This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer File: z3P3vZzZk2geMP7FxZtHVlIroxw.cer (raw, json) Hash identifier: 0LxyQThnOI4PWlD1bw2JO6IInm4fqzTdXvx9pUtVlc4= Subject key identifier: CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2DC50392FE43A7D44A9FECB9D82EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.220.129.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:dc:50:39:2f:e4:3a:7d:44:a9:fe:cb:9d:82:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:52:a6:7b:75:7a:f3:0e:6e:0d:97:18:fc: 4a:eb:1a:bb:bc:5f:c7:67:e6:29:1e:09:0d:c7:9a: bd:58:cf:06:97:ba:70:66:73:84:dd:6c:ac:64:12: fe:a5:36:b0:5e:87:f2:a6:52:68:0f:41:f4:08:fe: b2:27:48:2c:7d:04:4b:6a:fc:9e:d2:fa:c9:a2:7b: fe:87:72:9d:e6:1c:b4:87:0e:c5:0e:67:e5:5b:60: b3:a0:c5:82:46:1b:6a:cf:07:c7:d1:1e:b5:0c:4d: a0:d7:f0:00:90:10:6d:e8:f6:c7:f7:ed:bb:9c:df: 44:d4:ef:f8:c0:3f:43:75:d2:cf:ae:88:9f:96:aa: 0b:4d:a9:e8:e9:59:15:24:8a:04:07:b5:18:7c:de: 18:d4:5b:ea:59:c0:e4:94:3b:d0:cd:23:79:c5:3d: c9:76:88:e6:ca:89:46:2d:63:de:fe:1b:7f:1f:44: 9e:aa:ed:29:6e:83:e0:74:57:9a:8f:30:8a:0b:cb: cc:c1:64:8d:1d:b8:37:1d:13:34:d4:c5:bc:db:af: 95:6b:40:ce:84:d9:0b:63:7b:cb:b6:64:95:3a:17: 72:57:0a:e2:57:43:c0:d7:c2:f6:e2:fc:f8:8d:49: bc:cb:71:07:e6:ce:4e:7e:fd:0b:04:d9:12:46:da: 94:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.129.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:f9:d8:3f:0c:71:f1:b8:9b:35:e9:ca:5e:64:6c:5f:bb:32: 9e:58:33:e4:1d:a9:54:39:29:5d:71:14:80:fd:71:32:de:ee: bb:46:7d:ae:55:48:fd:87:bf:c0:de:80:6e:b2:9e:60:dc:a9: 0b:c5:dc:fe:15:55:0d:7a:a4:03:c4:f8:d6:0a:4a:55:41:99: 4c:33:1d:13:3c:5b:fa:2f:60:87:57:5e:ae:13:91:2d:a8:5b: 81:c0:67:00:66:1e:37:c6:84:5e:11:60:c1:76:01:92:b2:5b: 0e:68:ac:5c:e1:a3:e2:39:31:0c:4c:ec:5e:1b:00:e1:55:04: 97:5d:c7:07:ad:72:77:4c:a4:f9:0c:e6:d2:64:a0:32:61:cc: 5a:50:a3:9b:53:90:1a:44:ed:01:55:24:13:16:8b:c4:4e:4b: 55:9f:87:bd:ca:0e:86:61:f0:42:71:59:4f:78:49:75:6b:82: cc:cd:1b:c4:c6:36:c2:ff:5d:a6:85:10:e6:d7:5f:e5:9b:2d: 23:0a:fd:04:bd:e1:96:3c:b7:ce:1f:de:ad:1a:09:27:90:61: 6c:17:eb:94:fa:db:fd:e7:e7:97:9b:b0:3a:7f:89:34:4f:83: 88:c4:86:7e:72:75:db:f4:46:7d:dd:a2:b9:ef:6a:ec:6b:d9: 35:c0:8d:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4otxQOS/kOn1Eqf7LnYLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjczZjdiZDljZDk5MzY4MWUzMGZlYzVjNTliNDc1NjUyMmJhMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqItSpnt1evMObg2XGPxK6xq7vF/H Z+YpHgkNx5q9WM8Gl7pwZnOE3WysZBL+pTawXofyplJoD0H0CP6yJ0gsfQRLavye 0vrJonv+h3Kd5hy0hw7FDmflW2CzoMWCRhtqzwfH0R61DE2g1/AAkBBt6PbH9+27 nN9E1O/4wD9DddLProiflqoLTano6VkVJIoEB7UYfN4Y1FvqWcDklDvQzSN5xT3J dojmyolGLWPe/ht/H0Sequ0pboPgdFeajzCKC8vMwWSNHbg3HRM01MW826+Va0DO hNkLY3vLtmSVOhdyVwriV0PA18L24vz4jUm8y3EH5s5Ofv0LBNkSRtqUkwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFM9z972c2ZNoHjD+xcWbR1ZSK6McMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzBiMGQ3 Zi04MTk2LTQyNzUtYTkxMS03YTc5Mzk5MmZiYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMGIwZDdm LTgxOTYtNDI3NS1hOTExLTdhNzkzOTkyZmJhMC8xL3ozUDN2WnpaazJnZU1QN0Z4 WnRIVmxJcm94dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9yBMA0GCSqGSIb3DQEBCwUAA4IBAQA9+dg/ DHHxuJs16cpeZGxfuzKeWDPkHalUOSldcRSA/XEy3u67Rn2uVUj9h7/A3oBusp5g 3KkLxdz+FVUNeqQDxPjWCkpVQZlMMx0TPFv6L2CHV16uE5EtqFuBwGcAZh43xoRe EWDBdgGSslsOaKxc4aPiOTEMTOxeGwDhVQSXXccHrXJ3TKT5DObSZKAyYcxaUKOb U5AaRO0BVSQTFovETktVn4e9yg6GYfBCcVlPeEl1a4LMzRvExjbC/12mhRDm11/l my0jCv0EveGWPLfOH96tGgknkGFsF+uU+tv95+eXm7A6f4k0T4OIxIZ+cnXb9EZ9 3aK572rsa9k1wI2u -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:01 2026 by rpki-client