This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer File: ZYFndLfFZl1nqGwgzrZIe1t4s40.cer (raw, json) Hash identifier: Nkks/PsiogVI7hlcDqjExu2C4Z4hBa4HzpKhwqUK580= Subject key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F824E12B7DBAA0C3DDC85EE0BFAA3F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42248 IP: 77.76.128.0/18 IP: 89.106.96.0 -- 89.106.100.255 IP: 89.106.102.0 -- 89.106.106.255 IP: 89.106.110.0 -- 89.106.127.255 IP: 94.139.192.0/19 IP: 109.107.64.0/19 IP: 178.75.192.0/18 IP: 178.239.224.0/20 IP: 185.44.124.0/22 IP: 185.52.48.0/22 IP: 188.124.64.0/19 IP: 2a01:5e20::/29 IP: 2a03:2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:4e:12:b7:db:aa:0c:3d:dc:85:ee:0b:fa:a3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8c:56:53:90:59:04:10:24:31:cd:f1:16:75: af:a0:fb:c5:20:7d:8a:9f:63:a3:3d:47:5c:2e:23: 6b:4b:27:e4:59:04:1c:bf:fa:be:9f:b4:b6:36:51: 42:bc:99:a9:b0:06:2a:3a:a2:5f:ca:18:7e:8c:9c: ca:d7:c2:02:c4:17:6e:02:c2:60:16:3a:f1:32:bf: 53:b5:d0:7b:af:af:41:c6:c4:f6:83:d3:d5:2d:df: 3d:8f:8c:05:09:06:17:20:c0:12:d2:79:09:1a:e2: b3:21:04:79:c9:d1:33:62:f6:b6:bd:73:44:59:15: 41:c3:c4:cb:fb:62:0a:13:d6:b8:0f:32:c8:d6:a6: ed:81:c5:90:b3:50:74:4e:f3:86:bd:c6:a1:10:40: cf:bf:ac:d0:89:85:83:e8:19:db:51:b0:25:aa:bb: b6:40:a3:6e:0c:49:4b:82:9f:ae:a6:d6:48:cb:d0: 0f:20:9d:65:96:b1:88:98:dd:d2:0b:bc:19:87:0d: 99:4e:4c:d0:74:9e:78:49:ae:fd:74:fe:db:41:21: 7d:39:ba:77:9e:73:02:5b:4e:c2:1f:1d:68:65:0f: ff:c1:e2:70:0f:7c:41:7d:be:25:72:a7:cb:93:0b: c0:fc:e6:03:3e:68:a8:b3:ca:27:a4:b5:01:63:00: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.128.0/18 89.106.96.0-89.106.100.255 89.106.102.0-89.106.106.255 89.106.110.0-89.106.127.255 94.139.192.0/19 109.107.64.0/19 178.75.192.0/18 178.239.224.0/20 185.44.124.0/22 185.52.48.0/22 188.124.64.0/19 IPv6: 2a01:5e20::/29 2a03:2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42248 Signature Algorithm: sha256WithRSAEncryption 4c:03:72:12:68:28:7f:a1:b7:1b:e9:4b:3f:53:60:37:8b:57: 8b:8f:05:cd:ff:a8:87:11:e6:8c:07:ce:aa:56:a3:33:64:4f: a8:82:d3:31:9f:94:d7:01:e0:56:d9:ca:c5:8b:ce:a7:14:d5: a7:f6:86:82:4e:25:2f:c6:4f:ee:3d:53:97:f5:2e:03:24:a2: 30:e7:e9:6c:01:c9:a4:10:78:30:cb:83:b2:b0:c8:8c:3a:b5: 56:1d:83:bc:8b:65:62:d2:d5:d1:5e:ba:ff:1e:4f:26:85:ae: df:de:63:20:06:22:e6:0e:70:85:37:7a:92:9e:28:52:c7:8c: 3b:ef:86:9a:91:f0:33:48:13:8f:bd:5a:3a:61:e7:38:70:80: 44:fa:c0:02:7f:1b:53:f8:15:4c:f5:38:4f:ba:21:58:ee:12: a1:ed:ce:86:73:2c:75:6c:1d:6c:19:b9:cd:e6:59:2f:e0:8f: a3:88:c9:2a:b7:f7:33:8e:80:0f:69:76:71:67:83:f3:c9:bf: e0:99:1d:f4:ae:b7:28:80:de:e4:9d:d2:a6:91:dc:23:57:c5: da:48:d4:07:c8:19:cf:12:8f:f8:3b:0c:f0:9b:ee:33:6b:26: 94:f4:4d:a9:83:12:df:f3:36:30:46:e5:3d:84:1e:19:b4:a9: 36:de:8d:df -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZt/gk4St9uqDD3che4L+qP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTgxNjc3NGI3YzU2NjVkNjdhODZjMjBjZWI2NDg3YjViNzhiMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oxWU5BZBBAkMc3xFnWvoPvFIH2K n2OjPUdcLiNrSyfkWQQcv/q+n7S2NlFCvJmpsAYqOqJfyhh+jJzK18ICxBduAsJg FjrxMr9TtdB7r69BxsT2g9PVLd89j4wFCQYXIMAS0nkJGuKzIQR5ydEzYva2vXNE WRVBw8TL+2IKE9a4DzLI1qbtgcWQs1B0TvOGvcahEEDPv6zQiYWD6BnbUbAlqru2 QKNuDElLgp+uptZIy9APIJ1llrGImN3SC7wZhw2ZTkzQdJ54Sa79dP7bQSF9Obp3 nnMCW07CHx1oZQ//weJwD3xBfb4lcqfLkwvA/OYDPmios8onpLUBYwD1kwIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFGWBZ3S3xWZdZ6hsIM62SHtbeLONMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2YzYjgy NS1jYmMwLTQ5ZDItOGI3Ni02YjE0NjljM2I5NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZjNiODI1 LWNiYzAtNDlkMi04Yjc2LTZiMTQ2OWMzYjk1YS8xL1pZRm5kTGZGWmwxbnFHd2d6 clpJZTF0NHM0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGJBggrBgEF BQcBBwEB/wR6MHgwYAQCAAEwWgMEBk1MgDAMAwQFWWpgAwQAWWpkMAwDBAFZamYD BABZamowDAMEAVlqbgMEB1lqAAMEBV6LwAMEBW1rQAMEBrJLwAMEBLLv4AMEArks fAMEArk0MAMEBbx8QDAUBAIAAjAOAwUDKgFeIAMFAyoDAsAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAKUIMA0GCSqGSIb3DQEBCwUAA4IBAQBMA3ISaCh/obcb6Us/ U2A3i1eLjwXN/6iHEeaMB86qVqMzZE+ogtMxn5TXAeBW2crFi86nFNWn9oaCTiUv xk/uPVOX9S4DJKIw5+lsAcmkEHgwy4OysMiMOrVWHYO8i2Vi0tXRXrr/Hk8mha7f 3mMgBiLmDnCFN3qSnihSx4w774aakfAzSBOPvVo6Yec4cIBE+sACfxtT+BVM9ThP uiFY7hKh7c6Gcyx1bB1sGbnN5lkv4I+jiMkqt/czjoAPaXZxZ4Pzyb/gmR30rrco gN7kndKmkdwjV8XaSNQHyBnPEo/4Owzwm+4zayaU9E2pgxLf8zYwRuU9hB4ZtKk2 3o3f -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:32 2026 by rpki-client