This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer File: zM1YPI1xokJ-AGDjzJJPMtwaggs.cer (raw, json) Hash identifier: h8UKw+bud3PPxpWTILq3HTgzscD2SoRcofdlPIWEcs4= Subject key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE22102A1B53955D5CE9E9C11CC779 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209059 IP: 93.177.126.0/24 IP: 176.124.192.0/19 IP: 2a10:880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:22:10:2a:1b:53:95:5d:5c:e9:e9:c1:1c:c7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:57:07:cc:88:a0:13:5c:c9:50:3a:85:4a: e0:69:f1:1e:fb:6e:02:09:7e:51:64:03:57:b4:8f: 6d:21:56:23:cc:d1:f4:bc:37:78:a1:9b:a7:03:b6: c0:e4:2c:82:40:03:41:66:a9:dd:03:0b:1e:e2:59: dd:90:6b:de:20:02:14:98:63:1e:b0:f0:e3:04:73: 73:d8:c4:42:d0:cd:d0:54:2e:d8:e3:34:4d:89:87: b1:9c:b7:a2:d8:82:e8:f3:8a:75:fa:12:04:8c:4d: d9:80:6d:12:ff:c3:3a:54:bc:c3:52:47:65:04:f9: dd:cb:cd:e8:dc:1f:5b:13:db:cf:27:bd:b7:4a:0e: 4a:e7:28:e1:86:1d:98:c8:50:de:fb:04:fb:dd:b8: 72:74:8b:b5:51:f5:66:45:89:09:9c:e4:25:17:36: 4c:87:ae:36:e8:f4:83:a4:d2:4d:fc:e4:01:ab:5b: 9e:af:8d:60:35:f4:d6:66:99:ce:5a:55:cd:9b:36: 6d:7b:52:82:3c:90:78:48:b6:34:36:32:9f:e7:c9: 3b:94:3e:13:c0:cd:18:29:88:82:13:1f:69:c5:a8: 3c:ba:7b:40:04:13:87:34:02:bf:43:8c:90:be:7c: fe:57:90:08:99:4a:dc:3b:31:01:71:93:67:8f:1b: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.126.0/24 176.124.192.0/19 IPv6: 2a10:880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209059 Signature Algorithm: sha256WithRSAEncryption 86:b6:82:75:c3:2c:0f:10:45:cf:d0:a2:8b:c1:ce:9d:ac:71: 91:84:ed:c4:8e:fb:7c:ba:72:1b:47:67:cb:12:33:6d:30:dd: 47:4f:41:27:74:5b:ea:c5:03:62:1c:3e:ca:f1:39:cd:60:a1: 86:42:8b:a0:82:54:5a:17:31:95:52:8d:70:86:ff:7a:76:03: 16:88:a5:31:74:7a:34:df:25:70:37:db:c3:2a:1a:ac:b3:3e: 5c:a4:10:f8:33:e8:61:10:52:cc:51:8f:32:a6:d2:05:44:48: 37:2f:b6:d0:a8:79:b0:5b:c2:f3:a2:68:8a:8b:81:32:47:d3: 09:86:56:53:04:e1:28:fa:31:6f:4a:e8:e9:7f:a4:75:71:7b: f7:3b:37:d3:6d:5f:9e:1a:80:fa:66:3d:9c:db:9e:8b:5a:fa: fd:b8:66:be:c9:4a:f7:e6:0a:f6:e0:ca:a7:99:fb:56:06:79: 14:9a:cb:19:7d:b0:76:56:50:c5:9c:97:d3:c3:07:e4:64:e9: 9b:5f:6e:05:63:37:d4:dd:cd:a0:e5:0e:4b:39:6e:c0:2f:eb: 40:b6:cd:42:c5:a1:ce:c5:4e:51:0a:c1:cd:1f:e4:35:3f:aa: 19:41:90:37:0a:60:75:01:b2:d9:e8:7f:57:1e:f8:4e:2d:8d: 6b:fc:7a:eb -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87iIQKhtTlV1c6enBHMd5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2NkNTgzYzhkNzFhMjQyN2UwMDYwZTNjYzkyNGYzMmRjMWE4MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC1XB8yIoBNcyVA6hUrgafEe+24C CX5RZANXtI9tIVYjzNH0vDd4oZunA7bA5CyCQANBZqndAwse4lndkGveIAIUmGMe sPDjBHNz2MRC0M3QVC7Y4zRNiYexnLei2ILo84p1+hIEjE3ZgG0S/8M6VLzDUkdl BPndy83o3B9bE9vPJ723Sg5K5yjhhh2YyFDe+wT73bhydIu1UfVmRYkJnOQlFzZM h6426PSDpNJN/OQBq1uer41gNfTWZpnOWlXNmzZte1KCPJB4SLY0NjKf58k7lD4T wM0YKYiCEx9pxag8untABBOHNAK/Q4yQvnz+V5AImUrcOzEBcZNnjxsR/wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMzNWDyNcaJCfgBg48ySTzLcGoILMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzU2YTAy YS1jNWZkLTQxMTktOGM1Zi1mNDg1MDJkMTM5NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvNTZhMDJh LWM1ZmQtNDExOS04YzVmLWY0ODUwMmQxMzk0OC8xL3pNMVlQSTF4b2tKLUFHRGp6 SkpQTXR3YWdncy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAXbF+AwQFsHzAMA0EAgACMAcDBQMqEAiAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwozANBgkqhkiG9w0BAQsFAAOCAQEAhraC dcMsDxBFz9Cii8HOnaxxkYTtxI77fLpyG0dnyxIzbTDdR09BJ3Rb6sUDYhw+yvE5 zWChhkKLoIJUWhcxlVKNcIb/enYDFoilMXR6NN8lcDfbwyoarLM+XKQQ+DPoYRBS zFGPMqbSBURINy+20Kh5sFvC86JoiouBMkfTCYZWUwThKPoxb0ro6X+kdXF79zs3 021fnhqA+mY9nNuei1r6/bhmvslK9+YK9uDKp5n7VgZ5FJrLGX2wdlZQxZyX08MH 5GTpm19uBWM31N3NoOUOSzluwC/rQLbNQsWhzsVOUQrBzR/kNT+qGUGQNwpgdQGy 2eh/Vx74Ti2Na/x66w== -----END CERTIFICATE-----Generated at Wed Jan 21 12:47:32 2026 by rpki-client