This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer (raw, json) Hash identifier: FK7GrQes08BAB5TVyFJhXHhs8kkGxnYNafphn5sdjCo= Subject key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D06425ECE3655DA94DC546C54E5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44576 IP: 194.8.76.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d0:64:25:ec:e3:65:5d:a9:4d:c5:46:c5:4e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:66:19:59:2b:e4:61:6b:9b:ee:71:72:80:f9: 3d:3a:e1:9e:f4:14:d9:0c:1b:a3:9b:29:84:df:ee: 70:2b:57:73:05:00:64:14:c0:6f:1c:c0:80:77:f3: 16:df:4b:bb:dc:9a:cf:48:b9:27:c5:73:52:9c:3f: 04:a3:b4:c2:37:21:a4:d4:49:22:fa:6c:e4:2c:be: 8e:72:13:f1:3a:43:5c:3a:03:8f:f9:b1:bd:2f:23: 11:69:7a:65:43:60:ee:9a:cd:04:81:9d:e6:03:c0: 76:52:10:59:c4:f7:71:94:7b:44:e7:09:c8:dc:b4: aa:79:86:af:6c:fc:22:41:17:a5:1b:b2:7e:06:aa: 0b:34:23:8a:f7:eb:a3:9a:ff:51:08:a8:d8:fb:60: 52:5c:9d:2c:65:de:2b:cb:d8:f2:6d:4d:42:46:3e: b0:b6:62:9c:3a:de:06:e3:b1:e1:bc:d9:fd:98:cb: 2e:51:6f:03:10:62:71:38:97:5f:c0:2c:d2:02:5e: a2:e4:22:d5:e8:e8:c3:4e:57:8b:db:80:3c:e6:08: cd:09:7e:01:9c:5e:2d:55:42:51:e7:0e:a1:10:1d: 76:25:8c:00:88:2d:0e:ab:01:c9:c0:5d:65:cb:0b: f9:98:93:96:60:aa:d0:1a:47:47:82:84:fc:c5:28: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.76.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44576 Signature Algorithm: sha256WithRSAEncryption b1:d2:00:11:2b:0f:83:29:51:c0:86:5b:44:09:5b:6d:d6:f3: 19:be:19:3a:a7:6d:ed:b7:d7:34:e3:ed:9d:9d:84:a1:86:d9: 03:1d:b8:78:4f:82:d8:21:95:0e:95:5f:b3:09:2d:71:97:30: de:14:ec:bc:70:21:6a:f7:dc:a4:cd:10:22:34:28:0d:74:88: 3e:ae:f7:ca:7a:d7:25:7d:36:cf:a1:54:d3:09:6f:c3:0f:c2: 19:86:5e:06:af:3d:f1:d4:91:d8:59:3d:f8:53:1e:d4:2e:e3: 19:46:36:62:b8:7e:b1:fa:a1:59:19:6b:20:7b:2b:bc:39:5b: ef:88:56:d6:b9:ae:5d:84:7b:69:c9:2d:3a:e2:f1:99:ef:57: 05:6a:b9:f5:12:88:57:39:64:5e:dc:ba:82:84:d7:53:d3:ea: e6:a9:d8:20:f9:bb:df:2d:2e:03:28:7d:6a:56:8d:23:bd:8a: 01:0a:7a:d0:e8:2a:27:1e:1f:73:68:d0:e6:4e:0d:f8:c2:c3: 44:83:83:78:32:ca:ba:fc:fe:7f:d7:6b:aa:b2:04:82:50:98: 0f:d1:01:2e:f8:c1:64:d6:48:98:4e:2e:b6:3e:ac:b6:4b:07: ec:27:5c:79:ec:df:53:b7:35:80:a1:61:e2:82:79:3a:aa:f7: 84:c4:b6:42 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NdBkJezjZV2pTcVGxU5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzU1Zjc2Y2ZlOWRhZmIyZDk0MTkwMTQyYmM4YWFiMGQzMjgwNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WYZWSvkYWub7nFygPk9OuGe9BTZ DBujmymE3+5wK1dzBQBkFMBvHMCAd/MW30u73JrPSLknxXNSnD8Eo7TCNyGk1Eki +mzkLL6OchPxOkNcOgOP+bG9LyMRaXplQ2Dums0EgZ3mA8B2UhBZxPdxlHtE5wnI 3LSqeYavbPwiQRelG7J+BqoLNCOK9+ujmv9RCKjY+2BSXJ0sZd4ry9jybU1CRj6w tmKcOt4G47HhvNn9mMsuUW8DEGJxOJdfwCzSAl6i5CLV6OjDTleL24A85gjNCX4B nF4tVUJR5w6hEB12JYwAiC0OqwHJwF1lywv5mJOWYKrQGkdHgoT8xSjpswIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMxV92z+na+y2UGQFCvIqrDTKAbuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2Q4MWYx NC0xZmY0LTQyYjEtOWI5Zi0zNGNkMDU3NWUxY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvZDgxZjE0 LTFmZjQtNDJiMS05YjlmLTM0Y2QwNTc1ZTFjYi8xL3pGWDNiUDZkcjdMWlFaQVVL OGlxc05Nb0J1NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwghMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCuIDANBgkqhkiG9w0BAQsFAAOCAQEAsdIAESsPgylRwIZbRAlbbdbzGb4ZOqdt 7bfXNOPtnZ2EoYbZAx24eE+C2CGVDpVfswktcZcw3hTsvHAhavfcpM0QIjQoDXSI Pq73ynrXJX02z6FU0wlvww/CGYZeBq898dSR2Fk9+FMe1C7jGUY2Yrh+sfqhWRlr IHsrvDlb74hW1rmuXYR7acktOuLxme9XBWq59RKIVzlkXty6goTXU9Pq5qnYIPm7 3y0uAyh9alaNI72KAQp60OgqJx4fc2jQ5k4N+MLDRIODeDLKuvz+f9drqrIEglCY D9EBLvjBZNZImE4utj6stksH7CdceezfU7c1gKFh4oJ5Oqr3hMS2Qg== -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:32 2026 by rpki-client