This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer (raw, json) Hash identifier: MIarE2Wdy/mvCHmfS/lE37qPlCxJNxXq+aKg/NtXjq8= Subject key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E3CBB74EBD2ED09CAD2370118223 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47564 IP: 91.204.200.0/22 IP: 176.107.224.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e3:cb:b7:4e:bd:2e:d0:9c:ad:23:70:11:82:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:8c:30:bf:ce:16:6e:1b:b6:37:9c:c1:9e: 63:ec:62:6c:45:6a:53:54:2a:e3:5d:37:d4:e0:5c: 0c:a8:1e:c6:9e:9d:ee:f2:9b:3a:0e:b2:63:c2:d8: 06:8d:07:ea:a8:48:78:f9:7d:68:a1:de:de:e3:fe: 0a:22:d9:99:45:66:cb:bc:a3:47:97:6b:6c:47:63: 9e:af:69:72:cd:78:9e:e4:86:c0:a6:bb:00:4e:e4: d6:ae:fc:18:87:5f:55:31:42:29:fd:14:7d:29:6f: bc:d0:87:ec:b1:0c:c6:fc:e0:c6:1e:09:1f:af:fd: 1c:83:f2:55:ea:9b:da:fa:6c:ed:f6:69:0b:15:53: 47:8f:f9:bf:40:7a:50:56:8a:a8:68:b4:bd:09:3f: 46:e2:dd:37:00:45:79:98:62:e1:8a:0d:7b:98:a8: b1:0f:c0:6c:a1:eb:d2:2a:71:a3:87:ac:28:df:c0: db:82:31:5b:7d:2f:17:4b:57:ec:26:6c:14:6e:ae: db:23:df:d4:10:7b:44:fb:3a:4c:08:aa:3e:07:73: 09:2e:5c:4a:4a:20:32:6e:4d:5e:82:b2:96:dd:e1: 5f:85:6e:30:3c:1f:8f:46:c5:1f:bf:0e:97:3f:42: 7a:3a:15:7e:30:4c:43:53:0a:09:4b:19:b1:22:3d: f6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.200.0/22 176.107.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47564 Signature Algorithm: sha256WithRSAEncryption 8d:39:9b:61:af:74:5f:8d:00:ae:12:92:a4:c0:1f:06:7f:d9: 8b:b5:4f:69:ea:ae:00:2f:11:a0:f3:15:ff:56:17:38:ce:7c: ef:56:fb:27:78:c1:ef:62:17:94:ca:38:a8:5c:a3:3a:f6:74: 3d:cb:7a:37:d1:bc:29:f7:47:aa:06:84:a4:94:e7:f3:d3:42: be:20:b0:d6:ca:68:89:95:ac:a0:aa:f5:89:c9:fd:cb:9f:b0: 8a:e7:ca:a5:6e:79:ae:eb:4d:62:ac:f2:f8:aa:72:21:fb:fa: 75:e6:61:a6:ca:8d:d0:36:39:84:e5:fd:06:e5:05:d3:51:a4: 04:8e:b2:f6:ec:67:d2:48:d0:5c:bd:fc:1a:98:90:7c:81:aa: 5e:9d:68:e8:b6:7d:e2:0c:fe:12:c2:ae:54:25:bd:0a:cf:02: 35:62:ed:69:89:f4:9c:61:46:e1:21:79:f6:e7:0d:40:52:63: 6f:b1:bd:ed:58:c7:d2:0b:e2:df:45:74:a1:89:99:72:36:af: bf:17:2c:b3:48:6d:79:49:03:33:59:7e:34:16:27:48:33:b5: ce:74:e8:23:7f:8a:02:2f:05:b6:da:16:b6:34:90:cc:49:3a: 2a:69:10:2c:d4:9b:51:c8:dd:c0:62:74:b4:ef:8c:40:26:52: 3d:b5:b1:41 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt3WOPLt069LtCcrSNwEYIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmQzYTNmMTA2OWZjZDUxMmRhNTE0ZjY2ZDZlZTM0YmEzZGViYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsISMML/OFm4btjecwZ5j7GJsRWpT VCrjXTfU4FwMqB7Gnp3u8ps6DrJjwtgGjQfqqEh4+X1ood7e4/4KItmZRWbLvKNH l2tsR2Oer2lyzXie5IbAprsATuTWrvwYh19VMUIp/RR9KW+80IfssQzG/ODGHgkf r/0cg/JV6pva+mzt9mkLFVNHj/m/QHpQVoqoaLS9CT9G4t03AEV5mGLhig17mKix D8BsoevSKnGjh6wo38DbgjFbfS8XS1fsJmwUbq7bI9/UEHtE+zpMCKo+B3MJLlxK SiAybk1egrKW3eFfhW4wPB+PRsUfvw6XP0J6OhV+MExDUwoJSxmxIj32PwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFM/To/EGn81RLaUU9m1u40uj3rsPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2IzZjgy NS1kYTM4LTQ5ODktOTYyOS0zODI5MjAxNTVmZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvYjNmODI1 LWRhMzgtNDk4OS05NjI5LTM4MjkyMDE1NWZmYi8xL3o5T2o4UWFmelZFdHBSVDJi VzdqUzZQZXV3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8zIAwQEsGvgMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC5zDANBgkqhkiG9w0BAQsFAAOCAQEAjTmbYa90X40ArhKSpMAfBn/Z i7VPaequAC8RoPMV/1YXOM5871b7J3jB72IXlMo4qFyjOvZ0Pct6N9G8KfdHqgaE pJTn89NCviCw1spoiZWsoKr1icn9y5+wiufKpW55rutNYqzy+KpyIfv6deZhpsqN 0DY5hOX9BuUF01GkBI6y9uxn0kjQXL38GpiQfIGqXp1o6LZ94gz+EsKuVCW9Cs8C NWLtaYn0nGFG4SF59ucNQFJjb7G97VjH0gvi30V0oYmZcjavvxcss0hteUkDM1l+ NBYnSDO1znToI3+KAi8FttoWtjSQzEk6KmkQLNSbUcjdwGJ0tO+MQCZSPbWxQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:06 2026 by rpki-client