This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer (raw, json) Hash identifier: 4JDYMuj1XwXZfGJg9Fe//946e2qJbrpH8twmar37KJQ= Subject key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E5256FD3E765830358B023D6F7E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204025 IP: 185.71.56.0/22 IP: 2a03:38e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e5:25:6f:d3:e7:65:83:03:58:b0:23:d6:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:84:60:b3:b8:fa:c8:c9:d5:c5:2c:57:26:45: 04:59:a1:fe:40:85:54:d9:1b:9a:6d:4d:c8:63:96: 6a:fb:3b:17:e9:78:a7:67:c9:59:2c:a4:e2:02:ab: 1a:7e:a9:f4:74:57:9f:cc:a7:10:d4:ea:42:6a:3f: d1:8c:97:56:a2:36:38:9c:5e:94:d8:c5:0f:c5:36: 9e:a3:ae:dd:ae:db:56:e6:bc:a2:77:c0:7e:fb:aa: 60:77:d1:86:92:b2:ca:f3:be:90:7a:39:92:25:1d: d1:97:21:82:64:47:ee:36:32:07:62:6a:6c:40:9c: 1a:ba:da:3e:44:2b:9e:c4:f4:0d:93:a3:af:ec:3f: 0e:b4:5c:34:89:a1:4a:67:25:78:bb:ab:48:a2:53: af:14:e7:e3:03:c0:61:f2:de:cc:e7:3d:fe:a2:ff: 0c:9c:e1:66:d6:db:06:19:74:3e:a0:34:a9:de:cd: 48:7a:37:24:9c:05:d1:da:02:96:d3:2d:9e:55:23: 7e:3d:3b:60:21:d2:b7:2c:a8:16:bd:65:39:a2:e4: c7:71:62:91:2a:da:e7:d2:61:1a:d6:4e:d8:bf:81: c4:7a:2e:62:4e:72:e3:79:c5:3d:e2:ac:51:9d:83: 8c:10:3e:ad:1b:d0:c7:8d:d8:14:f0:ea:0a:9c:49: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.56.0/22 IPv6: 2a03:38e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204025 Signature Algorithm: sha256WithRSAEncryption 00:5b:45:a0:d1:d6:39:c6:27:cc:4c:7e:3f:b6:39:6c:e8:df: 3e:22:cf:72:41:91:2f:24:63:e2:5f:eb:09:48:15:31:bb:e4: 57:37:33:59:56:09:58:5d:71:d4:46:2c:74:64:e3:65:d1:8c: 7b:06:37:e0:11:c8:e7:74:17:82:cf:c1:f5:2e:55:3f:8d:be: 05:d6:56:f4:88:cf:b4:8a:85:1f:b2:37:89:33:82:48:c5:82: 64:4f:a7:2a:d5:49:22:ec:a0:a3:20:94:37:a4:85:8b:4e:05: 8f:04:47:1d:20:4e:6c:50:f5:0f:34:db:cd:99:f9:55:c4:8f: 89:17:1c:9a:d5:19:16:2d:0d:b3:70:b8:a1:32:2f:79:15:9a: 50:b0:ec:e3:16:0e:02:78:6b:ec:90:bb:e0:a8:e7:3c:88:6f: 44:1e:fd:42:80:9d:36:87:75:fa:54:54:e6:2c:4b:e1:c9:1b: ba:3d:ef:7f:e3:f7:3f:33:16:5f:f2:e9:bb:6f:28:f9:42:b9: ec:76:ab:3d:b4:7e:e6:fc:8a:96:ba:0e:4a:f5:25:56:b2:92: bc:65:35:32:b8:b6:37:12:68:2b:ba:59:93:4f:a1:f7:b0:00: 24:11:5d:92:5b:31:66:2d:67:4a:db:7e:30:ea:e9:05:ed:b5: b5:89:ee:ff -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pOUlb9PnZYMDWLAj1vfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzZjYTA1YzRjYjYxZDllMjMyOTI5OGQzNTRjMmE3NjliZGQwNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IRgs7j6yMnVxSxXJkUEWaH+QIVU 2RuabU3IY5Zq+zsX6XinZ8lZLKTiAqsafqn0dFefzKcQ1OpCaj/RjJdWojY4nF6U 2MUPxTaeo67drttW5ryid8B++6pgd9GGkrLK876QejmSJR3RlyGCZEfuNjIHYmps QJwauto+RCuexPQNk6Ov7D8OtFw0iaFKZyV4u6tIolOvFOfjA8Bh8t7M5z3+ov8M nOFm1tsGGXQ+oDSp3s1IejcknAXR2gKW0y2eVSN+PTtgIdK3LKgWvWU5ouTHcWKR Ktrn0mEa1k7Yv4HEei5iTnLjecU94qxRnYOMED6tG9DHjdgU8OoKnEk+bQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMxsoFxMth2eIykpjTVMKnab3QXTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzA5N2Iw MS05NDcwLTQ4ZWItODUwZC1hZmM2MDI3MTRlMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMDk3YjAx LTk0NzAtNDhlYi04NTBkLWFmYzYwMjcxNGUxMy8xL3pHeWdYRXkySFo0aktTbU5O VXdxZHB2ZEJkTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUc4MA0EAgACMAcDBQAqAzjgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMc+TANBgkqhkiG9w0BAQsFAAOCAQEAAFtFoNHWOcYn zEx+P7Y5bOjfPiLPckGRLyRj4l/rCUgVMbvkVzczWVYJWF1x1EYsdGTjZdGMewY3 4BHI53QXgs/B9S5VP42+BdZW9IjPtIqFH7I3iTOCSMWCZE+nKtVJIuygoyCUN6SF i04FjwRHHSBObFD1DzTbzZn5VcSPiRccmtUZFi0Ns3C4oTIveRWaULDs4xYOAnhr 7JC74KjnPIhvRB79QoCdNod1+lRU5ixL4ckbuj3vf+P3PzMWX/Lpu28o+UK57Har PbR+5vyKlroOSvUlVrKSvGU1Mri2NxJoK7pZk0+h97AAJBFdklsxZi1nStt+MOrp Be21tYnu/w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:24 2026 by rpki-client