This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer File: z4duDnrrYE0WMdSaAl4XitJ0qBI.cer (raw, json) Hash identifier: 4XZrL+QggdL8HntNDrek1ADKSVCXPztwVuxlP8Vcb80= Subject key identifier: CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36F09C189160C82CBCD0E3EBB6CE62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199505 IP: 2001:67c:1154::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f0:9c:18:91:60:c8:2c:bc:d0:e3:eb:b6:ce:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf876e0e7aeb604d1631d49a025e178ad274a812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:17:c8:10:21:fc:06:8e:de:c8:f7:01:8d: e0:03:9d:79:15:46:4a:28:6a:d7:d1:a3:95:e5:5f: 18:94:8e:ea:e0:79:50:4e:a9:dd:64:7c:6a:2f:64: fb:8c:b0:d8:a5:b2:d5:02:c8:d3:1a:fd:ed:9d:39: 32:c5:bc:9e:fc:ff:8f:cb:0c:a9:32:49:2d:29:83: 68:6a:45:71:38:89:69:a8:ce:30:0b:59:4f:60:23: 53:fd:9d:37:c8:1d:2e:6b:af:73:04:13:01:b0:9e: 98:09:a3:72:67:b8:70:b2:1e:e3:da:a8:44:f4:34: d4:8e:49:14:1e:bb:98:42:d9:6d:0c:1f:37:a9:7a: b4:25:e3:41:b2:2b:f5:ca:29:01:e8:8b:e7:7d:17: 6a:c8:b1:91:79:5e:ec:4a:65:fc:20:21:1b:be:23: 6c:dc:82:07:9e:dc:27:9d:c0:84:e4:7c:39:1d:71: f2:f6:67:cc:84:bf:fc:1c:f2:0b:44:0b:9e:e7:40: 9f:95:48:5a:0a:68:c5:59:b9:ff:c5:f8:42:bd:bd: 01:3b:6d:b7:d7:3e:d8:49:96:6d:21:b9:66:97:32: 6e:6a:e2:e1:c3:74:df:db:b9:18:5e:0e:f6:8f:2e: 61:d2:00:32:56:f6:72:b9:e0:29:c7:e1:45:2c:b3: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1154::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199505 Signature Algorithm: sha256WithRSAEncryption 2f:d8:fe:39:17:6a:34:b7:f9:9a:28:f5:de:a9:98:9e:25:11: 1d:ef:f6:d0:78:ae:a0:95:44:91:5e:5b:78:9f:d4:be:75:32: 28:db:86:70:6d:ca:3d:99:9d:52:9f:09:ca:e9:f5:e5:f7:0e: 67:e0:65:c6:30:a5:22:37:42:43:f5:eb:b9:d5:c1:9e:1b:62: 42:12:41:b2:b3:26:ee:0f:62:7b:76:80:d0:1d:be:f2:72:b2: 72:ec:cd:16:ff:8e:7f:d8:d1:6f:fb:b5:23:94:f3:37:b0:5a: 10:66:ef:c8:60:ce:24:a1:8c:f5:97:3a:01:d2:a3:6a:8d:66: 93:36:09:21:3d:ee:53:56:13:78:da:ad:7b:b8:ca:86:ad:63: a9:7a:92:9c:df:fa:24:41:b8:e5:7d:63:bf:70:d6:20:9b:5e: 33:21:52:3f:76:07:c5:ac:92:e6:51:ff:d6:0a:de:82:fe:d2: 63:eb:8d:11:75:c6:cd:12:a6:57:57:89:47:2d:52:c4:f1:56: e6:c7:ff:b3:7f:d7:a6:dc:4e:42:5b:d4:8f:66:ae:05:d5:76: 0c:4e:81:cb:98:ac:7c:80:81:06:49:1b:05:ba:46:b8:9f:d2: b6:88:cb:ab:8a:eb:f0:29:52:cc:e9:50:62:e0:91:7b:f5:5b: 60:4c:45:8d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7NvCcGJFgyCy80OPrts5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjg3NmUwZTdhZWI2MDRkMTYzMWQ0OWEwMjVlMTc4YWQyNzRhODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0gXyBAh/AaO3sj3AY3gA515FUZK KGrX0aOV5V8YlI7q4HlQTqndZHxqL2T7jLDYpbLVAsjTGv3tnTkyxbye/P+Pywyp MkktKYNoakVxOIlpqM4wC1lPYCNT/Z03yB0ua69zBBMBsJ6YCaNyZ7hwsh7j2qhE 9DTUjkkUHruYQtltDB83qXq0JeNBsiv1yikB6IvnfRdqyLGReV7sSmX8ICEbviNs 3IIHntwnncCE5Hw5HXHy9mfMhL/8HPILRAue50CflUhaCmjFWbn/xfhCvb0BO223 1z7YSZZtIblmlzJuauLhw3Tf27kYXg72jy5h0gAyVvZyueApx+FFLLOSlQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFM+Hbg5662BNFjHUmgJeF4rSdKgSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2E1YmM4 YS0wNDlkLTQzMTQtOWIxYS0yOTc1NWE3Yzk0ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYTViYzhh LTA0OWQtNDMxNC05YjFhLTI5NzU1YTdjOTRmZC8xL3o0ZHVEbnJyWUUwV01kU2FB bDRYaXRKMHFCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBFUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMLUTANBgkqhkiG9w0BAQsFAAOCAQEAL9j+ORdqNLf5mij13qmYniURHe/2 0HiuoJVEkV5beJ/UvnUyKNuGcG3KPZmdUp8Jyun15fcOZ+BlxjClIjdCQ/XrudXB nhtiQhJBsrMm7g9ie3aA0B2+8nKycuzNFv+Of9jRb/u1I5TzN7BaEGbvyGDOJKGM 9Zc6AdKjao1mkzYJIT3uU1YTeNqte7jKhq1jqXqSnN/6JEG45X1jv3DWIJteMyFS P3YHxayS5lH/1gregv7SY+uNEXXGzRKmV1eJRy1SxPFW5sf/s3/XptxOQlvUj2au BdV2DE6By5isfICBBkkbBbpGuJ/StojLq4rr8ClSzOlQYuCRe/VbYExFjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:32 2026 by rpki-client