This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer (raw, json) Hash identifier: SmKiQMVr5RUb7VtXs8Sm7Pt88erGRy+ErjTxVmU2VFQ= Subject key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E48DB4BF46278BB63981BA606B8F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211322 IP: 193.228.126.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:48:db:4b:f4:62:78:bb:63:98:1b:a6:06:b8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf70f3d1118361b59f3315f591643e1dabbb2008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:66:8d:fd:ec:d0:9f:50:00:9d:4e:04:3a:39: 2d:74:18:85:59:cf:96:e3:38:b6:0b:fa:ea:57:15: a8:57:37:da:97:62:ce:2c:58:82:a8:e8:69:7b:c9: 5d:79:05:6d:7a:60:9e:35:47:50:52:34:84:f0:93: ee:49:a6:dc:c4:ec:02:bb:b5:c0:9a:fb:e6:4d:c5: f0:ef:70:3e:1e:f3:72:98:88:71:f4:72:bc:35:fb: 02:8a:17:bc:1c:a2:a9:03:7b:80:c9:36:dc:0b:a8: a4:95:11:1d:81:84:71:78:3d:e9:1c:19:4a:7a:b1: 15:d8:54:78:47:4b:81:c0:26:54:1c:04:01:6b:6a: 80:c6:90:f0:9f:cf:78:9f:23:ae:85:7e:33:fa:ef: e7:a0:1e:e6:62:b3:3b:86:07:73:49:80:a2:9c:19: 8d:16:1f:59:69:7a:97:ae:ee:77:28:9a:24:d8:cb: 4d:59:4f:48:70:78:7c:1f:3f:e6:e9:9e:f7:ec:66: cf:dc:ed:85:68:77:3a:dc:dc:48:7e:8d:86:5e:79: be:9b:15:68:b5:ef:2f:85:16:d6:1d:0f:69:b0:e5: 5c:f5:55:cf:ca:da:00:1c:bd:2a:b1:fe:69:61:ee: fc:42:0e:82:00:cd:e6:1a:ab:26:1c:38:fe:d5:4b: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.126.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211322 Signature Algorithm: sha256WithRSAEncryption 5a:20:28:78:ec:c4:f6:09:5c:f0:a3:16:ec:3e:ff:7d:ca:9c: 93:2a:85:b3:af:f3:9a:84:62:33:d1:3b:ac:85:9a:10:59:30: 98:b4:cf:d8:33:77:fc:83:fe:c5:fe:42:6b:99:ff:e8:f6:bb: 14:65:cb:30:d7:c2:bc:12:80:9b:71:7e:07:4e:25:2a:96:c0: d7:45:da:f0:19:e3:95:30:d4:dd:e6:e3:7c:12:85:81:a1:38: 3d:67:e2:04:51:11:67:98:2a:14:da:8a:2e:4d:cf:90:21:97: 47:73:0d:3c:c5:b3:4d:b1:78:c9:b4:ec:94:aa:aa:20:f2:0c: ab:31:c1:5e:36:39:1b:a4:b7:e0:1b:39:fe:4b:59:53:6d:97: ec:f9:17:7a:47:88:68:91:10:42:6b:69:2d:14:d0:61:69:b1: 56:57:37:dd:4a:3c:18:a7:85:5b:14:c6:4a:aa:f9:a3:48:7d: 58:44:5d:37:de:fa:04:98:91:59:13:e1:84:60:31:96:cb:fc: d7:bd:92:f6:e8:8b:52:ea:d7:ec:0b:de:ef:c3:3a:6f:e7:fa: 4e:df:2c:b8:88:15:6b:90:43:36:22:ed:bd:ca:e8:45:0a:4c: 6f:60:0b:1e:de:52:54:9e:77:10:1a:76:b6:4a:b5:c7:4d:33: b2:67:8d:19 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fkjbS/RieLtjmBumBrjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjcwZjNkMTExODM2MWI1OWYzMzE1ZjU5MTY0M2UxZGFiYmIyMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymaN/ezQn1AAnU4EOjktdBiFWc+W 4zi2C/rqVxWoVzfal2LOLFiCqOhpe8ldeQVtemCeNUdQUjSE8JPuSabcxOwCu7XA mvvmTcXw73A+HvNymIhx9HK8NfsCihe8HKKpA3uAyTbcC6iklREdgYRxeD3pHBlK erEV2FR4R0uBwCZUHAQBa2qAxpDwn894nyOuhX4z+u/noB7mYrM7hgdzSYCinBmN Fh9ZaXqXru53KJok2MtNWU9IcHh8Hz/m6Z737GbP3O2FaHc63NxIfo2GXnm+mxVo te8vhRbWHQ9psOVc9VXPytoAHL0qsf5pYe78Qg6CAM3mGqsmHDj+1UttywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM9w89ERg2G1nzMV9ZFkPh2ruyAIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzkyNjBk NS1mOTdkLTQxNjgtYjIyYS1mYmI5ZjkxYzhjY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvOTI2MGQ1 LWY5N2QtNDE2OC1iMjJhLWZiYjlmOTFjOGNjZS8xL3ozRHowUkdEWWJXZk14WDFr V1EtSGF1N0lBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAweR+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM5ejANBgkqhkiG9w0BAQsFAAOCAQEAWiAoeOzE9glc8KMW7D7/fcqckyqFs6/z moRiM9E7rIWaEFkwmLTP2DN3/IP+xf5Ca5n/6Pa7FGXLMNfCvBKAm3F+B04lKpbA 10Xa8BnjlTDU3ebjfBKFgaE4PWfiBFERZ5gqFNqKLk3PkCGXR3MNPMWzTbF4ybTs lKqqIPIMqzHBXjY5G6S34Bs5/ktZU22X7PkXekeIaJEQQmtpLRTQYWmxVlc33Uo8 GKeFWxTGSqr5o0h9WERdN976BJiRWRPhhGAxlsv8172S9uiLUurX7Ave78M6b+f6 Tt8suIgVa5BDNiLtvcroRQpMb2ALHt5SVJ53EBp2tkq1x00zsmeNGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:09 2026 by rpki-client