This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer (raw, json) Hash identifier: m8rRYPIPY4U+fz28SBVB0OW1JkNxCb3dhYm8UG/Ckkw= Subject key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34E2CD14098095CD03291CA3B1137 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207123 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4e:2c:d1:40:98:09:5c:d0:32:91:ca:3b:11:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7192f3560c15b94d1ef497726845d786786bc762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:c8:a8:5d:58:74:2d:52:39:0e:01:80:10: bc:4c:fe:78:54:2a:9f:ea:9a:16:39:1c:7b:af:70: 03:67:d1:7d:4c:40:44:e0:37:aa:9f:03:86:b7:08: 89:cc:11:ac:9c:cc:e8:13:b8:16:2d:b7:cf:47:f9: 79:e9:f7:6b:7e:00:f8:d3:21:4d:8a:50:de:e1:6a: d1:62:64:98:f3:c6:2f:38:ce:99:01:ce:dc:04:a7: 91:a0:99:97:ad:a3:48:34:e7:9c:d4:c0:56:18:d6: 29:93:1b:46:d1:f4:ee:6f:e5:e0:3f:89:9b:ff:ae: 02:5c:97:e6:97:84:4f:b2:b9:7a:22:d4:c1:e8:b5: b2:d5:8f:1b:41:64:de:57:a2:14:65:d3:6a:a7:3b: ea:3c:f3:3e:17:bd:fd:f1:9b:12:b4:38:51:72:42: 43:bb:72:1f:9f:61:f4:d0:a3:33:4f:bf:aa:8f:7b: 00:32:21:4a:95:c6:8f:52:1a:05:89:db:9a:0d:76: 0d:5f:8f:ad:5b:dd:ba:db:1e:8d:87:f1:1e:7c:22: 61:e0:f9:eb:8e:79:ad:ae:37:76:1c:96:07:66:2c: 0e:e6:3b:42:84:3e:19:e7:fa:88:9b:4f:4d:db:e8: 28:cc:33:1a:31:a5:a4:07:24:9a:b4:5f:92:56:de: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207123 Signature Algorithm: sha256WithRSAEncryption 09:b7:17:8c:9c:9b:26:06:41:50:4e:39:05:20:29:3b:10:81: d1:dd:0c:ee:b4:ef:37:e9:43:ca:83:95:5b:b5:2d:17:45:6c: 28:81:46:91:83:fa:b5:0c:3d:78:b6:14:02:7e:f4:38:87:b9: ed:a1:6f:f4:56:c9:18:ae:c8:89:46:0c:14:5c:75:4f:ee:7b: 07:2b:04:8b:44:2b:f5:a1:fc:d4:40:06:b9:60:22:35:5b:ea: 26:e6:e2:29:39:ac:36:ef:55:93:1d:ae:31:71:9e:05:e3:b0: 2e:aa:14:a7:3e:1b:b5:5c:d4:0b:c9:0c:0f:6b:bd:93:1c:89: 09:98:27:32:70:af:ea:da:c1:a6:64:93:5b:5e:d0:41:34:b2: e4:b2:8a:b6:ae:ff:4e:77:e4:c3:2e:86:51:3a:66:c7:de:34: ac:81:da:8a:4a:44:bd:9a:2f:1a:21:8e:1c:f0:e0:45:65:94: 9d:a9:e7:91:bc:ad:33:bb:79:5c:9a:b0:c3:a9:bd:f2:05:4f: 93:c4:fc:79:61:a0:31:36:ad:cc:0b:74:69:06:fb:71:72:96: 7d:1d:9b:3d:af:54:20:06:5a:c5:00:e6:72:1d:61:c3:83:9b: 00:91:37:0d:30:d1:74:22:83:e5:26:9e:a5:b2:24:d9:c5:d5: 83:db:ed:76 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o04s0UCYCVzQMpHKOxE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTkyZjM1NjBjMTViOTRkMWVmNDk3NzI2ODQ1ZDc4Njc4NmJjNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7/IqF1YdC1SOQ4BgBC8TP54VCqf 6poWORx7r3ADZ9F9TEBE4DeqnwOGtwiJzBGsnMzoE7gWLbfPR/l56fdrfgD40yFN ilDe4WrRYmSY88YvOM6ZAc7cBKeRoJmXraNINOec1MBWGNYpkxtG0fTub+XgP4mb /64CXJfml4RPsrl6ItTB6LWy1Y8bQWTeV6IUZdNqpzvqPPM+F7398ZsStDhRckJD u3Ifn2H00KMzT7+qj3sAMiFKlcaPUhoFiduaDXYNX4+tW9262x6Nh/EefCJh4Pnr jnmtrjd2HJYHZiwO5jtChD4Z5/qIm09N2+gozDMaMaWkBySatF+SVt7xNwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHGS81YMFblNHvSXcmhF14Z4a8diMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzY5YTAz NC1iNTA4LTQyZTgtOTllOC03NWVlMjRhM2Y5NmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNjlhMDM0 LWI1MDgtNDJlOC05OWU4LTc1ZWUyNGEzZjk2Yi8xL2NaTHpWZ3dWdVUwZTlKZHlh RVhYaG5ocngySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpEzANBgkqhkiG9w0BAQsFAAOCAQEACbcXjJybJgZB UE45BSApOxCB0d0M7rTvN+lDyoOVW7UtF0VsKIFGkYP6tQw9eLYUAn70OIe57aFv 9FbJGK7IiUYMFFx1T+57BysEi0Qr9aH81EAGuWAiNVvqJubiKTmsNu9Vkx2uMXGe BeOwLqoUpz4btVzUC8kMD2u9kxyJCZgnMnCv6trBpmSTW17QQTSy5LKKtq7/Tnfk wy6GUTpmx940rIHaikpEvZovGiGOHPDgRWWUnannkbytM7t5XJqww6m98gVPk8T8 eWGgMTatzAt0aQb7cXKWfR2bPa9UIAZaxQDmch1hw4ObAJE3DTDRdCKD5SaepbIk 2cXVg9vtdg== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:29 2026 by rpki-client