This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer (raw, json) Hash identifier: KUc64nL3P5wiA1nw0wGRupFdm3TLrIF4okks9GIswMA= Subject key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD9F6E11875E60211B3804A18A15A6746 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 12:50:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202717 IP: 193.33.124.0/24 IP: 2a10:a80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:f6:e1:18:75:e6:02:11:b3:80:4a:18:a1:5a:67:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 12:50:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:0b:e9:3b:f6:b0:49:fd:bc:5a:4b:fd:2d: fe:39:7f:69:3e:21:6a:74:20:8a:26:f9:cc:76:42: a2:aa:c4:96:59:76:8c:77:f6:ac:52:31:31:5b:c2: 87:b6:b6:8b:1a:24:e9:9c:90:81:8d:bb:b5:9f:a3: b4:0e:da:77:14:42:f3:75:83:73:ab:ef:86:47:2d: e0:85:57:68:bc:df:10:77:57:ce:2c:77:3b:a7:d1: dc:ed:05:b0:fe:f5:ce:17:02:b9:8e:a9:87:1d:8f: 21:90:e8:82:e2:a1:fe:bf:17:6f:16:63:6b:b6:eb: b9:47:92:15:b1:4e:4a:9e:c8:c0:a7:25:e4:4f:61: 4e:f8:9e:16:56:49:07:a5:6d:d2:0f:ba:0e:ee:cf: b1:2c:b7:88:b1:9e:11:ce:64:9a:ac:45:e7:ba:aa: d7:12:7d:c2:f5:72:97:6f:86:d5:4d:bb:51:28:0b: fb:7e:5b:70:c3:fd:94:91:17:46:d4:29:83:78:c8: 2c:7c:a6:21:bb:26:a9:7a:ab:f1:23:58:79:8c:d8: eb:d9:0b:88:74:fb:52:86:bf:47:21:ba:64:89:98: 93:d8:e1:21:5c:69:ac:e9:55:7c:b0:6f:6d:62:41: 67:33:ed:b9:1a:ac:44:d1:00:2e:61:3d:09:49:7b: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.124.0/24 IPv6: 2a10:a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202717 Signature Algorithm: sha256WithRSAEncryption 04:41:ed:ff:bb:a0:bf:5e:47:f1:0a:a8:c0:2d:e9:f3:64:94: 98:a4:fc:b3:76:8b:6c:ad:a1:dd:53:0f:42:b3:48:96:82:e7: 95:d0:ea:f2:8a:8f:b8:3c:a7:d5:14:d6:74:6d:cc:1d:3e:84: c3:db:02:ab:c9:f3:40:42:28:f0:43:a0:83:fe:d5:63:47:5f: 66:73:11:62:0e:51:05:13:57:98:2b:22:4c:a4:fb:bd:fe:45: 1a:2e:83:36:c1:e1:9a:7d:ca:b2:20:d0:a8:75:c3:84:7c:d1: db:f5:ce:54:04:b6:54:46:06:77:55:bf:5c:6e:29:13:df:dd: 0f:23:25:90:31:23:b9:54:86:3e:e9:18:35:70:47:4f:ce:f0: d2:3a:df:e2:9c:9e:7f:be:9a:03:9f:d9:a9:d2:b6:f9:10:55: 9a:ce:9b:1a:0b:2c:39:7e:71:a8:8e:e7:65:b3:33:b8:1c:79: 61:14:e4:3e:ed:16:6e:2d:d4:da:d4:a6:4d:97:28:29:ba:12: 02:ec:e9:0e:30:6d:8a:43:50:5e:80:57:61:e7:22:cc:57:9e: 13:54:04:9a:4e:56:3d:0d:93:fe:d3:84:a9:f6:56:b6:e2:a0: 16:43:4b:a4:ee:b1:74:45:28:55:a3:ac:a3:ea:98:46:6b:b0: 4d:77:26:99 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrZ9uEYdeYCEbOAShihWmdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTI1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNmOTk5NjJmOTg5ZjdiNzMzZGE3YWE3MGVhZjllNDEwNTJhZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteYL6Tv2sEn9vFpL/S3+OX9pPiFq dCCKJvnMdkKiqsSWWXaMd/asUjExW8KHtraLGiTpnJCBjbu1n6O0Dtp3FELzdYNz q++GRy3ghVdovN8Qd1fOLHc7p9Hc7QWw/vXOFwK5jqmHHY8hkOiC4qH+vxdvFmNr tuu5R5IVsU5KnsjApyXkT2FO+J4WVkkHpW3SD7oO7s+xLLeIsZ4RzmSarEXnuqrX En3C9XKXb4bVTbtRKAv7fltww/2UkRdG1CmDeMgsfKYhuyapeqvxI1h5jNjr2QuI dPtShr9HIbpkiZiT2OEhXGms6VV8sG9tYkFnM+25GqxE0QAuYT0JSXtFtwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2E1MmIw NC1lZmIwLTQxNWItOWIxYS00MDllYTEyMDg5MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYTUyYjA0 LWVmYjAtNDE1Yi05YjFhLTQwOWVhMTIwODkyNi8xL1pjLVpsaS1ZbjN0elBhZXFj T3I1NUJCU3Joay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSF8MA0EAgACMAcDBQAqEAqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMX3TANBgkqhkiG9w0BAQsFAAOCAQEABEHt/7ugv15H 8QqowC3p82SUmKT8s3aLbK2h3VMPQrNIloLnldDq8oqPuDyn1RTWdG3MHT6Ew9sC q8nzQEIo8EOgg/7VY0dfZnMRYg5RBRNXmCsiTKT7vf5FGi6DNsHhmn3KsiDQqHXD hHzR2/XOVAS2VEYGd1W/XG4pE9/dDyMlkDEjuVSGPukYNXBHT87w0jrf4pyef76a A5/ZqdK2+RBVms6bGgssOX5xqI7nZbMzuBx5YRTkPu0Wbi3U2tSmTZcoKboSAuzp DjBtikNQXoBXYecizFeeE1QEmk5WPQ2T/tOEqfZWtuKgFkNLpO6xdEUoVaOso+qY RmuwTXcmmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:44 2025 by rpki-client