This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer (raw, json) Hash identifier: qDjFSAOVmK+AnLCqYPwAZkBvnBhbUF4+OmoWqPre3nE= Subject key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD850EFD8FCB9E51E83300A69E868 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48093 IP: 37.26.152.0/21 IP: 91.207.112.0/23 IP: 2a03:28e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d8:50:ef:d8:fc:b9:e5:1e:83:30:0a:69:e8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:8a:e8:a0:5b:7e:a8:7a:d2:c1:8e:49:f6: 1d:55:72:43:48:21:bc:8a:e9:1c:65:74:8b:cd:75: 3d:e8:fc:5e:5a:b2:91:7b:56:49:db:11:af:62:b1: 33:f6:da:70:7d:3b:f3:1d:f7:09:f5:8a:af:68:95: fa:7b:33:98:66:4c:23:b2:39:ca:7b:cb:bf:66:c8: cc:a6:b1:e0:83:e4:a6:f6:17:92:f5:86:29:10:90: 72:f0:7d:80:90:5a:0b:e1:a1:85:7f:e8:cc:77:6d: 49:4f:8d:86:c0:77:6e:f6:e5:08:8f:e7:12:51:fc: 96:e1:82:e4:3c:14:c8:a7:93:63:73:b0:ea:c1:59: 39:6c:92:b9:a6:98:3d:4d:2c:81:e3:cc:16:e0:8a: d2:38:4e:cd:f6:3b:df:e2:03:aa:1f:11:bd:ec:78: ea:2b:19:f7:42:eb:23:87:fd:bb:7c:21:1d:12:d0: 1b:ba:5a:da:f9:3e:6a:d3:85:3f:fb:d0:86:a1:bd: 34:f1:30:90:8a:d1:a0:1e:78:fb:04:de:b2:9f:fa: 26:db:26:13:d5:31:32:ce:0e:9d:8b:86:db:d6:7a: 5e:49:32:dd:17:d9:f2:c5:67:e9:85:9c:44:79:0c: 71:21:55:33:02:d4:34:ee:28:4f:d1:96:a8:f5:19: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.152.0/21 91.207.112.0/23 IPv6: 2a03:28e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48093 Signature Algorithm: sha256WithRSAEncryption 1f:0c:03:58:c4:42:77:1c:c2:a4:48:8b:05:82:b6:c1:05:13: 34:6e:e8:8f:89:e3:ca:28:0e:cb:6d:cc:48:1c:91:4a:4e:96: 0d:42:01:5b:f7:eb:d4:f9:df:ff:10:83:5f:ce:af:3c:e8:fe: b4:0f:95:39:84:e7:a8:9a:f2:37:9e:22:ec:24:d9:25:d8:50: 54:33:ce:5d:e6:4a:7f:56:30:08:b1:01:cb:da:ae:d8:45:63: 9b:dd:21:ff:5c:66:1f:43:11:2d:3a:99:19:ac:a9:9c:09:ef: f9:cd:7d:fb:4e:41:9a:a6:5a:dc:49:0a:88:64:9f:b1:80:ac: 97:78:48:36:8d:d8:37:bb:64:18:3b:24:4e:db:86:5c:53:b7: aa:da:d0:c3:a7:2b:b7:27:a7:61:d2:88:84:fc:d8:9b:6d:62: 96:7f:33:3f:77:3d:91:73:b6:5f:ba:8e:44:a7:84:99:af:19: 8c:24:07:e3:22:92:51:48:5b:d5:e9:72:1b:03:ec:77:d6:39: ec:b9:96:70:fa:2c:f3:e2:00:4b:9f:90:1d:c8:2e:58:c0:74: 9f:dc:31:a6:59:9d:95:18:1f:55:e7:67:1b:c8:2d:2d:72:a2: d7:0d:46:00:fa:e9:ac:a0:4d:a4:32:b3:38:68:97:95:a1:62: 3f:6c:91:90 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt26thQ79j8ueUegzAKaehoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2U1N2RjODIzNGRmNWY1OWQ2N2ZkYzY4NTZiYjI2MmU3MTkzZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6yK6KBbfqh60sGOSfYdVXJDSCG8 iukcZXSLzXU96PxeWrKRe1ZJ2xGvYrEz9tpwfTvzHfcJ9YqvaJX6ezOYZkwjsjnK e8u/ZsjMprHgg+Sm9heS9YYpEJBy8H2AkFoL4aGFf+jMd21JT42GwHdu9uUIj+cS UfyW4YLkPBTIp5Njc7DqwVk5bJK5ppg9TSyB48wW4IrSOE7N9jvf4gOqHxG97Hjq Kxn3Qusjh/27fCEdEtAbulra+T5q04U/+9CGob008TCQitGgHnj7BN6yn/om2yYT 1TEyzg6di4bb1npeSTLdF9nyxWfphZxEeQxxIVUzAtQ07ihP0Zao9RkrCQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMzlfcgjTfX1nWf9xoVrsmLnGT9SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzM0YWNm NC03NDdmLTQ1ZmUtODEyOS00MDJmMWZiODQ4Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvMzRhY2Y0 LTc0N2YtNDVmZS04MTI5LTQwMmYxZmI4NDhjZi8xL3pPVjl5Q05OOWZXZFpfM0do V3V5WXVjWlAxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJRqYAwQBW89wMA0EAgACMAcDBQMqAyjgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC73TANBgkqhkiG9w0BAQsFAAOCAQEAHwwD WMRCdxzCpEiLBYK2wQUTNG7oj4njyigOy23MSByRSk6WDUIBW/fr1Pnf/xCDX86v POj+tA+VOYTnqJryN54i7CTZJdhQVDPOXeZKf1YwCLEBy9qu2EVjm90h/1xmH0MR LTqZGaypnAnv+c19+05BmqZa3EkKiGSfsYCsl3hINo3YN7tkGDskTtuGXFO3qtrQ w6crtyenYdKIhPzYm21iln8zP3c9kXO2X7qORKeEma8ZjCQH4yKSUUhb1elyGwPs d9Y57LmWcPos8+IAS5+QHcguWMB0n9wxplmdlRgfVednG8gtLXKi1w1GAPrprKBN pDKzOGiXlaFiP2yRkA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:02 2026 by rpki-client