This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer File: ZEzbroSyaoSEsQwA6_37y0mQwVc.cer (raw, json) Hash identifier: dxGskGOCLkbeL0viBLua5wmm4gAbY8r+kRz/9R5JEDw= Subject key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8210346CA02E2BAFCD5F15E1D322E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209920 IP: 185.244.16.0/22 IP: 2a0f:9080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:10:34:6c:a0:2e:2b:af:cd:5f:15:e1:d3:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:7a:45:63:e8:42:73:c3:d9:e0:cc:a8:16: 08:f8:5b:c0:3b:54:f4:47:8b:16:be:cf:39:8a:84: 24:e6:6e:9d:59:44:da:b4:29:f3:22:61:e7:cf:bc: 9c:52:39:a7:3c:48:57:62:e2:7c:eb:55:03:46:57: 86:7b:0b:50:2a:e6:55:d7:59:93:b7:02:9d:1f:f4: 20:96:55:15:1d:b6:11:72:c9:26:72:d7:64:58:98: 2e:70:93:37:0a:a7:51:94:cf:f4:40:ca:e0:58:2c: e2:ec:e9:dd:dc:8b:8a:13:d2:a6:ec:9d:2c:82:07: ba:44:65:63:61:e3:34:55:05:f5:36:70:9c:52:03: dc:e7:e9:33:7c:c4:06:93:22:40:bf:3d:5c:33:49: 70:d4:d8:b9:c3:59:3f:b9:1e:d2:8a:fe:c4:12:0e: 9a:d1:d2:e2:d9:0b:e2:dc:89:37:88:29:81:94:74: 16:d2:ed:b7:9f:1e:09:c8:7e:77:53:1a:79:cf:db: 48:79:19:77:da:32:07:cd:29:55:33:15:7d:cb:81: 1d:d3:c2:ee:73:0c:2e:6d:e5:9a:e2:6b:2d:d7:67: bb:59:be:23:c8:61:94:c0:93:e2:af:7f:33:ad:38: 2a:1e:09:84:6c:9a:91:09:f3:11:0b:4a:59:5b:41: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.16.0/22 IPv6: 2a0f:9080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209920 Signature Algorithm: sha256WithRSAEncryption ac:3c:77:0e:71:ce:42:ce:fd:3e:56:c8:02:35:f3:fb:0f:aa: 6e:1f:84:91:0f:e3:e9:47:30:6d:0e:70:02:5a:5e:16:bf:72: dd:79:78:60:3e:bf:5b:21:03:28:a3:c9:37:66:ba:94:40:59: c2:6f:81:15:98:2c:f2:b5:a5:53:a8:d8:c7:eb:87:09:f6:17: 58:9d:0e:f3:74:7e:e8:db:71:c5:34:f7:08:57:e2:e8:bd:58: e7:43:c3:2c:bc:6d:9a:ac:61:65:f5:7a:fa:ba:76:09:57:51: bd:59:7d:a8:76:90:ee:7f:14:7f:b8:a4:eb:40:ef:a6:29:f5: 55:81:55:91:a9:2d:ba:75:1c:24:dc:2c:91:28:21:57:62:f9: ff:a2:00:c1:8a:2c:46:9d:b0:72:8e:96:f1:0f:69:39:b2:ec: b9:42:f6:89:db:fe:c2:ed:3b:cc:54:17:9a:9b:fd:db:45:8a: bc:5d:f0:da:24:73:77:b5:eb:cc:96:d3:6e:15:e0:4a:63:7a: 9c:34:a1:d8:24:68:95:f1:b0:2d:de:0e:05:d1:01:aa:37:4d: f0:5c:b4:3e:6e:2c:bb:66:99:0a:72:da:84:aa:ae:78:c9:d3: 7c:08:14:59:1c:de:0d:0b:7c:eb:a6:45:5e:31:9d:36:09:9f: 75:a1:90:32 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/ghA0bKAuK6/NXxXh0yLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDRjZGJhZTg0YjI2YTg0ODRiMTBjMDBlYmZkZmJjYjQ5OTBjMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb16RWPoQnPD2eDMqBYI+FvAO1T0 R4sWvs85ioQk5m6dWUTatCnzImHnz7ycUjmnPEhXYuJ861UDRleGewtQKuZV11mT twKdH/QgllUVHbYRcskmctdkWJgucJM3CqdRlM/0QMrgWCzi7Ond3IuKE9Km7J0s gge6RGVjYeM0VQX1NnCcUgPc5+kzfMQGkyJAvz1cM0lw1Ni5w1k/uR7Siv7EEg6a 0dLi2Qvi3Ik3iCmBlHQW0u23nx4JyH53Uxp5z9tIeRl32jIHzSlVMxV9y4Ed08Lu cwwubeWa4mst12e7Wb4jyGGUwJPir38zrTgqHgmEbJqRCfMRC0pZW0HW6QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGRM266EsmqEhLEMAOv9+8tJkMFXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwL2Q3M2Fj OS0zZDY1LTRlMmQtOGJiZi1lMDM0ZjY1ZTdmNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvZDczYWM5 LTNkNjUtNGUyZC04YmJmLWUwMzRmNjVlN2Y2MC8xL1pFemJyb1N5YW9TRXNRd0E2 XzM3eTBtUXdWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufQQMA0EAgACMAcDBQMqD5CAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0ADANBgkqhkiG9w0BAQsFAAOCAQEArDx3DnHOQs79 PlbIAjXz+w+qbh+EkQ/j6UcwbQ5wAlpeFr9y3Xl4YD6/WyEDKKPJN2a6lEBZwm+B FZgs8rWlU6jYx+uHCfYXWJ0O83R+6NtxxTT3CFfi6L1Y50PDLLxtmqxhZfV6+rp2 CVdRvVl9qHaQ7n8Uf7ik60Dvpin1VYFVkaktunUcJNwskSghV2L5/6IAwYosRp2w co6W8Q9pObLsuUL2idv+wu07zFQXmpv920WKvF3w2iRzd7XrzJbTbhXgSmN6nDSh 2CRolfGwLd4OBdEBqjdN8Fy0Pm4su2aZCnLahKqueMnTfAgUWRzeDQt866ZFXjGd NgmfdaGQMg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:55 2026 by rpki-client