This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer File: ZZprl16v0s5RRocjgUNV9WxVuvs.cer (raw, json) Hash identifier: VA+k0lY97SRWkPSTzxRQFufEeHq67p2TjhI6uI8EKgU= Subject key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED48D0AB36A75559DD0F415B6A9AB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.125.232.0/22 IP: 194.242.32.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:d0:ab:36:a7:55:59:dd:0f:41:5b:6a:9a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=659a6b975eafd2ce51468723814355f56c55bafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:84:a0:b7:7d:0f:33:e7:95:ca:c1:b4:3d: 4e:24:94:67:9a:75:21:51:c7:c7:b9:ae:97:1e:0d: 36:d5:39:62:87:e4:86:0c:1e:95:89:82:48:1e:60: 06:6a:d0:f9:58:83:57:64:04:66:d8:9f:10:ab:31: 79:a6:74:2a:7c:9f:da:a9:89:8f:8d:cb:6c:31:e1: 8f:64:3e:0f:70:9c:01:7a:9f:ed:6e:44:7d:1f:d5: c0:2c:d2:e3:8f:6f:88:3f:5f:89:3a:35:1f:fb:db: 89:44:fa:55:a4:8c:66:3b:c0:b2:e5:4b:bb:13:b9: 85:84:43:3f:74:2c:74:31:cc:f0:42:a7:a2:ab:99: a9:b5:90:1d:a0:1b:f1:d3:02:7d:19:02:8a:b5:70: 03:ad:a7:45:56:ef:d8:97:28:e8:b7:d7:53:07:66: 36:c0:f2:a5:40:d9:79:d0:75:b5:63:c9:72:68:46: 70:a0:7d:e7:f3:6f:bb:fa:c6:31:fb:e7:f3:3b:c8: 82:b0:f7:b6:7a:65:6a:2b:81:7c:dd:9b:23:21:77: ff:c4:d3:90:b1:81:00:5b:65:35:d8:40:1c:de:4b: 90:46:9c:2a:ab:9b:38:5b:9a:a4:87:1d:ef:d5:09: 12:af:9e:38:b2:1a:da:d5:43:b8:b4:89:cf:c3:67: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.125.232.0/22 194.242.32.0/24 Signature Algorithm: sha256WithRSAEncryption 31:94:a9:a9:07:70:00:18:4b:61:7b:ee:a7:3e:37:48:45:29: 20:40:2a:12:f6:ff:92:5e:f2:7f:7a:6c:c5:11:23:ad:7b:16: 47:5c:e6:dc:56:69:d7:cd:dd:8e:f3:25:8d:da:97:8a:85:6f: da:d0:86:98:90:5e:88:4d:0f:af:ac:a1:8e:72:9d:c1:49:31: ad:d3:b4:f7:4c:2d:e0:e9:61:f2:c8:0c:55:2d:8a:59:e7:c7: cc:8d:bf:b3:90:53:85:a6:ad:45:e9:4d:f4:a0:ba:5d:55:b9: 42:0e:37:58:c4:d3:83:a6:bb:0e:71:df:8d:b0:a0:56:a8:e4: a7:0d:89:8d:4b:6c:78:1d:6a:3a:d3:3d:5b:9d:72:6f:af:fa: c7:ae:ee:26:f3:47:40:4c:a3:e8:92:8c:62:78:a8:f5:3f:3a: 7f:ee:8d:c5:50:7c:63:49:67:3f:42:0b:c8:87:09:b1:97:6e: 80:4e:f5:16:27:51:b1:14:42:c2:07:9f:1d:54:22:18:27:4c: 5a:3d:3a:f6:70:ee:b4:a8:45:0e:06:dc:93:74:e7:88:0f:b9: a1:db:10:be:a8:19:22:fc:cd:80:25:3b:a8:32:3e:3b:f8:8d: f9:e1:33:c0:3a:2e:ce:53:b8:29:af:0b:0e:83:35:e8:7b:d5: 3e:db:f1:d3 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt57UjQqzanVVndD0FbapqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTlhNmI5NzVlYWZkMmNlNTE0Njg3MjM4MTQzNTVmNTZjNTViYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSaEoLd9DzPnlcrBtD1OJJRnmnUh UcfHua6XHg021Tlih+SGDB6ViYJIHmAGatD5WINXZARm2J8QqzF5pnQqfJ/aqYmP jctsMeGPZD4PcJwBep/tbkR9H9XALNLjj2+IP1+JOjUf+9uJRPpVpIxmO8Cy5Uu7 E7mFhEM/dCx0MczwQqeiq5mptZAdoBvx0wJ9GQKKtXADradFVu/Ylyjot9dTB2Y2 wPKlQNl50HW1Y8lyaEZwoH3n82+7+sYx++fzO8iCsPe2emVqK4F83ZsjIXf/xNOQ sYEAW2U12EAc3kuQRpwqq5s4W5qkhx3v1QkSr544shra1UO4tInPw2enmwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGWaa5der9LOUUaHI4FDVfVsVbr7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzE3MDQy Mi0zOWFkLTQ5OWMtYmJmZC1lZmYzY2RjYmQwMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvMTcwNDIy LTM5YWQtNDk5Yy1iYmZkLWVmZjNjZGNiZDAwYS8xL1pacHJsMTZ2MHM1UlJvY2pn VU5WOVd4VnV2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwn3oAwQAwvIgMA0GCSqGSIb3DQEBCwUAA4IB AQAxlKmpB3AAGEthe+6nPjdIRSkgQCoS9v+SXvJ/emzFESOtexZHXObcVmnXzd2O 8yWN2peKhW/a0IaYkF6ITQ+vrKGOcp3BSTGt07T3TC3g6WHyyAxVLYpZ58fMjb+z kFOFpq1F6U30oLpdVblCDjdYxNODprsOcd+NsKBWqOSnDYmNS2x4HWo60z1bnXJv r/rHru4m80dATKPokoxieKj1Pzp/7o3FUHxjSWc/QgvIhwmxl26ATvUWJ1GxFELC B58dVCIYJ0xaPTr2cO60qEUOBtyTdOeID7mh2xC+qBki/M2AJTuoMj47+I354TPA Oi7OU7gprwsOgzXoe9U+2/HT -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:45 2026 by rpki-client