This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer File: Z9zZJr83DT-gGDoTi1ewmDzaygo.cer (raw, json) Hash identifier: 72/5Ug6WYM2mmv0J8yNbFXjGRLXEOOku8okphSBAWNc= Subject key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB894FD80ED702317AC61B6304B054 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42750 IP: 185.195.72.0/22 IP: 2a0a:5540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:4f:d8:0e:d7:02:31:7a:c6:1b:63:04:b0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:3b:92:23:9d:ac:fe:3c:09:bc:89:ba:4f: 99:d3:13:f8:c9:ad:db:19:81:41:fb:54:7d:36:a5: c4:a8:1b:38:4f:d5:dd:6a:ad:60:2b:34:e2:38:e1: 08:53:63:ec:b3:1d:f6:3a:96:86:10:45:18:2a:c8: 42:21:58:a1:dd:02:cd:55:d4:99:14:7b:f9:49:4a: a1:36:f6:eb:32:96:4f:7c:2a:fe:11:13:8c:d2:31: ea:d1:52:16:79:15:5b:91:83:71:46:4b:02:b5:a4: 20:36:cb:3e:d6:fe:50:de:c3:76:ac:5b:e8:da:c1: 1c:a6:9a:4a:3c:b5:74:15:c4:83:63:37:5f:44:ca: 00:2b:ad:fc:03:09:04:43:f4:8b:b1:97:cd:28:f4: 72:eb:5f:8c:1c:64:52:79:e0:ba:e6:85:45:9a:7e: f9:0e:43:86:98:6f:98:92:88:6e:f3:e7:09:48:58: 6f:cd:52:fe:63:13:e4:af:a1:8e:c3:31:65:e3:95: 38:45:b9:cc:63:0f:b0:53:fa:25:ec:9f:cb:e6:f3: b7:9d:45:6d:82:0a:30:a5:8f:c2:17:60:ee:a6:8a: 0a:74:d7:78:a1:bc:d7:41:9f:c2:52:ff:d6:89:2a: d6:02:62:76:6d:9a:d0:bd:b3:b2:f0:1a:fb:1f:af: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.72.0/22 IPv6: 2a0a:5540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42750 Signature Algorithm: sha256WithRSAEncryption 18:e5:02:a2:7c:2b:7d:be:d0:f3:68:ca:09:32:27:b3:07:3d: 2f:b0:84:1b:df:d5:8c:3f:e0:2a:5d:aa:26:b8:3c:0b:8b:5d: c3:31:e6:9f:d5:0d:10:be:e1:7e:7f:3d:25:29:f2:f0:17:a6: 02:59:2c:89:17:db:d8:a2:3e:c8:93:7a:0c:b5:e0:d0:f0:7e: cd:cd:16:24:c1:5e:13:b8:99:fd:95:39:fb:34:40:04:82:99: 9c:0e:ba:88:e0:fc:98:61:42:50:b6:b8:b7:a2:af:55:32:2d: e3:bc:be:1d:e4:cc:35:49:3e:73:22:cd:a0:68:9b:98:7a:33: a0:59:57:18:f3:54:d9:15:fe:b5:e5:57:7c:eb:9b:52:8f:2d: 4c:73:b7:55:fd:c8:1a:fd:bf:c7:c3:9a:56:2c:d1:f9:73:72: 87:b3:51:9a:5e:2c:95:61:94:39:ea:5a:76:24:cc:3b:9f:38: 90:11:57:3b:31:14:23:9e:10:fe:db:13:54:f5:be:01:f9:08: a8:98:3b:1c:6b:3b:c2:10:22:68:b0:0c:b8:92:a1:31:8e:e4: 5b:5e:f8:23:4b:c1:47:fa:8f:24:15:64:a5:ea:00:8b:fb:a8: c0:dd:66:bc:ba:fb:17:73:53:21:49:ac:2c:9f:6a:1b:f7:5e: 4d:d6:b2:e3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt264lP2A7XAjF6xhtjBLBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RjZDkyNmJmMzcwZDNmYTAxODNhMTM4YjU3YjA5ODNjZGFjYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsc7kiOdrP48CbyJuk+Z0xP4ya3b GYFB+1R9NqXEqBs4T9Xdaq1gKzTiOOEIU2Pssx32OpaGEEUYKshCIVih3QLNVdSZ FHv5SUqhNvbrMpZPfCr+EROM0jHq0VIWeRVbkYNxRksCtaQgNss+1v5Q3sN2rFvo 2sEcpppKPLV0FcSDYzdfRMoAK638AwkEQ/SLsZfNKPRy61+MHGRSeeC65oVFmn75 DkOGmG+Ykohu8+cJSFhvzVL+YxPkr6GOwzFl45U4RbnMYw+wU/ol7J/L5vO3nUVt ggowpY/CF2DupooKdNd4obzXQZ/CUv/WiSrWAmJ2bZrQvbOy8Br7H6/oxQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGfc2Sa/Nw0/oBg6E4tXsJg82soKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2UxYzgw ZC1hNjNiLTQ4MWMtYTlmMi05ZjViMmViNDkyYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTFjODBk LWE2M2ItNDgxYy1hOWYyLTlmNWIyZWI0OTJhMC8xL1o5elpKcjgzRFQtZ0dEb1Rp MWV3bUR6YXlnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucNIMA0EAgACMAcDBQMqClVAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCm/jANBgkqhkiG9w0BAQsFAAOCAQEAGOUConwrfb7Q 82jKCTInswc9L7CEG9/VjD/gKl2qJrg8C4tdwzHmn9UNEL7hfn89JSny8BemAlks iRfb2KI+yJN6DLXg0PB+zc0WJMFeE7iZ/ZU5+zRABIKZnA66iOD8mGFCULa4t6Kv VTIt47y+HeTMNUk+cyLNoGibmHozoFlXGPNU2RX+teVXfOubUo8tTHO3Vf3IGv2/ x8OaVizR+XNyh7NRml4slWGUOepadiTMO584kBFXOzEUI54Q/tsTVPW+AfkIqJg7 HGs7whAiaLAMuJKhMY7kW174I0vBR/qPJBVkpeoAi/uowN1mvLr7F3NTIUmsLJ9q G/deTday4w== -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:17 2026 by rpki-client