This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer (raw, json) Hash identifier: lvfdSVbZGyy8ctSRDw82SxRdsn6oXOXAbSSBhd6ZtiE= Subject key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC18FEC49996234950ED8EB05B0F4C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47719 IP: 185.61.48.0/22 IP: 2a04:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:18:fe:c4:99:96:23:49:50:ed:8e:b0:5b:0f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:86:d6:69:62:95:45:20:1c:c5:e0:bf:ab:73: eb:f2:73:d8:8f:aa:14:cd:1f:9f:ae:71:cf:d3:31: d2:4d:95:fe:9b:aa:1a:c9:c5:e4:34:89:b4:22:82: e8:1a:f8:27:96:fc:83:92:70:e4:38:6e:b4:9d:5d: 75:5c:9c:a1:9f:1a:73:6a:9a:73:1c:d9:2c:df:a6: 6b:8c:7e:82:b7:e1:57:91:71:17:1b:f9:91:18:18: 9c:ae:3c:5c:dc:8c:82:51:6d:03:b5:a3:2c:d9:70: c5:7e:44:93:c3:53:e6:5e:3f:3c:af:85:3e:90:fe: af:e5:da:36:fa:40:8f:2a:2f:13:14:a2:74:04:15: 07:ea:64:b9:f6:7e:b6:a5:8c:31:48:03:8c:4f:e2: 10:aa:b5:37:11:79:72:87:74:d3:fd:d5:b5:7a:c1: a2:8e:b6:d8:bb:51:f7:0a:44:24:db:6e:0e:b3:01: 10:f4:d8:5e:6c:3d:97:c3:44:d0:82:6c:00:eb:99: ac:64:e3:e5:4b:80:37:7d:dd:13:6e:36:65:c5:95: 68:29:fd:d0:89:30:a4:38:63:e1:2d:f2:4f:48:48: ba:39:cc:fd:5a:d0:e5:8f:19:e3:be:1d:5b:b4:16: fa:25:cc:3a:c0:55:c5:3f:e2:70:cc:8c:e8:83:85: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.48.0/22 IPv6: 2a04:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47719 Signature Algorithm: sha256WithRSAEncryption 74:e8:f9:cc:eb:7d:45:a5:e9:de:e4:84:f0:0a:6b:e2:47:47: 91:1b:13:92:01:17:22:8a:64:99:32:3e:4c:b5:17:57:83:c0: 3a:f3:d1:45:96:1c:c9:f3:4a:79:8a:46:a9:ac:d2:21:a7:ce: 7d:4e:b6:b6:1c:76:e9:ad:c9:03:d5:e3:a3:7d:8a:67:b0:a7: 75:67:34:56:3a:74:dd:b4:6d:03:19:6e:72:d2:f9:9e:8b:65: c9:e9:c6:73:ba:ff:78:46:73:64:0a:ed:35:f0:74:95:f3:71: b7:dc:2e:55:e0:27:19:a1:bc:47:8b:01:e9:e0:f5:77:97:d9: 54:89:0a:67:37:e2:48:cb:9a:ee:fd:2f:02:c2:0b:cc:60:cb: cf:a0:43:f6:a9:60:40:98:5a:a5:d8:1a:75:f7:4d:a1:c3:6d: cf:d6:f7:27:b4:b0:ec:b1:29:86:9c:80:09:80:c1:1c:0f:5b: f6:f1:81:05:60:c0:34:a6:0f:f8:07:e6:c0:40:9c:90:0d:48: bc:5a:ec:40:65:d4:5a:17:97:72:24:68:42:db:59:c9:04:0f: ee:db:e1:9a:6e:64:c6:1c:e5:dc:e5:a1:4e:df:4e:fb:ca:c4: 74:37:20:cf:68:22:05:cb:fd:80:68:6c:25:5f:96:a1:f5:7a: 06:7b:ce:7c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57Bj+xJmWI0lQ7Y6wWw9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDFjNzhmYzE3NDhiZGNjNmE2Yzg4YzY3ZDI4M2UxZDAyZDlkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IbWaWKVRSAcxeC/q3Pr8nPYj6oU zR+frnHP0zHSTZX+m6oaycXkNIm0IoLoGvgnlvyDknDkOG60nV11XJyhnxpzappz HNks36ZrjH6Ct+FXkXEXG/mRGBicrjxc3IyCUW0DtaMs2XDFfkSTw1PmXj88r4U+ kP6v5do2+kCPKi8TFKJ0BBUH6mS59n62pYwxSAOMT+IQqrU3EXlyh3TT/dW1esGi jrbYu1H3CkQk224OswEQ9NhebD2Xw0TQgmwA65msZOPlS4A3fd0TbjZlxZVoKf3Q iTCkOGPhLfJPSEi6Ocz9WtDljxnjvh1btBb6Jcw6wFXFP+JwzIzog4X5ywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGQcePwXSL3MamyIxn0oPh0C2dzIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2U3MmE5 ZC05ZWE1LTQ3ZGItYTY3ZS02ZDJlMTFmZTA4Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZTcyYTlk LTllYTUtNDdkYi1hNjdlLTZkMmUxMWZlMDhjZC8xL1pCeDRfQmRJdmN4cWJJakdm U2ctSFFMWjNNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT0wMA0EAgACMAcDBQMqBOqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC6ZzANBgkqhkiG9w0BAQsFAAOCAQEAdOj5zOt9RaXp 3uSE8Apr4kdHkRsTkgEXIopkmTI+TLUXV4PAOvPRRZYcyfNKeYpGqazSIafOfU62 thx26a3JA9Xjo32KZ7CndWc0Vjp03bRtAxluctL5notlyenGc7r/eEZzZArtNfB0 lfNxt9wuVeAnGaG8R4sB6eD1d5fZVIkKZzfiSMua7v0vAsILzGDLz6BD9qlgQJha pdgadfdNocNtz9b3J7Sw7LEphpyACYDBHA9b9vGBBWDANKYP+AfmwECckA1IvFrs QGXUWheXciRoQttZyQQP7tvhmm5kxhzl3OWhTt9O+8rEdDcgz2giBcv9gGhsJV+W ofV6BnvOfA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:45 2026 by rpki-client