This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer (raw, json) Hash identifier: jnCMrTC+U3Xy3uEEEotEPaN/rY9Gqluh67UuX0U0uBg= Subject key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1502EE0421EEC3FFD4D3F5C531D98F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202779 IP: 91.201.220.0/22 IP: 185.154.156.0/22 IP: 194.54.128.0/22 IP: 194.126.184.0/22 IP: 213.173.96.0/19 IP: 213.244.248.0/21 IP: 2a07:8ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:02:ee:04:21:ee:c3:ff:d4:d3:f5:c5:31:d9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc777a08a4564548b518ec3864b341e1fa5225ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:cb:95:38:b8:89:41:6f:a2:7b:83:51:ae: 05:c3:44:87:85:ae:9f:62:5f:d3:01:78:7d:2e:1c: 7b:e9:49:26:97:c3:0a:b3:1b:36:03:1a:9c:ef:51: 71:41:4f:92:3a:69:e7:42:83:ca:8f:96:75:ad:9f: f4:44:b4:23:78:ed:65:e2:10:29:a8:88:24:d3:f5: 47:a8:84:aa:2f:c1:f9:bd:2b:71:30:29:25:d2:8b: f8:1e:ea:c3:a6:1d:d5:a9:01:42:f0:58:41:ef:b7: d5:e0:d8:14:23:00:9a:4c:6f:d3:f8:a8:6c:17:9b: 3e:49:05:26:6c:e3:f7:46:53:f9:3b:16:4c:74:29: db:7e:51:d1:d1:c5:35:91:ac:f3:a8:dc:eb:a2:0a: 74:c5:03:8e:46:4a:17:13:f2:d4:b4:ce:ac:f6:76: 39:2b:39:0e:47:6d:45:a6:cf:2d:72:ff:0b:0a:39: e7:47:99:02:06:31:4f:5a:ff:02:7f:39:ec:7a:31: 0f:c5:1e:a3:03:30:be:01:d0:93:c0:89:91:07:60: f3:eb:9f:87:74:4f:e2:b5:dd:e5:dd:c8:eb:bc:5d: 15:23:2d:c4:80:a6:06:18:9d:a1:4f:4e:7f:1d:ce: b3:42:dd:53:19:51:40:22:72:ac:96:6c:5c:d8:2c: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.220.0/22 185.154.156.0/22 194.54.128.0/22 194.126.184.0/22 213.173.96.0/19 213.244.248.0/21 IPv6: 2a07:8ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202779 Signature Algorithm: sha256WithRSAEncryption 8b:fa:eb:12:c9:02:35:9c:05:d4:ef:54:37:06:df:81:aa:f3: c2:41:2f:49:11:a4:1c:f2:20:c3:8f:22:c0:66:67:3a:38:89: 66:46:d3:68:a4:1b:8b:18:8b:78:cc:b3:6a:5a:cb:16:ae:23: fb:84:0b:06:35:b8:b0:ce:21:8a:38:60:08:27:10:6e:b1:d1: 3c:9f:47:87:b2:63:30:e2:f9:e4:5a:3f:2e:91:8e:33:27:e0: 80:c1:e5:51:15:6f:4f:2a:98:be:81:37:ad:87:71:a6:70:b3: c8:07:38:da:72:06:48:03:0f:67:b6:8f:0a:bd:36:a0:d6:4b: 23:f8:4a:2c:48:b5:6c:72:f7:3b:16:72:3f:18:2d:b3:72:9f: de:81:c3:10:d5:32:2e:ee:4a:05:54:ea:e2:bf:91:02:be:46: ab:7f:7f:e7:97:ac:91:ba:15:5b:5a:fa:ba:7c:4e:fa:03:68: 3b:93:d5:a0:be:62:e0:e3:99:05:00:c4:38:18:77:12:97:63: 13:97:a0:27:22:b7:5a:aa:cd:26:9f:ec:3a:f6:0f:71:79:0e: 03:da:54:7d:3d:96:8e:fd:e3:51:c6:59:82:88:1f:ee:f8:3f: d9:45:7f:a3:60:05:49:4e:72:d7:35:db:fe:11:06:e9:28:b0: a7:5e:19:4a -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt/FQLuBCHuw//U0/XFMdmPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzc3N2EwOGE0NTY0NTQ4YjUxOGVjMzg2NGIzNDFlMWZhNTIyNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiPLlTi4iUFvonuDUa4Fw0SHha6f Yl/TAXh9Lhx76Ukml8MKsxs2Axqc71FxQU+SOmnnQoPKj5Z1rZ/0RLQjeO1l4hAp qIgk0/VHqISqL8H5vStxMCkl0ov4HurDph3VqQFC8FhB77fV4NgUIwCaTG/T+Khs F5s+SQUmbOP3RlP5OxZMdCnbflHR0cU1kazzqNzrogp0xQOORkoXE/LUtM6s9nY5 KzkOR21Fps8tcv8LCjnnR5kCBjFPWv8CfznsejEPxR6jAzC+AdCTwImRB2Dz65+H dE/itd3l3cjrvF0VIy3EgKYGGJ2hT05/Hc6zQt1TGVFAInKslmxc2CzsYQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFMx3egikVkVItRjsOGSzQeH6UiXqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2E3MmE0 Yi0wNjkzLTRkMWItOWJmYy03NjdiMGNjODBjMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYTcyYTRi LTA2OTMtNGQxYi05YmZjLTc2N2IwY2M4MGMwOC8xL3pIZDZDS1JXUlVpMUdPdzRa TE5CNGZwU0plby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCW8ncAwQCuZqcAwQCwjaAAwQCwn64AwQF1a1g AwQD1fT4MA0EAgACMAcDBQMqB4rAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMY GzANBgkqhkiG9w0BAQsFAAOCAQEAi/rrEskCNZwF1O9UNwbfgarzwkEvSRGkHPIg w48iwGZnOjiJZkbTaKQbixiLeMyzalrLFq4j+4QLBjW4sM4hijhgCCcQbrHRPJ9H h7JjMOL55Fo/LpGOMyfggMHlURVvTyqYvoE3rYdxpnCzyAc42nIGSAMPZ7aPCr02 oNZLI/hKLEi1bHL3OxZyPxgts3Kf3oHDENUyLu5KBVTq4r+RAr5Gq39/55eskboV W1r6unxO+gNoO5PVoL5i4OOZBQDEOBh3EpdjE5egJyK3WqrNJp/sOvYPcXkOA9pU fT2Wjv3jUcZZgogf7vg/2UV/o2AFSU5y1zXb/hEG6Siwp14ZSg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:22 2026 by rpki-client