This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer (raw, json) Hash identifier: /k68jxCbTsD4IApFNW/8yFP6YQIZAMrV/s4rtjIDO7Q= Subject key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA395550F79F6541DD7EE5C0174F2F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48782 IP: 91.212.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:95:55:0f:79:f6:54:1d:d7:ee:5c:01:74:f2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfc025a9d55bfd643757da4d499dce17201774d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:19:27:55:60:9f:a8:25:a1:86:4c:a9:97: 6e:d7:88:e8:35:e8:9a:70:d9:53:a3:55:55:c9:b6: b9:9c:59:52:75:77:93:98:aa:70:c3:62:2d:d0:3b: 76:38:b1:1a:99:b7:8c:49:38:05:32:c0:de:9f:d0: 87:cf:4c:7a:15:84:2c:c2:cd:a1:c0:b6:c5:86:7b: ad:a5:46:d6:00:c0:18:3b:04:b2:7e:42:e7:61:fb: b7:a9:f7:ec:c3:f7:5f:3e:f6:67:af:77:58:34:a7: 13:9d:01:99:8c:07:ad:03:71:49:ab:cc:53:2e:60: 9e:19:5d:ed:da:57:9e:f0:a4:3f:87:06:55:28:bb: f8:b3:83:2a:9a:06:2a:e7:56:7f:6f:5a:31:cf:65: d6:90:52:e6:ed:15:e3:0f:28:38:0d:40:7a:da:8b: 03:7b:40:26:6b:7c:55:1b:df:b2:c5:8e:55:48:59: 33:7a:91:50:aa:4a:98:dc:47:94:bd:cb:e7:ad:02: 9a:09:88:5c:b2:08:78:26:cb:b1:b7:a3:86:f6:0f: 56:a9:e4:36:60:9c:a2:ed:14:41:83:85:7e:21:c1: 59:8d:25:40:d2:fd:60:74:46:d8:0e:a2:fb:e6:14: 22:b3:f1:93:d3:98:9a:3f:3d:7e:bc:f6:2f:c5:40: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.30.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48782 Signature Algorithm: sha256WithRSAEncryption 89:11:c7:63:83:bb:93:13:42:8f:ea:76:03:b5:ad:0b:78:71: a7:80:b5:65:23:2b:45:9f:66:99:04:44:40:51:f0:4e:6b:5a: ca:b1:05:5a:bd:e9:02:87:4e:dd:35:e7:5b:a3:ea:f2:76:bd: bf:1f:d7:b5:e2:63:8a:45:f7:9f:19:38:26:35:64:e1:ac:11: 12:3b:bd:44:1b:dd:0c:b6:b3:e9:38:14:34:bf:40:df:75:10: e9:2d:a8:e6:fd:23:73:c5:86:7b:a1:24:94:dd:f4:2d:67:e9: bb:5d:5c:10:72:fe:8c:10:da:09:25:33:17:cd:9c:da:65:b6: 1e:77:fb:fb:dd:58:9a:e1:00:5f:f9:ce:30:40:2d:9a:d7:4b: 63:81:fc:16:2c:5f:33:39:05:5e:a6:7f:48:cc:db:14:43:61: 83:1a:19:98:dd:c6:10:a2:c5:45:02:ad:7d:6a:70:a0:ad:db: 94:bb:70:21:d3:ee:72:5a:67:8a:dc:f5:fb:81:e0:59:69:59: 6b:07:81:f5:f8:32:68:f5:ec:f0:c8:57:f6:cd:41:e9:ac:4b: 7d:02:8a:41:ad:c9:3e:e8:f4:e0:41:3d:ee:9d:9f:58:18:b0: 4f:cc:c2:11:d9:74:54:60:13:1b:33:6f:20:0d:20:4e:2f:e9: c0:8b:e0:53 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o5VVD3n2VB3X7lwBdPLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmMwMjVhOWQ1NWJmZDY0Mzc1N2RhNGQ0OTlkY2UxNzIwMTc3NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy24ZJ1Vgn6gloYZMqZdu14joNeia cNlTo1VVyba5nFlSdXeTmKpww2It0Dt2OLEambeMSTgFMsDen9CHz0x6FYQsws2h wLbFhnutpUbWAMAYOwSyfkLnYfu3qffsw/dfPvZnr3dYNKcTnQGZjAetA3FJq8xT LmCeGV3t2lee8KQ/hwZVKLv4s4MqmgYq51Z/b1oxz2XWkFLm7RXjDyg4DUB62osD e0Ama3xVG9+yxY5VSFkzepFQqkqY3EeUvcvnrQKaCYhcsgh4Jsuxt6OG9g9WqeQ2 YJyi7RRBg4V+IcFZjSVA0v1gdEbYDqL75hQis/GT05iaPz1+vPYvxUB/TQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM/AJanVW/1kN1faTUmdzhcgF3TSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjL2ZkYTI5 OC0wMmM3LTRkNzEtOGFkMy05NTFmZDc1YWM5YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvZmRhMjk4 LTAyYzctNGQ3MS04YWQzLTk1MWZkNzVhYzlhMi8xL3o4QWxxZFZiX1dRM1Y5cE5T WjNPRnlBWGROSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9QeMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC+jjANBgkqhkiG9w0BAQsFAAOCAQEAiRHHY4O7kxNCj+p2A7WtC3hxp4C1ZSMr RZ9mmQREQFHwTmtayrEFWr3pAodO3TXnW6Pq8na9vx/XteJjikX3nxk4JjVk4awR Eju9RBvdDLaz6TgUNL9A33UQ6S2o5v0jc8WGe6EklN30LWfpu11cEHL+jBDaCSUz F82c2mW2Hnf7+91YmuEAX/nOMEAtmtdLY4H8FixfMzkFXqZ/SMzbFENhgxoZmN3G EKLFRQKtfWpwoK3blLtwIdPuclpnitz1+4HgWWlZaweB9fgyaPXs8MhX9s1B6axL fQKKQa3JPuj04EE97p2fWBiwT8zCEdl0VGATGzNvIA0gTi/pwIvgUw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:34 2026 by rpki-client