This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer File: ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer (raw, json) Hash identifier: aYW/0Ew/cRWHGCvT64afinzHpJ+a/qBHsojbtHMnun0= Subject key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33CDB35029C1710993ACCAA522652 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.224.0/24 IP: 194.37.255.0/24 IP: 194.145.224.0/24 IP: 195.190.135.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3c:db:35:02:9c:17:10:99:3a:cc:aa:52:26:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f873adb6a1f3e81b3343c74998947526c43dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:60:f7:70:66:50:d5:ff:67:23:68:1a:ee:e0: 3d:2a:88:e1:74:05:e7:45:49:c0:d7:b2:04:2b:5b: 47:2f:a4:39:77:3f:00:3e:4e:c0:84:9b:a4:c5:92: bc:21:0f:26:ed:44:e5:bc:bf:d9:96:6d:52:b6:93: 94:18:50:68:39:58:df:ed:e9:8e:34:07:18:cf:a6: 39:60:fd:96:f2:a8:f5:a7:38:a0:f4:c9:4e:93:65: a9:9d:05:ac:5f:e6:e0:42:47:a0:f9:67:3d:4e:db: 74:5c:3a:11:20:61:c8:ca:46:e8:d0:81:86:a3:ac: 78:17:fd:c3:43:fb:66:c1:e9:f0:c8:d6:d0:d1:04: 28:a1:d6:bd:e4:5a:d7:e2:be:65:0c:6c:dc:11:2f: 7e:03:60:ed:18:50:1a:85:6c:49:b8:1e:55:ad:a4: f9:02:7d:be:78:ad:64:0a:b7:be:4b:87:7c:72:58: 15:2d:62:15:62:08:f5:55:71:ca:3a:c9:60:04:87: 81:2c:5d:25:b4:97:20:b9:df:21:0d:87:32:30:a9: 58:3d:40:ab:7f:0e:40:7f:1e:1c:43:77:6d:fc:8e: 1f:3d:d6:8b:d8:f9:54:20:b1:6b:a3:95:f3:3d:6b: 29:30:3a:50:89:24:16:ac:67:4f:4b:06:b0:12:dd: c2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.224.0/24 194.37.255.0/24 194.145.224.0/24 195.190.135.0/24 Signature Algorithm: sha256WithRSAEncryption 63:5a:27:d9:02:02:80:72:50:ab:c5:ea:a7:5e:ce:bd:ac:d4: c1:c5:69:4b:6f:b8:9c:c8:30:f5:1e:cc:de:d8:ac:a8:ed:03: 20:89:f9:0a:06:88:83:5d:6b:47:98:62:13:e8:93:e4:af:dd: bb:ad:63:c0:d0:30:d4:00:60:59:7e:2e:08:32:67:11:69:57: f4:6b:a6:0f:81:b7:50:ac:2b:d2:be:b4:15:7f:c6:03:95:0a: a1:03:b0:58:65:9b:9e:d0:71:0d:34:a5:c4:68:18:33:ce:76: 3e:e9:31:7e:11:08:6f:c5:f2:91:2c:1d:6e:64:56:01:6b:2f: c4:61:c1:59:b8:1f:bd:15:0b:28:7a:bd:f9:23:d9:df:7b:ff: e6:1d:7e:3d:42:f4:02:17:5e:08:63:ca:b9:39:71:37:c1:f4: 56:f7:41:d2:ad:c1:a2:19:fa:33:d9:ea:3b:31:12:52:c5:b4: db:02:d9:ce:38:6c:7e:72:30:b7:db:78:b2:85:19:48:f2:f2: 69:f2:90:2f:91:e6:b9:69:b3:f9:4a:72:68:c2:9d:0b:d9:5d: fa:c2:18:5f:81:eb:25:9d:d4:a0:99:47:82:0a:bd:d0:6c:61: e8:c0:59:d4:d0:36:d0:f9:8f:b4:20:f6:d3:91:8a:ff:65:0e: ab:ca:ae:f5 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt4ozzbNQKcFxCZOsyqUiZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGY4NzNhZGI2YTFmM2U4MWIzMzQzYzc0OTk4OTQ3NTI2YzQzZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GD3cGZQ1f9nI2ga7uA9KojhdAXn RUnA17IEK1tHL6Q5dz8APk7AhJukxZK8IQ8m7UTlvL/Zlm1StpOUGFBoOVjf7emO NAcYz6Y5YP2W8qj1pzig9MlOk2WpnQWsX+bgQkeg+Wc9Ttt0XDoRIGHIykbo0IGG o6x4F/3DQ/tmwenwyNbQ0QQooda95FrX4r5lDGzcES9+A2DtGFAahWxJuB5VraT5 An2+eK1kCre+S4d8clgVLWIVYgj1VXHKOslgBIeBLF0ltJcgud8hDYcyMKlYPUCr fw5Afx4cQ3dt/I4fPdaL2PlUILFro5XzPWspMDpQiSQWrGdPSwawEt3CsQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFGT4c622ofPoGzNDx0mYlHUmxD3PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2I5ZTRj NC1hM2RjLTQ2ZTgtYWEzZS0zOTdmMzZjOTE5ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYjllNGM0 LWEzZGMtNDZlOC1hYTNlLTM5N2YzNmM5MTk4Mi8xL1pQaHpyYmFoOC1nYk0wUEhT WmlVZFNiRVBjOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAW8bgAwQAwiX/AwQAwpHgAwQAw76HMA0GCSqG SIb3DQEBCwUAA4IBAQBjWifZAgKAclCrxeqnXs69rNTBxWlLb7icyDD1Hsze2Kyo 7QMgifkKBoiDXWtHmGIT6JPkr927rWPA0DDUAGBZfi4IMmcRaVf0a6YPgbdQrCvS vrQVf8YDlQqhA7BYZZue0HENNKXEaBgzznY+6TF+EQhvxfKRLB1uZFYBay/EYcFZ uB+9FQsoer35I9nfe//mHX49QvQCF14IY8q5OXE3wfRW90HSrcGiGfoz2eo7MRJS xbTbAtnOOGx+cjC323iyhRlI8vJp8pAvkea5abP5SnJowp0L2V36whhfgeslndSg mUeCCr3QbGHowFnU0DbQ+Y+0IPbTkYr/ZQ6ryq71 -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:45 2026 by rpki-client