This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer File: z4l1dGy_H_dd3sbNuArMhSGBhM4.cer (raw, json) Hash identifier: X9DbjHOxcCLcgIeEb+owEjcynsfmpAVaEtyen89+g2Q= Subject key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C673E1BE1DD5A0582EBD18B0AA53BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.55.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:73:e1:be:1d:d5:a0:58:2e:bd:18:b0:aa:53:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:0c:79:da:11:f7:68:a0:c3:d6:66:dc:82: 75:d4:e8:36:d1:d2:bf:4b:8e:d5:3a:9c:a6:d2:c6: 06:e0:b6:c1:b2:ef:bb:ca:27:27:49:9d:b0:ae:52: 89:c7:c2:af:82:b1:9e:32:1c:f9:1c:14:94:aa:aa: b6:bb:92:d9:d8:d8:ab:aa:80:3d:1d:e5:04:cc:2f: ae:2c:97:2f:99:79:56:ef:89:60:19:15:0b:33:4b: 85:59:a1:4d:eb:0b:03:f5:3d:6e:1f:5f:7f:d3:48: 59:fd:5e:f0:59:3f:db:55:87:13:ce:6b:c0:a8:3e: 02:69:e8:64:d4:ec:dc:44:ed:d3:4f:a6:ee:1c:cd: d9:4d:93:dd:36:6c:ae:a9:b9:1d:73:88:ea:e6:d2: 24:f7:0a:ee:7a:3a:d8:47:a9:d3:15:da:05:28:c0: 37:9c:30:97:e1:69:df:b0:bd:45:a1:90:28:c7:34: 84:31:7e:31:69:69:ef:eb:42:cc:71:10:4e:85:16: db:61:a1:75:8e:50:da:e1:df:e5:ba:ce:cd:0a:14: 3e:70:ee:f0:f7:50:ce:52:06:90:cc:bf:62:79:38: 3f:36:5a:62:10:79:e1:b0:17:88:c3:33:fc:3b:29: a2:06:d7:cb:28:66:22:af:a5:d0:02:26:c8:d3:5b: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.144.0/22 Signature Algorithm: sha256WithRSAEncryption 92:2a:9e:62:0b:db:a6:93:d7:05:f0:03:25:72:4c:58:26:89: 44:cd:53:b5:be:17:5e:1a:07:46:e5:28:82:f7:d3:96:bb:6a: 3e:24:8c:0f:4d:f5:59:d8:bd:2c:77:44:bd:6b:e1:f3:54:75: 9d:88:73:3a:e5:e6:a1:3f:df:99:84:55:0d:80:96:66:87:18: 7f:2a:2a:5e:6a:1d:36:2f:3f:cd:e6:29:dd:18:3a:a4:2f:f0: 57:77:4c:55:37:cb:df:fc:35:4d:65:88:9d:b1:ff:0b:6b:e8: 1a:71:78:ed:58:54:e6:1f:ac:9d:d0:d4:63:96:dc:9d:00:55: e6:c8:22:d5:87:a4:2d:b6:70:97:76:69:49:5c:cd:df:70:35: aa:7f:81:e2:b0:ea:19:32:64:12:eb:a2:18:b8:95:16:a3:d6: c9:23:32:49:ab:42:90:e3:38:76:2c:c1:1c:72:a7:b6:a3:56: de:ad:2d:99:49:e7:d9:08:eb:a7:76:ea:7c:b1:c0:f2:2c:e3: f0:67:9d:08:61:d5:b2:a9:4d:29:4a:bf:3f:18:4f:5e:c3:c7: 8e:07:12:d1:c7:7a:bf:bb:fd:ef:43:29:39:a7:d7:f1:af:45: e2:cf:a8:97:59:27:d7:56:81:29:d7:1a:47:57:98:f6:cc:2c: 22:cb:cd:4c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xnPhvh3VoFguvRiwqlO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjg5NzU3NDZjYmYxZmY3NWRkZWM2Y2RiODBhY2M4NTIxODE4NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/EMedoR92igw9Zm3IJ11Og20dK/ S47VOpym0sYG4LbBsu+7yicnSZ2wrlKJx8KvgrGeMhz5HBSUqqq2u5LZ2NirqoA9 HeUEzC+uLJcvmXlW74lgGRULM0uFWaFN6wsD9T1uH19/00hZ/V7wWT/bVYcTzmvA qD4Caehk1OzcRO3TT6buHM3ZTZPdNmyuqbkdc4jq5tIk9wruejrYR6nTFdoFKMA3 nDCX4WnfsL1FoZAoxzSEMX4xaWnv60LMcRBOhRbbYaF1jlDa4d/lus7NChQ+cO7w 91DOUgaQzL9ieTg/NlpiEHnhsBeIwzP8OymiBtfLKGYir6XQAibI01s4FQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2ExY2Q5 Yy1jMzFlLTRhYmYtYjA4OS05ZTc5MmI2ZjIzNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvYTFjZDlj LWMzMWUtNGFiZi1iMDg5LTllNzkyYjZmMjM1ZC8xL3o0bDFkR3lfSF9kZDNzYk51 QXJNaFNHQmhNNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwjeQMA0GCSqGSIb3DQEBCwUAA4IBAQCSKp5i C9umk9cF8AMlckxYJolEzVO1vhdeGgdG5SiC99OWu2o+JIwPTfVZ2L0sd0S9a+Hz VHWdiHM65eahP9+ZhFUNgJZmhxh/Kipeah02Lz/N5indGDqkL/BXd0xVN8vf/DVN ZYidsf8La+gacXjtWFTmH6yd0NRjltydAFXmyCLVh6QttnCXdmlJXM3fcDWqf4Hi sOoZMmQS66IYuJUWo9bJIzJJq0KQ4zh2LMEccqe2o1berS2ZSefZCOundup8scDy LOPwZ50IYdWyqU0pSr8/GE9ew8eOBxLRx3q/u/3vQyk5p9fxr0Xiz6iXWSfXVoEp 1xpHV5j2zCwiy81M -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:38 2026 by rpki-client