This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer File: zQClIzLRIChgRQsg56vE9-Afdk4.cer (raw, json) Hash identifier: afhPs93eD0DGJAKMH4scbZ89wkbHgM51R27d+DV3ohw= Subject key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9811BC658867C60C924DCBD8DB28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201833 IP: 185.62.120.0/22 IP: 2a03:320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:98:11:bc:65:88:67:c6:0c:92:4d:cb:d8:db:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd00a52332d1202860450b20e7abc4f7e01f764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:f4:7b:77:c4:65:21:01:6d:ff:7d:e9:93: 0b:3a:17:e5:61:bf:3e:56:24:94:1d:c7:15:2b:80: 11:fa:e0:6c:e6:9c:98:7c:fc:65:be:1f:e5:ba:e8: 39:ea:02:a9:fb:3d:0c:df:d0:3f:19:0e:70:11:26: 8c:8e:31:07:54:2a:dd:3f:a5:e4:dc:f0:13:7f:46: 70:82:47:5c:4c:f1:d3:91:ad:d0:2f:d5:5d:10:33: 74:93:ca:88:03:7c:9f:7e:3f:31:bf:c7:49:a4:33: d9:24:59:7b:79:40:72:28:6d:50:91:8f:3b:77:34: 86:ee:0a:61:d7:a0:14:7a:30:09:d7:8a:8c:67:f2: 9a:75:38:ef:da:54:6d:83:a4:87:53:37:56:8d:ff: 66:a2:54:f0:67:f9:05:ab:17:c6:3b:11:25:1b:05: f1:17:07:02:85:0c:a8:b6:4f:b5:09:ab:20:e1:22: 69:7a:a5:3b:ef:05:89:bf:44:80:06:36:84:f6:58: c2:0d:2b:4a:bf:b8:52:7c:7e:13:41:4e:30:50:35: de:f7:40:ec:40:a1:e0:ca:e6:d8:4a:35:ab:ae:58: f5:ff:e3:55:f9:a5:ce:5e:39:f4:05:0d:8d:d6:28: d4:2e:db:ff:47:bf:ce:cd:c7:1a:ef:fc:b8:75:19: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.120.0/22 IPv6: 2a03:320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201833 Signature Algorithm: sha256WithRSAEncryption 18:21:8a:d5:87:78:7e:0c:19:f9:a3:d0:b6:45:bd:d2:86:09: 99:47:fe:ad:0b:44:c5:c7:9d:79:9f:e3:6c:fd:7d:12:99:fa: a7:2d:b4:cc:89:0b:a5:43:9c:8c:e3:0a:88:b4:6d:4b:16:79: 80:e7:4e:fd:51:ac:fb:d3:67:0d:98:e4:16:0d:c7:15:4c:66: ad:78:cb:73:c4:36:37:c5:f0:8f:0a:b2:6d:67:52:6a:56:60: a8:ce:3a:43:4a:e1:50:46:a3:67:cd:f8:7b:34:c9:9c:5f:37: 71:cb:72:c1:7a:42:ae:f0:1e:15:0a:8f:89:5b:cb:a9:32:76: 47:c8:5d:04:69:b5:4d:70:ae:06:c0:86:a2:90:bd:18:5a:1c: 8f:fd:cf:a4:95:5f:92:7d:3d:b7:a4:5c:3c:9a:a2:4f:61:12: 57:67:f7:8c:5f:c4:93:f0:0c:42:8d:09:e8:fe:4b:f7:09:4c: 4e:30:b8:ae:cf:0b:72:10:08:ce:93:77:fa:42:76:93:44:16: 2a:f8:6a:8d:72:bc:88:a6:bc:19:0f:65:35:0d:81:cc:d2:fd: 03:f7:f0:1b:91:2f:8d:74:da:8a:da:4d:c8:7c:83:e2:77:28: 4a:e6:b0:88:27:26:be:e9:1b:ac:07:c1:e0:f6:d7:0e:25:87: cd:45:c6:2c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6W5gRvGWIZ8YMkk3L2NsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDAwYTUyMzMyZDEyMDI4NjA0NTBiMjBlN2FiYzRmN2UwMWY3NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nf0e3fEZSEBbf996ZMLOhflYb8+ ViSUHccVK4AR+uBs5pyYfPxlvh/luug56gKp+z0M39A/GQ5wESaMjjEHVCrdP6Xk 3PATf0ZwgkdcTPHTka3QL9VdEDN0k8qIA3yffj8xv8dJpDPZJFl7eUByKG1QkY87 dzSG7gph16AUejAJ14qMZ/KadTjv2lRtg6SHUzdWjf9molTwZ/kFqxfGOxElGwXx FwcChQyotk+1Casg4SJpeqU77wWJv0SABjaE9ljCDStKv7hSfH4TQU4wUDXe90Ds QKHgyubYSjWrrlj1/+NV+aXOXjn0BQ2N1ijULtv/R7/Ozcca7/y4dRnh/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM0ApSMy0SAoYEULIOerxPfgH3ZOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzU0YTc1 Yi1kOTBkLTRjYjQtYmQ1Yy00NjdmYjQwMjIyYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNTRhNzVi LWQ5MGQtNGNiNC1iZDVjLTQ2N2ZiNDAyMjJhOC8xL3pRQ2xJekxSSUNoZ1JRc2c1 NnZFOS1BZmRrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT54MA0EAgACMAcDBQAqAwMgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMUaTANBgkqhkiG9w0BAQsFAAOCAQEAGCGK1Yd4fgwZ +aPQtkW90oYJmUf+rQtExcedeZ/jbP19Epn6py20zIkLpUOcjOMKiLRtSxZ5gOdO /VGs+9NnDZjkFg3HFUxmrXjLc8Q2N8XwjwqybWdSalZgqM46Q0rhUEajZ834ezTJ nF83cctywXpCrvAeFQqPiVvLqTJ2R8hdBGm1TXCuBsCGopC9GFocj/3PpJVfkn09 t6RcPJqiT2ESV2f3jF/Ek/AMQo0J6P5L9wlMTjC4rs8LchAIzpN3+kJ2k0QWKvhq jXK8iKa8GQ9lNQ2BzNL9A/fwG5EvjXTaitpNyHyD4ncoSuawiCcmvukbrAfB4PbX DiWHzUXGLA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:31 2026 by rpki-client