This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer (raw, json) Hash identifier: hhJ7gUyf7WNIeIAhTvTGNbTTDDKBsszaTlKm/BrVMe4= Subject key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70C73826403F3BC7D65AD2319D7EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59393 IP: 91.235.83.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:73:82:64:03:f3:bc:7d:65:ad:23:19:d7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:b1:87:56:96:d6:ba:18:1d:e3:f7:4f:e2: b8:a8:6a:c9:42:5b:77:fc:5d:45:6c:4d:03:2d:3f: c9:61:77:59:8c:0f:aa:22:67:cb:d8:b7:09:52:5e: 39:db:17:e6:2f:25:15:10:2b:dc:6b:69:a0:89:7b: 4d:1e:e3:97:76:38:3d:65:ef:28:80:03:01:1b:d0: ab:73:65:1e:cb:17:ba:33:4a:ad:0f:78:59:eb:46: 63:1d:85:b4:a3:c2:2a:80:e7:df:40:0f:4a:d3:11: 0e:5b:9c:c3:db:64:85:b3:e3:bf:51:52:d2:70:c1: 49:8e:2b:a2:56:00:27:ea:a8:be:71:77:22:44:5f: 3d:bf:97:af:a2:d6:4c:07:e2:57:39:11:82:63:10: 88:17:b2:f2:3e:cc:e1:c3:1a:42:4f:9e:28:bf:47: cb:ff:b6:81:65:fa:e6:73:db:85:d4:51:6c:5c:cd: cd:cb:53:89:6d:e2:93:fe:96:2f:05:ca:1c:ef:ab: ee:b3:b9:bf:b6:a2:81:08:47:90:0d:1c:31:fd:b0: b2:54:de:a9:c1:d0:9b:d5:2d:d6:e2:1f:a3:bf:f9: a7:9b:02:1c:dd:aa:a2:a8:3b:e8:1c:56:c9:04:3f: b8:1c:3a:f8:d0:eb:02:f0:c1:36:43:50:a7:0f:b1: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.83.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59393 Signature Algorithm: sha256WithRSAEncryption 49:7e:8b:a3:20:e7:24:0b:68:2a:95:db:86:e8:36:e1:79:78: 96:60:24:ad:d9:61:ae:60:0a:b4:ae:bb:4d:23:34:d6:72:ee: 6c:de:61:fe:1d:1d:f2:90:e6:89:86:8a:23:6d:f7:67:da:66: c3:0b:13:d3:99:88:87:6c:ba:f8:a6:74:b1:9f:29:3e:f4:02: 53:35:f0:ef:0d:b3:e0:a5:20:f3:aa:d3:05:d9:90:a3:94:4c: 87:b8:76:05:0b:f1:4b:df:55:a2:8e:05:eb:4c:29:8f:29:26: cd:39:d8:57:71:db:e0:69:a5:2b:81:8d:d0:70:f0:3f:de:51: c9:6d:93:3f:2f:37:f4:19:8e:25:1f:f5:1c:b6:21:15:08:b3: 50:66:fd:e6:5d:0a:fe:64:d2:a2:fb:33:ca:d1:be:0f:11:07: 27:3b:3f:1f:d4:f2:2e:8c:15:7b:7a:4c:da:e8:81:d9:9d:fd: a7:f4:e0:71:cc:91:62:5e:ba:c3:2a:95:37:83:1d:90:1b:d1: 56:03:ac:fb:c5:5b:aa:00:e2:d0:9b:31:6c:68:26:cc:33:fa: 4b:da:81:29:0f:70:09:d5:8d:f8:43:96:38:c7:86:40:91:8f: 18:e0:a7:15:8b:8a:92:de:08:d3:cf:b7:8b:33:84:9e:0c:39: 79:0b:fa:62 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xwxzgmQD87x9Za0jGdfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDM5OGY3ZjNkNWIzYjgyZGNmZGVjOTAyYjAzZjczM2Q4OTVkYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmxh1aW1roYHeP3T+K4qGrJQlt3 /F1FbE0DLT/JYXdZjA+qImfL2LcJUl452xfmLyUVECvca2mgiXtNHuOXdjg9Ze8o gAMBG9Crc2Ueyxe6M0qtD3hZ60ZjHYW0o8IqgOffQA9K0xEOW5zD22SFs+O/UVLS cMFJjiuiVgAn6qi+cXciRF89v5evotZMB+JXORGCYxCIF7LyPszhwxpCT54ov0fL /7aBZfrmc9uF1FFsXM3Ny1OJbeKT/pYvBcoc76vus7m/tqKBCEeQDRwx/bCyVN6p wdCb1S3W4h+jv/mnmwIc3aqiqDvoHFbJBD+4HDr40OsC8ME2Q1CnD7ENnwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM05j389WzuC3P3skCsD9zPYldrnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzE4ZDk1 NS1lOTkyLTRmYTAtYmJhMC1hYzU4YjI4N2ZiNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMThkOTU1 LWU5OTItNGZhMC1iYmEwLWFjNThiMjg3ZmI2NC8xL3pUbVBmejFiTzRMY19leVFL d1AzTTlpVjJ1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+tTMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDoATANBgkqhkiG9w0BAQsFAAOCAQEASX6LoyDnJAtoKpXbhug24Xl4lmAkrdlh rmAKtK67TSM01nLubN5h/h0d8pDmiYaKI233Z9pmwwsT05mIh2y6+KZ0sZ8pPvQC UzXw7w2z4KUg86rTBdmQo5RMh7h2BQvxS99Voo4F60wpjykmzTnYV3Hb4GmlK4GN 0HDwP95RyW2TPy839BmOJR/1HLYhFQizUGb95l0K/mTSovszytG+DxEHJzs/H9Ty LowVe3pM2uiB2Z39p/TgccyRYl66wyqVN4MdkBvRVgOs+8VbqgDi0JsxbGgmzDP6 S9qBKQ9wCdWN+EOWOMeGQJGPGOCnFYuKkt4I08+3izOEngw5eQv6Yg== -----END CERTIFICATE-----Generated at Wed Feb 4 10:55:51 2026 by rpki-client