This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer File: ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer (raw, json) Hash identifier: B8UEo19jbcLn90kBHguT3kAIxryEz4jOOtSFe7SI+rs= Subject key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB745ACB32D14796BD8912B430F707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59795 IP: 213.184.84.0/22 IP: 2a09:3a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:74:5a:cb:32:d1:47:96:bd:89:12:b4:30:f7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=651bad95276947c7be536af4c870a3721f0b7761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:e2:f9:35:57:8a:a6:c9:24:c7:ad:07:31: d2:6d:cb:27:7f:d4:7f:69:5a:f2:de:56:77:71:63: e0:cb:49:6e:11:48:e2:14:11:89:eb:35:b5:15:72: 96:2c:3f:18:d8:10:20:6e:87:46:9a:83:29:3d:b5: 61:88:89:0f:d3:e2:5e:60:7f:81:46:1c:2c:7e:66: 14:93:cc:dc:a0:43:86:37:fe:f6:0c:eb:1d:ea:23: a6:b4:a1:f8:ca:d8:c7:f3:46:5f:6a:5a:82:ea:ce: bc:1b:c8:a0:c4:a3:d5:94:b9:3f:32:c3:3d:df:5d: 6f:21:73:7f:29:2c:74:50:1f:b2:8e:c7:5b:97:d4: e6:7b:08:8c:b0:b7:6a:87:60:2b:3b:71:d2:04:6d: 29:89:43:7d:cd:61:c4:89:2a:07:da:88:b1:be:db: 09:ae:26:d6:94:58:8f:c9:91:cd:62:ad:8d:7b:f6: c9:b4:6e:c7:76:30:28:5c:b0:ed:00:35:11:c4:7f: c3:87:ba:26:9e:ef:05:23:cd:9a:c5:a5:28:7b:7f: 60:55:3b:9f:b1:e5:bf:0c:50:3a:58:0c:8a:b1:6f: 77:de:84:8f:3b:f9:83:e9:47:7a:35:9b:4e:91:cb: b5:49:a3:c4:9b:08:a5:7e:63:5e:28:ef:b5:47:c3: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.184.84.0/22 IPv6: 2a09:3a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59795 Signature Algorithm: sha256WithRSAEncryption 17:31:32:bc:8f:cc:11:c9:c7:be:c6:43:9b:83:5a:7b:39:05: 0b:11:f8:02:b5:57:98:09:15:ea:8d:73:cd:2f:da:4e:02:5c: 09:43:be:4d:68:2c:7e:ac:3d:aa:cd:84:0d:83:85:e6:64:15: e4:d0:3a:7d:fc:52:46:85:a0:d1:56:5f:b1:c7:5c:c8:25:92: df:69:4f:55:19:31:c1:80:49:15:fd:77:94:67:81:c6:be:f5: 1f:80:2b:dd:50:b4:ab:4d:e1:62:c9:4e:ca:38:4b:fe:f4:8f: 15:3c:44:df:b2:65:19:9a:eb:cd:8c:01:6a:6e:5b:08:b7:f3: 0e:6c:93:c8:35:ac:48:35:5c:02:a6:33:88:e4:d1:17:bc:1a: 6f:8b:e4:02:76:57:13:e9:96:0e:3f:42:3a:f5:97:8e:d5:70: 20:4a:cc:47:47:66:42:59:c1:5d:2e:0e:2b:4e:1f:34:29:7a: fc:ba:64:e5:7b:13:24:30:06:88:62:d9:e6:d5:32:f1:a7:80: 78:40:2a:f6:3f:f8:3d:fd:b9:2d:86:10:bc:c6:e7:7f:bd:6b: d5:50:eb:d8:ac:4a:b5:81:e2:56:94:7f:b8:3b:fd:38:6f:a4: ee:f9:fe:f8:f0:6a:5a:ea:7d:19:ef:c4:b4:16:01:6d:ce:de: d5:c6:67:ad -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt263RayzLRR5a9iRK0MPcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFiYWQ5NTI3Njk0N2M3YmU1MzZhZjRjODcwYTM3MjFmMGI3NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBzi+TVXiqbJJMetBzHSbcsnf9R/ aVry3lZ3cWPgy0luEUjiFBGJ6zW1FXKWLD8Y2BAgbodGmoMpPbVhiIkP0+JeYH+B RhwsfmYUk8zcoEOGN/72DOsd6iOmtKH4ytjH80ZfalqC6s68G8igxKPVlLk/MsM9 311vIXN/KSx0UB+yjsdbl9TmewiMsLdqh2ArO3HSBG0piUN9zWHEiSoH2oixvtsJ ribWlFiPyZHNYq2Ne/bJtG7HdjAoXLDtADURxH/Dh7omnu8FI82axaUoe39gVTuf seW/DFA6WAyKsW933oSPO/mD6Ud6NZtOkcu1SaPEmwilfmNeKO+1R8PUSwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzFkYmQ2 Yi0zNWNjLTRmMDktYjkyZS0xOThiNmE2MWNlODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMWRiZDZi LTM1Y2MtNGYwOS1iOTJlLTE5OGI2YTYxY2U4NS8xL1pSdXRsU2RwUjhlLVUycjB5 SENqY2g4TGQyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQC1bhUMA0EAgACMAcDBQMqCToAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpkzANBgkqhkiG9w0BAQsFAAOCAQEAFzEyvI/MEcnH vsZDm4NaezkFCxH4ArVXmAkV6o1zzS/aTgJcCUO+TWgsfqw9qs2EDYOF5mQV5NA6 ffxSRoWg0VZfscdcyCWS32lPVRkxwYBJFf13lGeBxr71H4Ar3VC0q03hYslOyjhL /vSPFTxE37JlGZrrzYwBam5bCLfzDmyTyDWsSDVcAqYziOTRF7wab4vkAnZXE+mW Dj9COvWXjtVwIErMR0dmQlnBXS4OK04fNCl6/Lpk5XsTJDAGiGLZ5tUy8aeAeEAq 9j/4Pf25LYYQvMbnf71r1VDr2KxKtYHiVpR/uDv9OG+k7vn++PBqWup9Ge/EtBYB bc7e1cZnrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:25 2026 by rpki-client