This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer File: ZbfWaZg1v-moCB38EU3xv20hXac.cer (raw, json) Hash identifier: 7OSI1W8K+wRmK0DjCtRf6YkuCfZFDfvjRPjtMAOO9Lc= Subject key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910351E736CA25C20E87411B8D874B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.9.208.0/22 IP: 195.216.160.0/19 IP: 213.182.192.0/19 IP: 2a05:9c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:35:1e:73:6c:a2:5c:20:e8:74:11:b8:d8:74:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:15:d6:4b:b4:d8:10:52:ae:32:e6:56:22: a5:da:87:35:7f:63:1c:50:eb:64:b7:0f:8b:db:7b: cb:6e:d9:fa:2b:61:43:49:ae:5f:6d:0d:4a:6f:22: 40:51:45:fd:71:8e:7b:50:d9:45:a3:91:16:8b:8c: 88:ec:5f:1a:0a:9d:cc:c1:bf:ee:61:18:bf:88:cb: 0b:5c:6d:43:82:4d:2a:eb:e5:74:a2:ba:a4:0f:9d: da:cf:2a:0f:d8:b1:a0:6e:bd:1b:c3:7a:fb:0f:83: 4f:e6:12:64:00:7d:eb:28:82:de:d7:e1:90:da:61: 87:1d:55:47:92:20:fb:f1:df:28:2a:ea:4d:e2:d6: ca:73:3e:5f:20:d2:bb:25:e8:f0:cb:16:57:d4:d9: e9:dc:f2:19:70:61:cf:82:65:c8:2c:95:a8:13:88: c4:00:b9:a9:ab:5e:6a:6f:75:2a:d6:c3:cc:37:45: 8e:30:7f:e5:1e:b7:1a:bd:af:60:b5:2b:db:0e:9d: e6:94:3f:f1:21:03:90:80:99:b4:f5:d7:0a:e1:5a: 6e:f4:40:3f:f1:ac:26:0a:64:40:4e:40:06:ab:81: e2:53:93:2b:bb:6f:75:4f:c9:8d:21:64:e7:f8:99: 25:2e:88:81:21:f9:f1:08:e3:30:df:51:d9:4a:db: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.208.0/22 195.216.160.0/19 213.182.192.0/19 IPv6: 2a05:9c40::/29 Signature Algorithm: sha256WithRSAEncryption 1d:b2:db:7c:3c:95:8f:54:a3:a3:53:2c:4c:6d:e5:41:b2:18: 72:14:a5:ef:c8:51:cd:8c:3c:bd:65:72:43:ed:0a:82:ea:f0: 00:0f:67:6f:0c:f9:7b:30:93:11:98:35:12:ac:a1:f4:9e:8f: 94:a7:50:b2:0a:59:21:70:18:19:a8:e0:17:63:87:65:4e:e8: 40:18:d8:cd:d5:35:23:60:68:f7:99:4c:6c:b2:e4:ac:4e:45: 1d:e6:9f:ad:f8:a9:c9:c2:65:c4:e2:7c:c5:e9:7a:e3:80:f9: 55:e6:0b:b9:40:68:fc:07:04:48:a7:37:2c:00:fe:fe:fb:0a: 62:e4:9b:14:c2:0e:96:04:e8:98:f2:2a:d0:24:4f:e9:fd:06: 28:62:75:0a:03:d7:ff:d7:36:1f:fe:0d:01:60:0e:eb:2a:29: 5b:2e:fa:af:ff:78:34:a4:b7:81:11:f7:68:5f:d3:14:45:9f: 32:99:bd:a4:a9:21:2a:ef:b6:fa:3b:35:cf:a4:07:fc:06:47: 2e:13:b2:80:fc:50:52:1f:21:de:3d:93:8c:6c:a7:cf:72:67: c7:82:7b:e9:9b:62:c2:1d:b1:35:38:7f:3a:d4:c4:74:75:42: d5:59:57:e8:c2:10:bb:ff:c1:81:66:a3:e4:0e:99:9a:8c:fb: 09:4f:c3:02 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5EDUec2yiXCDodBG42HS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWI3ZDY2OTk4MzViZmU5YTgwODFkZmMxMTRkZjFiZjZkMjE1ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwgV1ku02BBSrjLmViKl2oc1f2Mc UOtktw+L23vLbtn6K2FDSa5fbQ1KbyJAUUX9cY57UNlFo5EWi4yI7F8aCp3Mwb/u YRi/iMsLXG1Dgk0q6+V0orqkD53azyoP2LGgbr0bw3r7D4NP5hJkAH3rKILe1+GQ 2mGHHVVHkiD78d8oKupN4tbKcz5fINK7JejwyxZX1Nnp3PIZcGHPgmXILJWoE4jE ALmpq15qb3Uq1sPMN0WOMH/lHrcava9gtSvbDp3mlD/xIQOQgJm09dcK4Vpu9EA/ 8awmCmRATkAGq4HiU5Mru291T8mNIWTn+JklLoiBIfnxCOMw31HZStsucQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGW31mmYNb/pqAgd/BFN8b9tIV2nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzAyNWVl OC0zZjQ3LTQ1N2QtOGQ0Ny05ZTQxM2ViZjQyZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMDI1ZWU4 LTNmNDctNDU3ZC04ZDQ3LTllNDEzZWJmNDJmMy8xL1piZldhWmcxdi1tb0NCMzhF VTN4djIwaFhhYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCwgnQAwQFw9igAwQF1bbAMA0EAgACMAcDBQMq BZxAMA0GCSqGSIb3DQEBCwUAA4IBAQAdstt8PJWPVKOjUyxMbeVBshhyFKXvyFHN jDy9ZXJD7QqC6vAAD2dvDPl7MJMRmDUSrKH0no+Up1CyClkhcBgZqOAXY4dlTuhA GNjN1TUjYGj3mUxssuSsTkUd5p+t+KnJwmXE4nzF6XrjgPlV5gu5QGj8BwRIpzcs AP7++wpi5JsUwg6WBOiY8irQJE/p/QYoYnUKA9f/1zYf/g0BYA7rKilbLvqv/3g0 pLeBEfdoX9MURZ8ymb2kqSEq77b6OzXPpAf8BkcuE7KA/FBSHyHePZOMbKfPcmfH gnvpm2LCHbE1OH861MR0dULVWVfowhC7/8GBZqPkDpmajPsJT8MC -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:12 2026 by rpki-client