This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
File:                     ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer (raw, json)
Hash identifier:          INHfWYAVb7rOiih3t8nDpDMzzqDw3+0P7S74xlBL8MI=
Subject key identifier:   64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B783469DEDC0BD32E89B7922D470EF795
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:17:39 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.224.1.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:69:de:dc:0b:d3:2e:89:b7:92:2d:47:0e:f7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:7f:74:6b:b4:5c:88:a8:d8:c1:4e:21:2d:
                    4f:60:5a:54:f8:fd:ab:26:2a:ce:96:15:10:e8:b0:
                    a7:4a:13:9e:f6:fc:bb:eb:f0:b3:2f:bc:c7:e7:5b:
                    d2:9d:ba:c6:48:28:03:02:7a:20:58:56:f3:c3:f9:
                    1c:8d:88:85:f0:09:f3:a6:11:40:a9:40:da:ba:c0:
                    0c:a5:0d:68:09:77:55:a6:fd:6a:21:b4:2f:b7:d4:
                    06:ff:2f:76:76:8c:5e:69:af:e4:b1:b8:71:80:67:
                    06:d9:4f:c9:5e:6f:8b:01:86:2a:1a:5e:56:b8:bf:
                    f2:81:90:56:cc:e1:c2:d3:cf:20:42:25:ee:31:86:
                    14:f2:4d:d7:e9:60:80:a9:39:02:e5:ac:db:fe:77:
                    94:f6:5c:fa:a6:4f:76:16:be:73:b8:d3:e7:73:a9:
                    a9:7f:d0:af:69:18:31:86:c5:b3:04:d8:6a:2f:c7:
                    cb:06:02:0b:33:91:cc:a0:a9:06:ac:03:f3:2b:33:
                    a6:46:46:d9:29:76:a0:d3:71:8b:4a:aa:0f:ef:aa:
                    68:45:61:f5:48:38:43:0a:4e:01:56:68:15:55:d1:
                    11:4d:09:da:50:59:c9:9d:68:0b:86:df:19:a3:3d:
                    7d:80:90:a3:18:7d:36:56:04:64:2a:fd:84:12:b1:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:14:e8:15:9a:e3:db:f5:47:ab:16:ec:88:09:fc:8e:a9:8f:
         46:89:28:bf:78:8c:ea:1f:7d:d4:29:cc:59:52:40:09:54:ca:
         d1:55:80:0a:d5:71:74:4c:3c:4f:28:44:38:03:cc:8d:6d:57:
         c1:e5:2c:5d:d1:ee:6a:7f:02:3a:ba:6a:cf:ee:9d:63:4e:15:
         1a:1b:81:2a:9d:d0:da:92:89:8e:04:a4:4c:b5:0c:a6:c3:a1:
         c3:ab:ff:6b:d1:53:06:26:4b:e5:1f:dc:4d:da:0c:a4:fb:cf:
         3f:20:ac:f0:c1:78:90:0d:12:9e:67:b7:3a:dd:1c:3a:5b:4e:
         aa:3e:7d:41:2d:0e:81:07:2b:08:4a:42:1e:63:10:b9:9e:88:
         18:41:95:85:cd:84:fd:cb:c9:0a:f7:ce:3a:3b:aa:d3:92:91:
         7d:24:34:5d:8c:22:ff:63:5e:80:b7:bb:36:ba:ae:b9:91:14:
         4e:09:b1:08:94:08:77:c8:af:24:c2:97:01:08:e2:7d:7e:78:
         31:96:52:af:9a:79:88:e4:ad:9e:d2:5d:e5:65:b5:88:c0:06:
         9e:8b:b2:fa:ac:cd:ce:9c:45:3d:70:f9:32:db:45:13:6f:d2:
         c8:cd:7c:9e:7d:3f:f8:f0:ec:15:82:de:6b:a2:e7:f4:17:6d:
         e4:6f:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----