This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer (raw, json) Hash identifier: rvBpZ5KqLnKM5Ebee6KotOlSYlxVYCs80koekz3rv8M= Subject key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A77478154EE1ADA273CBE3CAD2F0C710D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 08:56:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 205614 AS: 212779 IP: 45.89.160.0/22 IP: 45.135.124.0/22 IP: 94.176.168.0/22 IP: 185.142.8.0/22 IP: 185.171.44.0/22 IP: 193.22.251.0/24 IP: 2a07:2800::/29 IP: 2a0d:1f80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:47:81:54:ee:1a:da:27:3c:be:3c:ad:2f:0c:71:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 08:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2c:b7:4e:e7:8a:a8:2c:4c:51:6f:a5:c9:c0: 73:2f:1b:ea:d6:1a:2a:8f:14:7c:ba:80:a0:e2:8a: 10:07:46:02:97:d7:a3:ba:8d:e4:ba:6d:4c:e6:96: 2d:92:65:11:03:a7:95:18:4e:a4:9f:cf:99:7b:b0: 25:1c:06:09:0d:f3:9c:ee:e8:c8:34:11:1c:bf:30: 9f:e3:bf:c1:92:19:e0:a1:4e:2e:6a:29:78:4e:42: c1:ce:2b:e2:f9:1d:d0:d4:a5:6a:d8:3e:5e:48:9d: fd:65:05:09:3e:3c:cc:a4:75:56:d2:a0:2f:b6:a6: 11:b8:28:9d:06:3c:75:1a:ac:eb:d5:e9:88:e1:a3: 7a:a3:1f:5f:1c:cb:1a:0f:0e:af:a8:49:7d:ec:8f: 89:8b:d7:e1:eb:8d:1a:11:f7:e2:f1:ec:c9:2b:20: eb:2b:69:8a:d7:ff:83:21:ed:d0:9b:19:59:58:bb: 4f:cb:f3:59:1b:d0:12:ea:05:9c:30:bd:c9:90:c2: 4b:71:ca:5f:26:65:95:00:51:87:ff:b8:06:e6:1d: cc:5a:ae:fa:9d:4b:94:35:c0:eb:98:c5:eb:42:25: ca:f4:9a:66:bb:68:6e:85:1e:44:38:14:f1:58:b3: bc:3f:b3:99:2c:34:0b:d7:34:57:35:80:ca:96:fe: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.160.0/22 45.135.124.0/22 94.176.168.0/22 185.142.8.0/22 185.171.44.0/22 193.22.251.0/24 IPv6: 2a07:2800::/29 2a0d:1f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205614 212779 Signature Algorithm: sha256WithRSAEncryption 83:8b:b8:07:97:78:1a:5b:34:c5:e0:23:d2:2b:8b:bf:5c:2a: ab:31:19:fb:90:4b:fe:36:02:cc:eb:71:c3:52:26:9f:16:17: a1:84:66:f3:c5:fd:60:bf:e5:6d:23:b9:3d:57:e4:74:69:36: 5e:ac:00:17:77:5e:84:70:90:4c:54:ab:ef:4c:32:b8:a9:15: ea:03:e8:80:c9:b8:2f:65:62:93:13:13:e1:32:fc:a7:64:e2: b0:1e:02:3b:ae:99:18:3c:41:34:8c:97:4c:f6:1e:14:14:27: 46:1e:d9:19:56:b0:4c:2f:89:cf:b9:3f:17:2e:d6:2b:8c:a4: 84:13:b2:e0:90:53:43:e3:04:b9:4f:0a:12:75:d8:02:90:af: 46:99:a4:51:75:f1:9c:bf:b7:5f:d5:3a:7a:2d:87:3e:1c:8e: 71:e2:4f:77:4a:0a:9a:b7:00:11:3e:26:1b:d1:3d:f6:24:18: 23:28:dd:37:05:d3:6a:04:70:47:0e:26:ad:8f:60:64:f0:79: f6:9a:b0:ca:38:5c:4e:87:fe:32:18:22:1f:4b:1c:25:66:40: e9:41:ea:7a:8f:05:c8:4c:01:43:ae:fb:24:90:d3:56:2d:91: 5d:9e:bc:71:3c:4e:e6:b3:14:22:ce:aa:f8:ae:0a:7d:d7:7c: 91:03:f3:fb -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZp3R4FU7hraJzy+PK0vDHENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMDg1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTA2MDk2Njk1ZjdlNjYxMGIxOWIwOGUxZDdmZDljNGQ5MTRhNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yy3TueKqCxMUW+lycBzLxvq1hoq jxR8uoCg4ooQB0YCl9ejuo3kum1M5pYtkmURA6eVGE6kn8+Ze7AlHAYJDfOc7ujI NBEcvzCf47/BkhngoU4uail4TkLBzivi+R3Q1KVq2D5eSJ39ZQUJPjzMpHVW0qAv tqYRuCidBjx1Gqzr1emI4aN6ox9fHMsaDw6vqEl97I+Ji9fh640aEffi8ezJKyDr K2mK1/+DIe3QmxlZWLtPy/NZG9AS6gWcML3JkMJLccpfJmWVAFGH/7gG5h3MWq76 nUuUNcDrmMXrQiXK9Jpmu2huhR5EOBTxWLO8P7OZLDQL1zRXNYDKlv7JewIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2Y1YmFh NC1mNjcwLTQzODUtYmMzOC1hNDE1MjU1OGQxOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZjViYWE0 LWY2NzAtNDM4NS1iYzM4LWE0MTUyNTU4ZDE4Yy8xL1pRWUpacFgzNW1FTEdiQ09I WF9aeE5rVXBQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQCLVmgAwQCLYd8AwQCXrCoAwQCuY4IAwQCuass AwQAwRb7MBQEAgACMA4DBQMqBygAAwUAKg0fgDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMDIy4CAwM/KzANBgkqhkiG9w0BAQsFAAOCAQEAg4u4B5d4Gls0xeAj0iuL v1wqqzEZ+5BL/jYCzOtxw1ImnxYXoYRm88X9YL/lbSO5PVfkdGk2XqwAF3dehHCQ TFSr70wyuKkV6gPogMm4L2VikxMT4TL8p2TisB4CO66ZGDxBNIyXTPYeFBQnRh7Z GVawTC+Jz7k/Fy7WK4ykhBOy4JBTQ+MEuU8KEnXYApCvRpmkUXXxnL+3X9U6ei2H PhyOceJPd0oKmrcAET4mG9E99iQYIyjdNwXTagRwRw4mrY9gZPB59pqwyjhcTof+ MhgiH0scJWZA6UHqeo8FyEwBQ677JJDTVi2RXZ68cTxO5rMUIs6q+K4Kfdd8kQPz +w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:17 2025 by rpki-client