This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer File: fz4IdInuI6lCTVP6whbuS44BKA4.cer (raw, json) Hash identifier: 8L8/6zGuFU5MVfenAW6pnZVQKs+rzfmFdg/pfhA+zWk= Subject key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A230EF6F25BA65975142637E1D6515 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.5.58.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:30:ef:6f:25:ba:65:97:51:42:63:7e:1d:65:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3b:f6:b3:f0:a2:1d:ed:71:d8:f1:aa:d4:31: 90:4f:4e:b2:a2:dd:7b:ee:21:66:28:48:cd:f5:55: 99:75:1c:36:73:b6:f0:91:74:a6:f8:3f:e8:4d:46: 5b:f6:ce:7e:9e:6e:99:b4:0c:44:a1:bc:1b:b4:6b: 8d:60:26:32:fc:45:77:04:74:ca:84:7b:58:6b:3f: 19:96:e5:53:b4:88:f2:36:d2:9d:f5:e2:e1:b2:56: b2:4a:c3:51:f6:64:56:53:7f:08:87:19:1e:4f:85: c6:fd:42:57:42:78:63:2d:23:6f:83:44:f3:0a:3c: 6b:66:d3:a5:2d:c6:17:d6:37:ed:22:c1:db:73:68: 6c:60:42:d1:03:5d:fc:6f:70:40:5e:77:3c:dd:6e: 5c:73:74:a7:6b:65:3e:b4:e8:df:30:ce:ca:6b:47: 05:35:e4:e3:d1:c2:cb:21:49:ef:bc:21:8c:3e:67: 48:ac:ca:c4:99:30:db:5f:b5:34:af:08:06:b0:bb: 5b:31:03:bc:c5:b7:bf:1d:86:37:2f:26:4c:b3:2c: 7c:98:9e:13:55:3e:ff:65:1f:16:3a:86:4f:64:94: 53:00:1e:cf:2a:b4:8c:74:01:d4:0f:0b:f5:34:03: fd:c7:6a:ed:e4:0d:8e:cd:ca:5f:36:56:5b:d0:a6: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.58.0/24 Signature Algorithm: sha256WithRSAEncryption 41:58:9e:5b:06:c9:ba:13:88:7d:54:85:c0:52:66:0b:4b:c9: 4a:f8:2d:1d:9b:6a:05:da:92:b9:a4:98:c5:bf:2b:67:74:c3: e5:41:73:2f:e9:61:e9:71:ff:b5:3d:80:ba:e0:7c:91:5a:a9: de:a7:b3:e7:5e:1a:ce:72:d6:22:82:2b:6b:2e:28:41:7f:c3: 86:b8:61:66:69:19:fd:fd:21:66:e7:06:75:84:8f:d4:79:21: 2c:5a:c7:55:80:e4:bf:9b:5f:0d:b1:13:07:36:da:c5:9a:3d: 1b:68:4a:7a:d6:0d:2b:b4:96:f9:f3:f6:65:f8:9f:8f:34:63: 02:a8:90:9e:69:57:ef:33:fe:71:9b:de:ff:cd:7e:16:ea:57: f5:85:65:4b:a0:05:64:ed:91:5c:f2:b3:ca:42:dd:75:92:eb: ad:6b:3b:90:1b:55:43:e1:a4:05:dd:0b:f2:e2:4e:2e:e6:c8: 11:cf:f2:d1:c6:15:a1:5e:8f:35:22:14:6d:8c:12:08:0f:62: 1a:6b:cd:a2:8c:e5:c2:89:6b:b5:fd:95:39:bf:62:cd:01:65: 1d:57:9f:85:31:00:bf:ac:41:a6:ab:ed:5f:a2:6d:f5:a2:54: a6:03:a0:2c:06:2e:43:ab:d0:c8:21:94:f2:d4:57:27:30:b1: ed:27:a7:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4ojDvbyW6ZZdRQmN+HWUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjNlMDg3NDg5ZWUyM2E5NDI0ZDUzZmFjMjE2ZWU0YjhlMDEyODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jv2s/CiHe1x2PGq1DGQT06yot17 7iFmKEjN9VWZdRw2c7bwkXSm+D/oTUZb9s5+nm6ZtAxEobwbtGuNYCYy/EV3BHTK hHtYaz8ZluVTtIjyNtKd9eLhslaySsNR9mRWU38IhxkeT4XG/UJXQnhjLSNvg0Tz CjxrZtOlLcYX1jftIsHbc2hsYELRA138b3BAXnc83W5cc3Sna2U+tOjfMM7Ka0cF NeTj0cLLIUnvvCGMPmdIrMrEmTDbX7U0rwgGsLtbMQO8xbe/HYY3LyZMsyx8mJ4T VT7/ZR8WOoZPZJRTAB7PKrSMdAHUDwv1NAP9x2rt5A2OzcpfNlZb0KbE6wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFH8+CHSJ7iOpQk1T+sIW7kuOASgOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2MyYzk5 ZC1jZjkxLTRkZmItOTRkZS1hN2M2M2Q1NjJlNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYzJjOTlk LWNmOTEtNGRmYi05NGRlLWE3YzYzZDU2MmU1Ni8xL2Z6NElkSW51STZsQ1RWUDZ3 aGJ1UzQ0QktBNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQU6MA0GCSqGSIb3DQEBCwUAA4IBAQBBWJ5b Bsm6E4h9VIXAUmYLS8lK+C0dm2oF2pK5pJjFvytndMPlQXMv6WHpcf+1PYC64HyR Wqnep7PnXhrOctYigitrLihBf8OGuGFmaRn9/SFm5wZ1hI/UeSEsWsdVgOS/m18N sRMHNtrFmj0baEp61g0rtJb58/Zl+J+PNGMCqJCeaVfvM/5xm97/zX4W6lf1hWVL oAVk7ZFc8rPKQt11kuutazuQG1VD4aQF3Qvy4k4u5sgRz/LRxhWhXo81IhRtjBII D2Iaa82ijOXCiWu1/ZU5v2LNAWUdV5+FMQC/rEGmq+1fom31olSmA6AsBi5Dq9DI IZTy1FcnMLHtJ6dF -----END CERTIFICATE-----Generated at Sun Jan 11 14:38:39 2026 by rpki-client