This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer (raw, json) Hash identifier: RMln3I61bXIvRtC8hTcRwSQklwBv6R0W33/Q69F5RWw= Subject key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13B36CDB7F7AB525CCF768947F3C9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205430 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b3:6c:db:7f:7a:b5:25:cc:f7:68:94:7f:3c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:32:f3:e3:bc:19:81:ae:63:53:78:28:8f: 7a:cd:0e:c9:af:ce:79:bb:95:c3:4d:0a:a6:85:13: ee:e2:f6:96:9f:82:ed:11:56:93:33:8c:56:e6:88: 56:04:84:18:0f:68:05:74:57:cc:d9:8e:89:50:60: 2d:45:c1:51:8b:6d:2a:ec:1f:6c:63:99:eb:03:b5: 0e:80:62:3a:dc:20:ed:04:c9:30:6e:55:42:74:33: c9:0c:30:d0:a1:5b:ed:0a:7c:7a:e0:cf:df:8d:c2: be:62:99:dd:71:1d:68:c8:3e:22:c1:e6:d6:70:0c: 1b:d3:b8:65:32:ff:6f:7c:9c:cc:79:01:4d:df:ee: c7:24:92:64:fe:1e:2e:a2:ad:fa:dc:4b:c5:94:e8: ad:f1:7b:d1:e9:f4:b9:a3:34:e1:3a:21:40:8b:f7: b4:54:8a:80:e1:c6:3e:91:36:bd:73:61:2b:af:d7: 43:d1:d2:4a:7c:0b:23:5b:08:44:c3:a7:7b:75:5e: 12:20:f8:ec:e0:4d:e7:e7:33:fe:40:ed:be:79:de: e8:df:11:1f:77:92:1e:82:a8:cb:a2:ea:86:5c:27: 85:d8:58:02:20:9c:d9:04:c6:03:3e:11:86:4f:e5: 7b:19:fe:13:75:ff:72:d8:c5:9f:6b:a9:7e:a2:e0: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205430 Signature Algorithm: sha256WithRSAEncryption 57:ba:08:f1:39:2f:67:30:3e:9e:58:5a:44:cc:bf:38:f3:b9: 5b:0e:f6:09:41:3c:5a:39:b9:5a:b9:31:93:02:69:00:90:28: cf:ac:0e:a1:d1:6a:68:59:65:09:b1:7a:e1:0d:f4:99:44:78: e8:cb:a9:5f:92:46:fc:f1:d5:aa:0a:75:56:ba:4d:dd:80:bb: e4:01:a6:bd:7a:fa:60:f7:9c:dd:8f:93:ef:b6:89:77:e8:77: 7d:11:dc:1c:62:52:52:bf:39:e4:ec:7a:cc:e2:3f:76:26:e3: 90:69:6a:eb:99:79:5d:65:70:6b:ee:6f:78:d1:36:01:66:cf: f7:65:2c:19:77:ca:82:4c:33:31:13:b2:50:4e:d7:02:85:f7: 9d:a8:30:74:53:ba:7f:05:ff:1d:e4:85:c6:4b:4c:f6:7f:30: 7e:3b:e7:75:a5:23:32:4e:3f:1d:95:6f:7e:a4:d7:87:27:23: 2b:f6:48:4a:5c:22:d3:50:e3:4f:d5:ad:61:ab:ab:81:c5:07: 93:31:ee:49:dd:76:7d:c7:5a:6a:73:1e:de:f5:f6:af:e4:13: e5:13:72:0a:c4:02:1a:94:6b:93:3e:31:da:50:6d:ff:02:46: d3:74:c6:37:73:3b:22:d8:28:16:53:21:47:39:fe:27:2b:5e: 64:62:7e:1c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/E7Ns2396tSXM92iUfzyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWQxYjkzYWMzZGE2NGViMzc2ODVkN2VhYTE5YWFiNzRjMjM3ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx30y8+O8GYGuY1N4KI96zQ7Jr855 u5XDTQqmhRPu4vaWn4LtEVaTM4xW5ohWBIQYD2gFdFfM2Y6JUGAtRcFRi20q7B9s Y5nrA7UOgGI63CDtBMkwblVCdDPJDDDQoVvtCnx64M/fjcK+YpndcR1oyD4iwebW cAwb07hlMv9vfJzMeQFN3+7HJJJk/h4uoq363EvFlOit8XvR6fS5ozThOiFAi/e0 VIqA4cY+kTa9c2Err9dD0dJKfAsjWwhEw6d7dV4SIPjs4E3n5zP+QO2+ed7o3xEf d5IegqjLouqGXCeF2FgCIJzZBMYDPhGGT+V7Gf4Tdf9y2MWfa6l+ouAyCQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFM7RuTrD2mTrN2hdfqoZqrdMI383MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2NlZjM5 OC1kN2EyLTQzOWEtOTc4MS04MTZjYjg1M2FlZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvY2VmMzk4 LWQ3YTItNDM5YS05NzgxLTgxNmNiODUzYWVkZC8xL3p0RzVPc1BhWk9zM2FGMS1x aG1xdDB3amZ6Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMidjANBgkqhkiG9w0BAQsFAAOCAQEAV7oI8TkvZzA+ nlhaRMy/OPO5Ww72CUE8Wjm5WrkxkwJpAJAoz6wOodFqaFllCbF64Q30mUR46Mup X5JG/PHVqgp1VrpN3YC75AGmvXr6YPec3Y+T77aJd+h3fRHcHGJSUr855Ox6zOI/ dibjkGlq65l5XWVwa+5veNE2AWbP92UsGXfKgkwzMROyUE7XAoX3nagwdFO6fwX/ HeSFxktM9n8wfjvndaUjMk4/HZVvfqTXhycjK/ZISlwi01DjT9WtYaurgcUHkzHu Sd12fcdaanMe3vX2r+QT5RNyCsQCGpRrkz4x2lBt/wJG03TGN3M7ItgoFlMhRzn+ JyteZGJ+HA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:28 2026 by rpki-client