This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer (raw, json) Hash identifier: bdR91PkZt02qKcNKYWZpcy4HDPtScJQLEFhj+Gj7wNM= Subject key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37F5F12D3040837FC0FD6137B8DFEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205687 IP: 185.209.172.0/22 IP: 2a0b:49c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f5:f1:2d:30:40:83:7f:c0:fd:61:37:b8:df:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:bc:35:0b:dd:99:f2:8e:3c:17:c9:34:ae: 41:c2:e4:3a:a3:64:9d:e0:e5:06:1d:c4:ab:2d:70: b0:5d:df:68:90:b3:64:c3:5c:89:e3:78:62:79:e0: 98:38:18:5a:5a:c1:3d:db:7e:2b:a4:8e:57:78:23: f0:2b:88:50:84:93:0a:e7:f1:27:23:dc:9c:9b:c4: 34:e2:23:00:53:7f:0d:a4:b2:3c:89:ba:39:15:71: ca:52:f0:01:0b:de:b6:86:34:09:d4:57:58:39:31: ea:e0:6d:91:44:f5:e6:9f:46:88:c6:4e:57:37:85: 2d:21:b3:d4:97:89:59:03:5b:c5:af:ea:25:d5:e0: a0:0e:b4:10:7a:e8:ee:f5:dd:8e:ef:0a:02:d2:0f: 8b:40:27:09:15:1a:23:0c:18:c9:dd:a1:a9:47:d6: af:80:40:c2:1e:2c:fa:bb:81:4d:a4:2f:a3:0a:7a: 2a:4f:38:37:58:4c:e8:54:8c:5a:ff:aa:30:7d:24: 41:fd:1e:45:d2:e3:09:99:4f:87:76:88:e7:bf:aa: a7:cf:03:22:84:9a:57:2c:33:77:55:2c:82:ff:ab: 54:6e:76:85:b3:0f:4a:d9:5a:60:94:be:2f:a3:16: db:52:cc:64:c7:83:21:a9:02:52:a3:ec:c6:59:5f: a7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.172.0/22 IPv6: 2a0b:49c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205687 Signature Algorithm: sha256WithRSAEncryption 58:ff:0f:16:a5:c2:5b:1b:80:59:b5:71:c3:43:a1:2e:65:6a: 07:83:c6:49:1b:d8:24:36:fa:4f:ac:37:f1:96:83:9f:4a:3e: 7a:28:61:fe:c5:c3:b3:fe:a2:66:f3:81:0e:59:1e:55:07:ed: 5e:9a:96:58:86:cc:d8:ad:c9:b4:20:43:14:1d:16:25:df:31: 39:a0:2e:91:e2:07:d6:52:6a:e2:bc:8e:ce:ee:97:28:90:51: e9:59:c8:d8:9b:c0:75:28:54:e6:01:fa:76:8c:f6:83:1f:86: 74:99:5b:de:11:ad:b5:5b:41:35:f2:d5:f3:65:3d:1b:87:31: f0:b1:a8:76:b9:18:28:71:9f:00:71:c8:43:83:6a:78:11:11: 63:3a:f9:05:0d:60:4b:7b:10:15:6b:ff:5c:c1:e1:73:d6:81: c0:eb:df:c9:74:7a:cb:3d:84:67:3e:49:3d:b4:ed:10:52:3e: e7:44:cd:da:e6:e5:b7:65:10:00:1a:b3:de:0d:58:41:75:d1: 63:a0:e8:00:e1:9a:7e:7d:5c:5e:86:6c:7c:fa:7a:19:26:4e: aa:34:5e:0d:88:47:77:fc:ef:e8:ac:8c:36:82:b4:56:ab:13: 6a:66:39:41:9b:15:0a:b4:3b:7a:a7:b3:4c:db:0c:93:aa:0a: b4:60:b6:87 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N/XxLTBAg3/A/WE3uN/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzFhOWY3MjkzODhjMTY5YmFjYzFjYmFmOThlMjM2ZDRlODA4YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLq8NQvdmfKOPBfJNK5BwuQ6o2Sd 4OUGHcSrLXCwXd9okLNkw1yJ43hieeCYOBhaWsE9234rpI5XeCPwK4hQhJMK5/En I9ycm8Q04iMAU38NpLI8ibo5FXHKUvABC962hjQJ1FdYOTHq4G2RRPXmn0aIxk5X N4UtIbPUl4lZA1vFr+ol1eCgDrQQeuju9d2O7woC0g+LQCcJFRojDBjJ3aGpR9av gEDCHiz6u4FNpC+jCnoqTzg3WEzoVIxa/6owfSRB/R5F0uMJmU+Hdojnv6qnzwMi hJpXLDN3VSyC/6tUbnaFsw9K2VpglL4voxbbUsxkx4MhqQJSo+zGWV+nNwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMwan3KTiMFpuswcuvmOI21OgIq0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2Lzg3MWM2 Yi0wZjI2LTRjNDMtYTBhYS03ZmZjNGY0MDM2NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvODcxYzZi LTBmMjYtNGM0My1hMGFhLTdmZmM0ZjQwMzY2YS8xL3pCcWZjcE9Jd1dtNnpCeTYt WTRqYlU2QWlyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudGsMA0EAgACMAcDBQMqC0nAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjdzANBgkqhkiG9w0BAQsFAAOCAQEAWP8PFqXCWxuA WbVxw0OhLmVqB4PGSRvYJDb6T6w38ZaDn0o+eihh/sXDs/6iZvOBDlkeVQftXpqW WIbM2K3JtCBDFB0WJd8xOaAukeIH1lJq4ryOzu6XKJBR6VnI2JvAdShU5gH6doz2 gx+GdJlb3hGttVtBNfLV82U9G4cx8LGodrkYKHGfAHHIQ4NqeBERYzr5BQ1gS3sQ FWv/XMHhc9aBwOvfyXR6yz2EZz5JPbTtEFI+50TN2ublt2UQABqz3g1YQXXRY6Do AOGafn1cXoZsfPp6GSZOqjReDYhHd/zv6KyMNoK0VqsTamY5QZsVCrQ7eqezTNsM k6oKtGC2hw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:55 2026 by rpki-client