This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer File: ZD4bqRxWmoshptLWf1271sBOQ-o.cer (raw, json) Hash identifier: vV2QwO1jv9IuT8P2z4A40aEOmnqBF+jCFDtv3Lj0ejo= Subject key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8197E0FDFFBF9DFF63F51957235489 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.23.202.0/23 IP: 194.34.224.0/22 IP: 2a0d:f9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:97:e0:fd:ff:bf:9d:ff:63:f5:19:57:23:54:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:73:78:65:67:5f:70:82:ff:f6:03:0c:40: 53:ae:e0:88:cb:37:47:4a:61:a4:94:16:ab:0d:04: ed:9b:75:a2:f2:99:05:8c:71:f3:f9:dd:3e:69:c6: 13:82:8d:e0:aa:d3:ee:c3:8c:38:0d:d0:ac:7e:b5: 61:9a:d4:33:45:bb:67:c0:36:fb:45:cb:d3:76:ba: 2a:64:7e:7c:6a:d7:49:d3:0f:34:1f:53:f0:a8:d8: 66:dd:5a:d2:cd:9d:8b:bb:35:71:60:64:a8:5c:26: 7b:35:34:2d:46:d2:3b:75:77:e0:4f:f2:1d:aa:3e: ca:18:00:4b:8a:04:9f:e4:f4:6f:38:ac:cc:94:68: 1e:f2:fc:6c:e0:df:4b:51:2d:17:d2:18:5a:04:2f: cb:06:d2:4a:e1:10:f6:35:12:26:95:93:59:3b:31: a4:3f:dd:2d:97:70:5b:80:aa:49:d6:10:11:51:f7: 1f:63:c3:bb:b0:c5:a7:64:33:57:e4:7d:6c:5f:a6: af:42:f1:5c:05:6a:71:9e:53:b4:c6:44:a9:a2:7c: a6:20:9b:9a:20:34:76:e7:58:99:d9:b1:cc:06:d9: 76:47:54:83:61:14:80:db:b9:61:fc:e3:b7:c7:5c: 2d:72:a3:15:b1:70:ba:d3:90:71:65:e4:4f:c1:4f: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.202.0/23 194.34.224.0/22 IPv6: 2a0d:f9c0::/29 Signature Algorithm: sha256WithRSAEncryption 8b:15:63:23:cc:18:57:2f:76:5c:4f:96:17:fb:60:6f:5b:41: b1:d8:62:3e:2f:9e:ef:a9:4f:06:52:7d:f0:52:e7:f0:0d:d7: ba:cb:95:27:cf:78:93:ad:01:2e:b6:c8:11:53:28:a1:7b:40: bc:c0:bb:46:0d:c6:e2:b8:49:77:22:d2:36:89:b0:40:c9:24: 1a:e7:50:db:48:a3:2a:20:e9:28:56:c1:c3:bd:e2:ce:47:7c: 55:c3:a6:08:c0:12:e7:6d:4c:50:30:ea:3b:f1:f8:67:6c:af: 65:91:7a:84:7b:40:04:98:52:4c:be:8b:dc:ed:19:e9:d7:b7: 55:e4:36:4c:49:73:a0:fa:67:6e:71:dc:f9:b9:1f:ef:d4:58: 59:c7:b9:99:85:47:0d:5c:66:30:e0:08:0f:2a:2a:40:9c:21: 4d:f8:e9:2d:52:d7:7b:1f:4a:83:34:ea:75:5d:4c:0b:48:93: 8a:e7:22:3b:be:0c:e7:5f:6f:66:11:46:5e:bf:5b:1c:7a:a2: fe:7e:58:73:6c:f5:50:2b:ba:49:93:31:a1:26:ac:9e:db:e0: d2:71:1e:12:ac:91:c8:07:b6:e4:2f:55:6c:88:a9:fb:dc:18: 68:bd:5d:3a:2e:3e:25:6d:ef:38:8e:d3:23:d3:40:07:7f:0f: 32:a8:8b:d6 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/gZfg/f+/nf9j9RlXI1SJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDNlMWJhOTFjNTY5YThiMjFhNmQyZDY3ZjVkYmJkNmMwNGU0M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA295zeGVnX3CC//YDDEBTruCIyzdH SmGklBarDQTtm3Wi8pkFjHHz+d0+acYTgo3gqtPuw4w4DdCsfrVhmtQzRbtnwDb7 RcvTdroqZH58atdJ0w80H1PwqNhm3VrSzZ2LuzVxYGSoXCZ7NTQtRtI7dXfgT/Id qj7KGABLigSf5PRvOKzMlGge8vxs4N9LUS0X0hhaBC/LBtJK4RD2NRImlZNZOzGk P90tl3BbgKpJ1hARUfcfY8O7sMWnZDNX5H1sX6avQvFcBWpxnlO0xkSponymIJua IDR251iZ2bHMBtl2R1SDYRSA27lh/OO3x1wtcqMVsXC605BxZeRPwU+EPwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFGQ+G6kcVpqLIabS1n9du9bATkPqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2FjYTkx Mi05ZThkLTQ3NDktOTVlMC1mZWEwYWZmMzU5ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvYWNhOTEy LTllOGQtNDc0OS05NWUwLWZlYTBhZmYzNTlmNS8xL1pENGJxUnhXbW9zaHB0TFdm MTI3MXNCT1Etby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBuRfKAwQCwiLgMA0EAgACMAcDBQMqDfnAMA0G CSqGSIb3DQEBCwUAA4IBAQCLFWMjzBhXL3ZcT5YX+2BvW0Gx2GI+L57vqU8GUn3w UufwDde6y5Unz3iTrQEutsgRUyihe0C8wLtGDcbiuEl3ItI2ibBAySQa51DbSKMq IOkoVsHDveLOR3xVw6YIwBLnbUxQMOo78fhnbK9lkXqEe0AEmFJMvovc7Rnp17dV 5DZMSXOg+mducdz5uR/v1FhZx7mZhUcNXGYw4AgPKipAnCFN+OktUtd7H0qDNOp1 XUwLSJOK5yI7vgznX29mEUZev1sceqL+flhzbPVQK7pJkzGhJqye2+DScR4SrJHI B7bkL1VsiKn73BhovV06Lj4lbe84jtMj00AHfw8yqIvW -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:46 2026 by rpki-client