raw, json) Hash identifier: 0wCk0Uw4TIZJBBWOmrpmxxouehUs8171AHTqiIWy/FE= Subject key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C696F58D038A3526E2E2CD45801C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214989 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c6:96:f5:8d:03:8a:35:26:e2:e2:cd:45:80:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:6b:ec:1b:cc:14:cc:28:bf:17:44:72:08: fa:55:f0:ff:ec:e2:b3:76:f2:19:63:c9:a0:70:9d: d3:c7:2c:b2:ac:d2:80:3c:de:94:47:81:dc:97:31: 3a:4e:17:8a:2a:19:b2:d9:51:5d:3a:69:9d:08:d7: f9:cd:e1:60:8c:27:d8:a3:08:91:19:95:13:d1:b9: 08:99:b9:2d:0b:58:e0:37:0e:84:7b:9b:5c:bf:d5: 44:34:83:9a:7e:ee:29:4f:4c:24:4d:3c:61:37:8b: ba:9a:4a:bb:54:04:cb:5a:8b:56:c7:55:bd:72:0c: 78:a8:04:6b:91:10:33:f0:bc:18:6b:62:71:06:aa: 6b:08:10:c2:8d:2e:d8:86:bb:b7:c9:fb:80:e6:78: 2f:3d:b1:a7:e9:60:87:ec:80:cc:03:b5:18:4f:2e: 8f:75:6c:cd:5a:ee:47:e0:be:cf:db:1e:ac:f3:71: ce:e2:aa:04:c7:da:17:40:30:09:a9:f8:10:6b:a5: 94:aa:7e:82:67:cb:06:1f:d5:ac:ac:73:93:1b:ed: 20:eb:c0:a5:47:21:07:2c:d5:9b:b5:37:74:5b:41: 36:9d:1c:a4:df:2c:00:8c:64:3b:05:13:78:a5:d1: 0f:dd:30:ea:cc:db:04:27:45:97:39:24:01:43:51: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214989 Signature Algorithm: sha256WithRSAEncryption 66:45:72:34:c6:8e:b3:14:1b:33:16:8f:b2:d6:34:de:2e:da: b5:b2:92:29:54:9c:b3:d9:bd:fe:ad:cb:16:c1:fa:71:c6:d0: 99:07:4f:1a:83:37:21:28:e9:8f:ab:cd:69:bf:29:ec:40:01: a3:a4:b1:18:a2:d1:79:2b:06:61:6b:04:7e:7b:c4:1c:35:50: ec:52:6d:7b:8b:31:8b:86:cd:01:8b:4f:bd:0a:4b:25:60:52: 4b:dc:5f:ee:a1:e3:11:c7:ca:1b:0f:bb:e7:c6:4f:8b:e6:ea: 38:52:9c:6d:11:66:18:c1:ac:2e:32:81:5c:5e:9c:d8:f6:8a: 8e:8d:b9:02:59:59:f3:80:d5:7e:e2:85:df:89:c2:8e:d2:e6: 87:02:d4:36:ed:61:3d:d9:ca:85:4f:21:fd:c0:b5:26:89:17: 5d:ad:32:b5:bd:1e:53:72:91:15:ac:33:09:6d:0b:2f:10:1f: 0e:ea:f5:66:59:31:5b:07:c7:81:bb:e2:dc:db:40:75:36:91: ea:d2:3e:36:ff:6d:7f:f7:9b:8d:76:d7:b4:ca:ee:5c:d3:ab: ca:af:a8:e1:9f:65:64:4c:bb:89:67:e4:4b:9c:d4:51:e8:99: 83:1e:18:dc:e0:44:f0:22:bf:c6:ff:f5:77:15:26:f8:0c:5e: ee:65:3f:7b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NMaW9Y0DijUm4uLNRYAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjdmNWM1OTgwNTllMWFlNTk3NmM4MWVhMmI4MjY2OTdlZTE5OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsFr7BvMFMwovxdEcgj6VfD/7OKz dvIZY8mgcJ3TxyyyrNKAPN6UR4HclzE6TheKKhmy2VFdOmmdCNf5zeFgjCfYowiR GZUT0bkImbktC1jgNw6Ee5tcv9VENIOafu4pT0wkTTxhN4u6mkq7VATLWotWx1W9 cgx4qARrkRAz8LwYa2JxBqprCBDCjS7Yhru3yfuA5ngvPbGn6WCH7IDMA7UYTy6P dWzNWu5H4L7P2x6s83HO4qoEx9oXQDAJqfgQa6WUqn6CZ8sGH9WsrHOTG+0g68Cl RyEHLNWbtTd0W0E2nRyk3ywAjGQ7BRN4pdEP3TDqzNsEJ0WXOSQBQ1HftwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFM9/XFmAWeGuWXbIHqK4Jml+4ZkGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2VmOTQ3 OS0yOTk0LTQ0OWMtOWQ5Yy1lMWRjNjllMzMzZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWY5NDc5 LTI5OTQtNDQ5Yy05ZDljLWUxZGM2OWUzMzNkZi8xL3ozOWNXWUJaNGE1WmRzZ2Vv cmdtYVg3aG1RWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHzTANBgkqhkiG9w0BAQsFAAOCAQEAZkVyNMaOsxQb MxaPstY03i7atbKSKVScs9m9/q3LFsH6ccbQmQdPGoM3ISjpj6vNab8p7EABo6Sx GKLReSsGYWsEfnvEHDVQ7FJte4sxi4bNAYtPvQpLJWBSS9xf7qHjEcfKGw+758ZP i+bqOFKcbRFmGMGsLjKBXF6c2PaKjo25AllZ84DVfuKF34nCjtLmhwLUNu1hPdnK hU8h/cC1JokXXa0ytb0eU3KRFawzCW0LLxAfDur1ZlkxWwfHgbvi3NtAdTaR6tI+ Nv9tf/ebjXbXtMruXNOryq+o4Z9lZEy7iWfkS5zUUeiZgx4Y3OBE8CK/xv/1dxUm +Axe7mU/ew== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:04 2026 by rpki-client