This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer (raw, json) Hash identifier: Dh1bW2MizruyQH2Z6O/b7pJaiMBsl0OYAGtgyKO1wa8= Subject key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79114539017B8452C8C2AB9384169BE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202717 IP: 193.33.124.0/24 IP: 2a10:a80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:45:39:01:7b:84:52:c8:c2:ab:93:84:16:9b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:0b:e9:3b:f6:b0:49:fd:bc:5a:4b:fd:2d: fe:39:7f:69:3e:21:6a:74:20:8a:26:f9:cc:76:42: a2:aa:c4:96:59:76:8c:77:f6:ac:52:31:31:5b:c2: 87:b6:b6:8b:1a:24:e9:9c:90:81:8d:bb:b5:9f:a3: b4:0e:da:77:14:42:f3:75:83:73:ab:ef:86:47:2d: e0:85:57:68:bc:df:10:77:57:ce:2c:77:3b:a7:d1: dc:ed:05:b0:fe:f5:ce:17:02:b9:8e:a9:87:1d:8f: 21:90:e8:82:e2:a1:fe:bf:17:6f:16:63:6b:b6:eb: b9:47:92:15:b1:4e:4a:9e:c8:c0:a7:25:e4:4f:61: 4e:f8:9e:16:56:49:07:a5:6d:d2:0f:ba:0e:ee:cf: b1:2c:b7:88:b1:9e:11:ce:64:9a:ac:45:e7:ba:aa: d7:12:7d:c2:f5:72:97:6f:86:d5:4d:bb:51:28:0b: fb:7e:5b:70:c3:fd:94:91:17:46:d4:29:83:78:c8: 2c:7c:a6:21:bb:26:a9:7a:ab:f1:23:58:79:8c:d8: eb:d9:0b:88:74:fb:52:86:bf:47:21:ba:64:89:98: 93:d8:e1:21:5c:69:ac:e9:55:7c:b0:6f:6d:62:41: 67:33:ed:b9:1a:ac:44:d1:00:2e:61:3d:09:49:7b: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.124.0/24 IPv6: 2a10:a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202717 Signature Algorithm: sha256WithRSAEncryption 84:c7:13:ad:c0:00:df:78:cc:ea:84:38:b8:dd:07:a1:1e:00: 96:c6:11:31:03:c9:aa:dd:35:d9:a5:b8:36:03:d5:9d:41:4b: 1a:1c:47:1c:88:a8:77:d4:bf:e2:b7:d8:66:c7:c2:07:66:f3: 34:85:ed:30:fb:84:0b:54:3d:10:b7:41:81:fb:8d:c7:59:95: 96:66:41:a8:31:59:05:07:01:f5:ef:d7:bc:1d:b0:5b:50:f9: 3e:38:ab:ed:73:63:ff:db:bc:ce:ea:30:42:8b:e5:69:e8:d8: 3f:08:9c:ad:da:26:db:53:12:bd:46:6d:87:ba:3b:e1:a7:88: bb:a4:20:8f:86:55:ff:1c:53:1b:c7:04:d7:01:9d:95:26:58: 30:a1:c4:04:f3:de:ec:94:e3:62:02:96:6a:40:47:60:76:f8: ff:35:fe:2e:a1:b5:3e:e9:aa:0c:c0:df:46:ea:5a:03:24:ac: cd:cf:00:96:fd:f1:54:34:a6:06:80:f8:66:89:f3:2e:0e:b3: ee:bf:2c:2e:81:4b:15:46:80:32:e4:af:01:c8:22:b8:fa:06: 09:14:86:86:fb:e0:c9:96:69:1e:02:2b:93:de:1e:15:b1:78: eb:51:c3:45:e9:14:fc:12:78:ca:81:8a:38:a1:9b:df:c4:13: da:05:66:a5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EUU5AXuEUsjCq5OEFpvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNmOTk5NjJmOTg5ZjdiNzMzZGE3YWE3MGVhZjllNDEwNTJhZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteYL6Tv2sEn9vFpL/S3+OX9pPiFq dCCKJvnMdkKiqsSWWXaMd/asUjExW8KHtraLGiTpnJCBjbu1n6O0Dtp3FELzdYNz q++GRy3ghVdovN8Qd1fOLHc7p9Hc7QWw/vXOFwK5jqmHHY8hkOiC4qH+vxdvFmNr tuu5R5IVsU5KnsjApyXkT2FO+J4WVkkHpW3SD7oO7s+xLLeIsZ4RzmSarEXnuqrX En3C9XKXb4bVTbtRKAv7fltww/2UkRdG1CmDeMgsfKYhuyapeqvxI1h5jNjr2QuI dPtShr9HIbpkiZiT2OEhXGms6VV8sG9tYkFnM+25GqxE0QAuYT0JSXtFtwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2E1MmIw NC1lZmIwLTQxNWItOWIxYS00MDllYTEyMDg5MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYTUyYjA0 LWVmYjAtNDE1Yi05YjFhLTQwOWVhMTIwODkyNi8xL1pjLVpsaS1ZbjN0elBhZXFj T3I1NUJCU3Joay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSF8MA0EAgACMAcDBQAqEAqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMX3TANBgkqhkiG9w0BAQsFAAOCAQEAhMcTrcAA33jM 6oQ4uN0HoR4AlsYRMQPJqt012aW4NgPVnUFLGhxHHIiod9S/4rfYZsfCB2bzNIXt MPuEC1Q9ELdBgfuNx1mVlmZBqDFZBQcB9e/XvB2wW1D5Pjir7XNj/9u8zuowQovl aejYPwicrdom21MSvUZth7o74aeIu6Qgj4ZV/xxTG8cE1wGdlSZYMKHEBPPe7JTj YgKWakBHYHb4/zX+LqG1PumqDMDfRupaAySszc8Alv3xVDSmBoD4ZonzLg6z7r8s LoFLFUaAMuSvAcgiuPoGCRSGhvvgyZZpHgIrk94eFbF461HDRekU/BJ4yoGKOKGb 38QT2gVmpQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:30 2026 by rpki-client