This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer (raw, json) Hash identifier: QMGP3yaU4u2RX+xI06Fo6x0OMSficebdDtWnyXNh8WM= Subject key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3748FC1637DF71FCFE71518B31BA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.212.90.0/23 IP: 178.212.94.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:74:8f:c1:63:7d:f7:1f:cf:e7:15:18:b3:1b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:bf:7f:08:3e:73:de:a2:db:9d:3a:af:ce: ff:b2:ab:81:64:af:79:fb:6a:c6:de:f7:a0:e4:e9: 28:ad:ac:02:92:2e:a4:d0:4f:06:5e:b2:24:39:ad: c5:0e:b9:aa:d4:9b:ee:a5:86:1d:46:f2:6f:b4:a7: 0d:5d:87:9a:dc:ca:9c:42:3a:fb:1b:ac:87:5e:f8: 99:28:ac:73:51:4f:83:b1:d4:40:a1:ea:69:ed:ef: c2:29:e0:db:2e:a6:df:59:e2:60:be:8d:c3:57:47: 99:36:35:2c:d2:1c:58:3c:4f:b1:5f:dd:30:01:83: 74:6a:9a:36:34:75:b8:5e:be:e8:25:f9:d3:f3:b1: 26:95:da:ee:44:2d:da:1e:37:ed:0f:41:51:7e:07: c3:ca:fd:5b:6a:1a:05:4c:c2:ac:c2:98:97:aa:52: af:7c:f0:b6:10:cb:8f:7d:92:b6:e2:c2:37:9a:dc: 4e:f7:93:7d:e5:d3:ff:42:5d:81:2d:04:bf:44:7e: e7:c1:15:32:46:2c:da:f1:0c:48:c9:51:14:4f:d4: 6d:4c:5d:90:37:9a:71:95:53:f3:22:c1:1f:55:9a: 63:f6:28:4b:3a:a1:64:0e:f9:96:46:cd:c7:1f:91: 8f:47:14:d2:be:83:ae:76:81:c2:2d:e0:91:68:ca: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.90.0/23 178.212.94.0/23 Signature Algorithm: sha256WithRSAEncryption 93:4c:ad:a3:f5:a8:24:69:3a:ac:7c:19:f3:35:7a:be:66:0b: 31:41:81:98:a8:1f:d7:4f:4f:40:1b:8e:8a:49:aa:3c:8e:80: fe:99:d6:a4:ab:59:d8:ad:9c:5a:32:b7:38:a1:74:ef:da:8a: 6f:0a:55:14:cd:30:f3:33:47:24:3d:33:4e:d7:6c:37:1e:21: e8:ec:e4:ff:3f:c4:8d:53:97:0d:ca:e3:88:7e:ae:5d:10:84: 93:8e:33:c4:88:89:18:4f:6a:a9:10:93:ab:bd:dc:5d:42:c7: 9d:0f:fc:8f:99:2f:ff:db:c5:7c:19:c7:b2:30:15:90:ca:27: c2:c4:ec:32:c9:30:c7:ae:47:6b:47:1f:a0:ef:58:e0:6e:09: 8c:d2:9e:2b:53:d8:8a:6d:6a:30:ce:8f:d7:8a:bd:22:64:22: a8:7f:d9:f1:0a:2f:76:81:6e:50:f1:4d:ec:78:26:4c:3c:6e: 68:f4:75:9b:0f:b8:dc:70:99:d4:86:c2:ac:55:25:45:7f:7a: 51:e9:63:8d:d9:b8:91:c8:97:35:31:d1:00:1a:98:3c:cc:bd: ca:c2:d4:8a:2e:e4:14:a9:08:a5:a3:01:12:7e:62:8b:6f:45: 40:a7:7a:41:fe:69:75:d2:1b:c5:0d:12:64:73:5b:8c:fd:09: f3:21:90:62 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt4o3SPwWN99x/P5xUYsxumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTlkYTRhODYzOGRiZGQ2ZmE0M2MyN2QzYWM2ZWM4ZDlhY2M4NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiy/fwg+c96i2506r87/squBZK95 +2rG3veg5OkorawCki6k0E8GXrIkOa3FDrmq1JvupYYdRvJvtKcNXYea3MqcQjr7 G6yHXviZKKxzUU+DsdRAoepp7e/CKeDbLqbfWeJgvo3DV0eZNjUs0hxYPE+xX90w AYN0apo2NHW4Xr7oJfnT87EmldruRC3aHjftD0FRfgfDyv1bahoFTMKswpiXqlKv fPC2EMuPfZK24sI3mtxO95N95dP/Ql2BLQS/RH7nwRUyRiza8QxIyVEUT9RtTF2Q N5pxlVPzIsEfVZpj9ihLOqFkDvmWRs3HH5GPRxTSvoOudoHCLeCRaMpmWwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKWdpKhjjb3W+kPCfTrG7I2azIeKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2FlNjc1 MS0xNzhkLTQxZTEtYWVjMi0wZjY4ZTViZmZjN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvYWU2NzUx LTE3OGQtNDFlMS1hZWMyLTBmNjhlNWJmZmM3ZC8xL3BaMmtxR09OdmRiNlE4SjlP c2JzalpyTWg0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBstRaAwQBstReMA0GCSqGSIb3DQEBCwUAA4IB AQCTTK2j9agkaTqsfBnzNXq+ZgsxQYGYqB/XT09AG46KSao8joD+mdakq1nYrZxa Mrc4oXTv2opvClUUzTDzM0ckPTNO12w3HiHo7OT/P8SNU5cNyuOIfq5dEISTjjPE iIkYT2qpEJOrvdxdQsedD/yPmS//28V8GceyMBWQyifCxOwyyTDHrkdrRx+g71jg bgmM0p4rU9iKbWowzo/Xir0iZCKof9nxCi92gW5Q8U3seCZMPG5o9HWbD7jccJnU hsKsVSVFf3pR6WON2biRyJc1MdEAGpg8zL3KwtSKLuQUqQilowESfmKLb0VAp3pB /ml10hvFDRJkc1uM/QnzIZBi -----END CERTIFICATE-----Generated at Fri Jan 9 16:24:29 2026 by rpki-client