This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer File: znQefeZX5KEPk8qSxReoGywLJR4.cer (raw, json) Hash identifier: 1d1oB/zAGndNwO4PpRX1dLmbE8gLgvNrIVP/ZCFj9ZI= Subject key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BA33A26468A9904FD119A99166754 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.9.53.0/24 IP: 185.203.88.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a3:3a:26:46:8a:99:04:fd:11:9a:99:16:67:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:c3:45:33:17:df:71:27:87:15:6e:ee:9d: 42:9a:5f:e1:1c:6a:bf:6b:c0:02:b4:b4:dc:71:54: 2e:06:52:d1:37:7e:6e:eb:01:1f:a0:72:f6:d3:5a: f5:f6:28:e1:82:e1:46:3b:a7:f4:6f:80:8e:82:0b: c1:ab:fb:d7:b5:51:0e:e1:4a:7b:1c:7e:5e:8e:d2: 38:e0:06:a4:45:11:e0:0a:f3:6e:f3:2f:b0:47:16: 92:84:25:aa:ea:8c:c5:f2:4a:74:8a:1c:01:6f:9d: 38:ce:79:b3:58:fe:51:2a:24:4d:d0:d6:e3:64:00: 41:7d:23:ba:4a:aa:38:87:a1:31:82:a1:8d:57:2b: 86:4c:64:d2:d0:b3:3b:61:05:3f:df:3a:34:5d:71: bb:93:15:0b:d2:48:96:26:4c:62:02:c6:f0:4d:46: 7c:59:57:3a:04:11:58:ef:ed:33:4a:3e:63:b4:58: c4:a6:46:63:1f:e9:c1:e9:2d:3f:6d:47:22:58:c3: f1:eb:48:ad:49:b1:7d:55:65:8f:8f:da:c2:92:5e: 95:46:eb:b3:79:3c:1c:48:17:3b:d1:ef:c1:c4:fb: f3:a1:1f:78:1f:bb:cb:23:a3:ba:ed:cb:55:97:e6: 42:57:21:5c:26:e2:d1:3d:a4:30:ef:14:bb:48:79: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.53.0/24 185.203.88.0/24 Signature Algorithm: sha256WithRSAEncryption 07:99:fb:3e:28:ee:d8:08:9d:3a:96:98:d5:23:8b:7b:af:10: 3b:0d:89:4f:0c:ee:b8:96:05:43:ba:61:6a:60:68:af:b8:3a: b6:d4:67:62:b1:2f:22:bf:af:7b:b7:b5:9c:82:91:8f:d2:ed: 35:70:9e:9d:f9:de:65:fb:ca:e0:55:eb:48:35:e6:51:b1:05: 48:b2:95:73:a1:58:d6:3c:50:b3:61:47:10:c0:81:a2:5a:bc: ed:36:7e:20:c3:2c:e7:79:7f:d5:1d:da:0f:1d:45:8e:88:a3: d3:10:67:b8:f4:ba:76:3a:e1:2d:6f:35:9a:fd:31:b6:85:41: 08:35:6f:b5:c7:fb:8e:05:d6:82:67:3b:d0:f9:2a:b6:6f:ca: ec:7d:90:1c:6f:d2:ae:fb:67:f1:c0:78:f8:73:19:65:24:12: ff:9c:36:d6:36:e5:aa:32:fe:2f:90:3e:78:a2:13:93:fe:be: 7c:72:2b:bc:0a:31:a6:ba:79:9a:fc:79:82:6d:22:06:69:07: 0a:52:87:45:84:2c:f3:f6:cc:1b:d9:46:96:41:fb:98:0e:ff: 2d:68:69:53:a1:42:d2:c0:c6:7a:6a:55:69:67:8e:b1:81:a8: 3f:1b:ff:e9:32:5b:1e:56:68:06:e4:86:04:b2:86:1d:b2:e0: 28:ca:a9:bf -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt9W6M6JkaKmQT9EZqZFmdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTc0MWU3ZGU2NTdlNGExMGY5M2NhOTJjNTE3YTgxYjJjMGIyNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//DRTMX33EnhxVu7p1Cml/hHGq/ a8ACtLTccVQuBlLRN35u6wEfoHL201r19ijhguFGO6f0b4COggvBq/vXtVEO4Up7 HH5ejtI44AakRRHgCvNu8y+wRxaShCWq6ozF8kp0ihwBb504znmzWP5RKiRN0Nbj ZABBfSO6Sqo4h6ExgqGNVyuGTGTS0LM7YQU/3zo0XXG7kxUL0kiWJkxiAsbwTUZ8 WVc6BBFY7+0zSj5jtFjEpkZjH+nB6S0/bUciWMPx60itSbF9VWWPj9rCkl6VRuuz eTwcSBc70e/BxPvzoR94H7vLI6O67ctVl+ZCVyFcJuLRPaQw7xS7SHkGqwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFM50Hn3mV+ShD5PKksUXqBssCyUeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2M5YTlk MS1iMTNjLTQwM2QtYmQxYy1kMTJhMzcyZjUxNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvYzlhOWQx LWIxM2MtNDAzZC1iZDFjLWQxMmEzNzJmNTE3My8xL3puUWVmZVpYNUtFUGs4cVN4 UmVvR3l3TEpSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAuQk1AwQAuctYMA0GCSqGSIb3DQEBCwUAA4IB AQAHmfs+KO7YCJ06lpjVI4t7rxA7DYlPDO64lgVDumFqYGivuDq21GdisS8iv697 t7WcgpGP0u01cJ6d+d5l+8rgVetINeZRsQVIspVzoVjWPFCzYUcQwIGiWrztNn4g wyzneX/VHdoPHUWOiKPTEGe49Lp2OuEtbzWa/TG2hUEINW+1x/uOBdaCZzvQ+Sq2 b8rsfZAcb9Ku+2fxwHj4cxllJBL/nDbWNuWqMv4vkD54ohOT/r58ciu8CjGmunma /HmCbSIGaQcKUodFhCzz9swb2UaWQfuYDv8taGlToULSwMZ6alVpZ46xgag/G//p MlseVmgG5IYEsoYdsuAoyqm/ -----END CERTIFICATE-----Generated at Tue Jan 27 10:00:31 2026 by rpki-client