This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer (raw, json) Hash identifier: RuBXF5o73e/pAYWKcMdwFrGC38GhpuP8b3LD9Enz+wk= Subject key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5EA97E6A2D3D5143FA04CEDF68F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 134.206.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5e:a9:7e:6a:2d:3d:51:43:fa:04:ce:df:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:a5:00:1e:1a:73:46:77:21:48:c2:60:55: 17:52:ae:d9:d7:b6:5e:b6:4e:10:10:2a:db:45:cf: d6:44:38:b1:58:69:9c:ed:68:8c:fd:21:f9:71:8a: 4e:74:81:c9:2c:85:ee:f8:96:9b:9d:ee:27:e0:7a: c6:84:a2:06:63:f5:4e:b8:5b:05:64:83:81:09:19: 7f:92:1f:4b:7a:11:71:cc:8d:bf:52:4b:4d:36:03: 65:38:03:ed:01:62:50:1b:5f:95:37:59:f0:19:93: 3a:03:ad:40:a9:b2:8e:46:5a:74:eb:e6:b1:34:37: 14:dc:33:20:5a:96:b6:f1:3b:0f:5e:78:18:4c:08: b2:d2:66:17:c4:ae:a9:ed:d4:91:68:f4:5b:c4:a3: 63:cd:ba:d5:b5:c1:23:d4:b5:ab:b5:bb:2d:91:d3: 41:e3:ec:40:3f:f9:c3:5a:ab:bc:4c:b0:65:b1:e7: 61:66:2a:d4:18:7d:96:0a:4a:d1:56:52:0a:de:12: 0f:d2:73:17:ff:65:34:c0:c0:69:fc:29:f1:69:97: cb:e5:a4:5f:72:c6:3e:33:3c:65:3f:1b:ea:dd:03: f2:ac:5e:d2:2c:6d:45:be:c4:f2:5d:0d:ad:11:8c: 97:84:ee:aa:51:35:e5:4e:f7:c7:e7:09:f6:d0:f6: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.206.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:67:9d:9e:a2:01:39:95:e0:46:1f:47:ae:73:9e:b0:48:85: 4f:e7:95:1a:b4:65:e4:92:3c:ff:df:1e:04:45:07:95:b6:aa: ab:02:8a:5a:dc:e6:c4:7f:8e:a1:d4:48:ed:eb:99:c1:fa:45: 21:fa:61:28:e3:ed:a0:ba:a1:24:33:1c:7f:ae:0c:22:c3:31: cc:e3:0a:b1:2b:80:9f:d6:35:e8:d5:87:39:1d:03:3a:f7:7e: d1:77:ff:92:10:9a:e3:93:2f:ea:86:05:53:bf:d0:b5:a5:dd: 86:c9:07:c0:ed:ab:59:fa:a5:f2:8b:30:80:63:4a:99:84:1b: ae:d6:c9:7a:66:4a:7c:cc:54:2e:e1:25:46:56:0e:0d:e9:56: 86:4d:e5:be:89:c0:f8:14:bd:58:ec:cc:f0:f0:07:b7:75:68: 27:e2:24:9b:e3:fa:81:2b:6d:2f:06:c1:66:96:61:8b:55:10: dc:9d:9a:29:bc:54:41:19:3f:9e:99:b2:fe:4f:32:dd:ec:f8: 56:9c:bf:42:fe:ed:fa:38:f9:16:17:3c:02:41:5a:d9:60:48: ee:78:79:14:2c:31:65:fe:4b:04:1b:3d:9f:a2:af:14:c1:01: 0b:db:51:1a:42:7c:f4:59:05:42:4f:9b:50:0d:bb:7c:aa:e7: c4:3d:ed:b0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt6W16pfmotPVFD+gTO32jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjNmOWU3ZmZlODg1ODM4N2VkMWIzYTdlY2E3NjIwNWVmMGUyMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEKlAB4ac0Z3IUjCYFUXUq7Z17Ze tk4QECrbRc/WRDixWGmc7WiM/SH5cYpOdIHJLIXu+Jabne4n4HrGhKIGY/VOuFsF ZIOBCRl/kh9LehFxzI2/UktNNgNlOAPtAWJQG1+VN1nwGZM6A61AqbKORlp06+ax NDcU3DMgWpa28TsPXngYTAiy0mYXxK6p7dSRaPRbxKNjzbrVtcEj1LWrtbstkdNB 4+xAP/nDWqu8TLBlsedhZirUGH2WCkrRVlIK3hIP0nMX/2U0wMBp/CnxaZfL5aRf csY+MzxlPxvq3QPyrF7SLG1FvsTyXQ2tEYyXhO6qUTXlTvfH5wn20PZCTQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFI8/nn/+iFg4ftGzp+ynYgXvDiH2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzg0MjBl Ni04YzNlLTRjY2ItYjE0My1lN2FjZjk0MWYzNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvODQyMGU2 LThjM2UtNGNjYi1iMTQzLWU3YWNmOTQxZjM3NS8xL2p6LWVmXzZJV0RoLTBiT243 S2RpQmU4T0lmWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAhs4wDQYJKoZIhvcNAQELBQADggEBACpnnZ6i ATmV4EYfR65znrBIhU/nlRq0ZeSSPP/fHgRFB5W2qqsCilrc5sR/jqHUSO3rmcH6 RSH6YSjj7aC6oSQzHH+uDCLDMczjCrErgJ/WNejVhzkdAzr3ftF3/5IQmuOTL+qG BVO/0LWl3YbJB8Dtq1n6pfKLMIBjSpmEG67WyXpmSnzMVC7hJUZWDg3pVoZN5b6J wPgUvVjszPDwB7d1aCfiJJvj+oErbS8GwWaWYYtVENydmim8VEEZP56Zsv5PMt3s +Facv0L+7fo4+RYXPAJBWtlgSO54eRQsMWX+SwQbPZ+irxTBAQvbURpCfPRZBUJP m1ANu3yq58Q97bA= -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:08 2026 by rpki-client