This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer (raw, json) Hash identifier: 2xRVrwM+DFUT44sL0L8Zy1OAyghyVzDAimp2yYldL0M= Subject key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385A48AD50CC5ECA5012D8F55071AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211389 IP: 159.253.123.0/24 IP: 195.10.219.0/24 IP: 2a13:38c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5a:48:ad:50:cc:5e:ca:50:12:d8:f5:50:71:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674c507a0cdb531374437ebf46dd59a6bd07486c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:75:91:94:fa:b3:f7:91:f9:6f:a4:2f:70: 4a:9c:d1:af:80:d3:fb:d9:6a:89:48:fc:4d:1c:c5: 59:82:23:4f:fc:e9:15:ea:07:aa:88:9b:e9:55:23: 46:47:17:82:db:d1:9f:8a:63:26:ed:e8:07:4e:08: 6c:35:b8:99:63:cb:9a:cd:d3:de:0c:e7:72:25:e8: 29:95:8b:87:1b:3f:c4:37:8d:ab:95:80:f7:17:c1: 08:f6:3a:99:0d:19:3f:64:5b:40:5d:67:0b:5e:02: 32:2c:42:9e:fd:d4:0c:1d:a6:54:c4:31:98:ba:d0: 2c:c6:e6:bf:97:d6:ba:1a:41:98:2c:11:1e:c6:ec: 57:26:12:dc:1d:40:c7:b6:11:71:6b:2a:1f:f4:1f: 26:d7:4c:a2:0b:07:28:e9:6d:29:c5:12:18:08:31: f2:bc:a9:c0:9b:84:9b:3e:b6:38:da:34:d4:aa:bc: 5d:f2:3e:4b:a3:74:b1:7e:e6:0b:bb:d3:b4:fc:1b: 03:f8:8b:e7:62:36:6e:95:6d:19:ce:6c:5a:c5:56: 8c:2f:22:61:c5:c1:e3:5e:73:74:c3:c2:2f:73:bf: d7:72:33:6f:5f:0d:24:48:07:b3:7f:90:2e:5f:d4: 88:9e:78:05:1e:bc:ca:ac:56:11:18:ad:fb:9c:b5: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.253.123.0/24 195.10.219.0/24 IPv6: 2a13:38c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211389 Signature Algorithm: sha256WithRSAEncryption 22:33:04:65:02:1a:93:cd:0f:df:51:61:9e:39:c3:14:c9:ae: 0d:34:37:d6:47:eb:97:ee:ab:43:65:d4:c9:ff:9c:0f:4f:c7: 5b:78:4e:90:d9:27:86:33:83:91:50:26:2e:9d:c1:ca:ae:6c: d6:16:56:15:dd:e6:59:92:a6:11:ab:b8:b6:c8:71:54:ba:42: 35:17:52:2b:b2:86:9e:f5:8c:fa:2b:59:2f:ff:44:a4:6b:5c: 8c:90:3e:2a:ce:6f:4f:2e:4b:bf:7f:c4:a6:65:10:50:e8:b9: c0:f0:f7:fc:c2:99:b4:fb:d9:dd:9c:4d:b5:ee:69:15:1e:90: b2:55:cb:bb:d1:19:fe:35:d0:34:e7:9c:68:bc:2d:f3:5c:e2: 76:a9:18:1b:14:c0:65:40:46:80:0d:f2:99:2a:1b:39:17:ae: fc:3a:b0:51:d6:60:76:d3:16:8d:3e:30:bf:68:13:02:f5:8a: 7e:b8:d3:c0:cd:6e:14:1a:a2:a0:45:05:98:c7:ee:e5:08:34: ef:f3:09:87:93:0c:ab:c2:39:22:b6:a3:0b:7c:95:65:59:7f: f5:04:97:9c:b0:1a:8e:07:fc:36:08:69:95:df:ea:60:af:5d: f4:51:ac:9f:2a:92:66:0b:f8:01:ab:e1:71:a9:f0:38:5b:34: 4f:c6:83:6d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OFpIrVDMXspQEtj1UHGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzRjNTA3YTBjZGI1MzEzNzQ0MzdlYmY0NmRkNTlhNmJkMDc0ODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmJ1kZT6s/eR+W+kL3BKnNGvgNP7 2WqJSPxNHMVZgiNP/OkV6geqiJvpVSNGRxeC29GfimMm7egHTghsNbiZY8uazdPe DOdyJegplYuHGz/EN42rlYD3F8EI9jqZDRk/ZFtAXWcLXgIyLEKe/dQMHaZUxDGY utAsxua/l9a6GkGYLBEexuxXJhLcHUDHthFxayof9B8m10yiCwco6W0pxRIYCDHy vKnAm4SbPrY42jTUqrxd8j5Lo3SxfuYLu9O0/BsD+IvnYjZulW0ZzmxaxVaMLyJh xcHjXnN0w8Ivc7/XcjNvXw0kSAezf5AuX9SInngFHrzKrFYRGK37nLW6ZQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGdMUHoM21MTdEN+v0bdWaa9B0hsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzEwZmEw MC1hZDZiLTRiNzYtODYzZS00YjM1YWQ3MGNjMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMTBmYTAw LWFkNmItNGI3Ni04NjNlLTRiMzVhZDcwY2MxYS8xL1oweFFlZ3piVXhOMFEzNl9S dDFacHIwSFNHdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAn/17AwQAwwrbMA0EAgACMAcDBQMqEzjAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5vTANBgkqhkiG9w0BAQsFAAOCAQEAIjME ZQIak80P31FhnjnDFMmuDTQ31kfrl+6rQ2XUyf+cD0/HW3hOkNknhjODkVAmLp3B yq5s1hZWFd3mWZKmEau4tshxVLpCNRdSK7KGnvWM+itZL/9EpGtcjJA+Ks5vTy5L v3/EpmUQUOi5wPD3/MKZtPvZ3ZxNte5pFR6QslXLu9EZ/jXQNOecaLwt81zidqkY GxTAZUBGgA3ymSobOReu/DqwUdZgdtMWjT4wv2gTAvWKfrjTwM1uFBqioEUFmMfu 5Qg07/MJh5MMq8I5IrajC3yVZVl/9QSXnLAajgf8Nghpld/qYK9d9FGsnyqSZgv4 AavhcanwOFs0T8aDbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:24 2026 by rpki-client