This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer File: Zdfw_WIq_WvUotbODxy8wHqcQfE.cer (raw, json) Hash identifier: 6XQunmPd2WsHryUhM0Pg4vbuVkzktgXeT5X7PlfLLNk= Subject key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA41A494372C856280AAD833CE611FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.59.96.0/19 IP: 2001:67c:67c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1a:49:43:72:c8:56:28:0a:ad:83:3c:e6:11:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:cb:35:10:2f:03:e9:15:1d:ab:ec:ea:92: 06:b0:c0:df:92:57:08:9e:a4:08:06:7c:70:32:5b: 1b:00:a7:74:2e:4a:f9:0d:d3:94:63:47:0d:49:77: e9:97:4d:dd:94:a3:1d:63:53:6d:d5:8c:d4:56:0c: d5:21:ce:59:b6:af:9b:94:d8:10:24:5f:d6:22:03: f0:fa:35:05:8e:bb:d5:cb:44:76:60:a7:2b:0c:41: a8:33:16:c1:2a:25:90:5a:d6:14:1e:db:0f:fa:52: d9:30:3d:dc:3e:b2:e6:97:87:2c:31:af:a3:c2:f7: 2b:10:00:73:ae:f4:4f:20:c9:f4:b9:cf:a3:6c:29: 1e:c5:9f:ee:98:59:f5:43:4c:af:85:41:a1:49:91: 45:23:e6:84:b1:c5:a8:f9:b4:dd:87:77:e7:cd:8c: 52:c5:13:a6:1a:da:b8:08:80:f5:1b:58:88:4a:47: 73:e8:55:d2:6e:09:a5:bb:71:82:bf:e4:23:97:a0: 82:bb:92:ac:84:9e:6f:5d:fe:58:12:88:7a:94:b6: cb:4b:cd:83:a1:a3:82:20:b3:da:be:10:36:3f:2a: fb:a0:03:1c:7d:f2:f9:76:b9:e8:3e:e1:a5:f5:fd: d8:8d:44:b1:03:c8:e0:8c:3a:60:bd:d2:93:8e:a9: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.96.0/19 IPv6: 2001:67c:67c::/48 Signature Algorithm: sha256WithRSAEncryption 2e:64:44:00:35:6d:25:87:89:6f:96:5c:20:35:8d:44:72:61: 38:11:84:b4:3a:96:ee:6c:8b:8a:b4:0b:52:bf:1f:31:a2:ef: 72:8a:ba:8e:17:51:3c:20:b1:ed:65:fa:7f:6f:8a:2b:3d:12: 49:d3:41:58:14:8c:d7:ed:b8:5a:1a:5c:15:a2:fa:3d:9f:13: ac:32:d2:6f:ba:7d:b8:55:80:1a:3b:e2:34:f3:01:85:a3:52: d8:5a:74:7e:b1:9c:54:88:3b:25:72:e6:0e:be:3a:a3:a0:bf: 49:2f:8c:b2:86:81:6a:8e:85:cb:82:9c:f5:58:93:81:1a:eb: ee:04:1f:eb:3e:39:70:8b:5d:52:31:4b:31:f1:30:5a:ca:53: 90:54:1f:d7:a5:02:ce:ec:15:9e:02:9c:1d:66:b1:4c:7b:f6: b5:0e:e3:2b:0f:a2:a4:5a:08:98:d7:33:7c:97:65:66:20:b4: d7:6c:74:db:4c:bf:26:68:5a:2c:7f:2a:f7:74:ad:41:b0:eb: ce:1f:36:7f:bc:68:fc:14:35:05:e0:56:3d:0b:88:d7:89:9e: 53:bc:12:4c:de:c0:be:6f:05:de:b7:9b:71:73:33:08:f9:f0: 47:b7:3e:c2:29:68:ab:20:1f:f8:c1:0a:9c:00:7d:cc:bb:b6: b9:38:8a:3a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt7pBpJQ3LIVigKrYM85hH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQ3ZjBmZDYyMmFmZDZiZDRhMmQ2Y2UwZjFjYmNjMDdhOWM0MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK/LNRAvA+kVHavs6pIGsMDfklcI nqQIBnxwMlsbAKd0Lkr5DdOUY0cNSXfpl03dlKMdY1Nt1YzUVgzVIc5Ztq+blNgQ JF/WIgPw+jUFjrvVy0R2YKcrDEGoMxbBKiWQWtYUHtsP+lLZMD3cPrLml4csMa+j wvcrEABzrvRPIMn0uc+jbCkexZ/umFn1Q0yvhUGhSZFFI+aEscWo+bTdh3fnzYxS xROmGtq4CID1G1iISkdz6FXSbgmlu3GCv+Qjl6CCu5KshJ5vXf5YEoh6lLbLS82D oaOCILPavhA2Pyr7oAMcffL5drnoPuGl9f3YjUSxA8jgjDpgvdKTjqmDUwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFGXX8P1iKv1r1KLWzg8cvMB6nEHxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzczZjM2 Yy1mNGY3LTQwNjUtOWQ0Ni04YmU0YWQ1Nzc3M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNzNmMzZj LWY0ZjctNDA2NS05ZDQ2LThiZTRhZDU3NzczYi8xL1pkZndfV0lxX1d2VW90Yk9E eHk4d0hxY1FmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQFwjtgMA8EAgACMAkDBwAgAQZ8BnwwDQYJKoZI hvcNAQELBQADggEBAC5kRAA1bSWHiW+WXCA1jURyYTgRhLQ6lu5si4q0C1K/HzGi 73KKuo4XUTwgse1l+n9viis9EknTQVgUjNftuFoaXBWi+j2fE6wy0m+6fbhVgBo7 4jTzAYWjUthadH6xnFSIOyVy5g6+OqOgv0kvjLKGgWqOhcuCnPVYk4Ea6+4EH+s+ OXCLXVIxSzHxMFrKU5BUH9elAs7sFZ4CnB1msUx79rUO4ysPoqRaCJjXM3yXZWYg tNdsdNtMvyZoWix/Kvd0rUGw684fNn+8aPwUNQXgVj0LiNeJnlO8EkzewL5vBd63 m3FzMwj58Ee3PsIpaKsgH/jBCpwAfcy7trk4ijo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:31 2026 by rpki-client