This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer File: ZjhRXzKUSWmuADG94C0fTL0NK5g.cer (raw, json) Hash identifier: vElBXGgJDgKjtK4LUcwSdaRfI+vto+0tBiHViTOhH0w= Subject key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA40F8826494443903313F6C7B4E474 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 83.170.128.0 -- 83.170.167.255 IP: 83.170.176.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0f:88:26:49:44:43:90:33:13:f6:c7:b4:e4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4e:ab:cf:e0:92:04:20:4d:ea:5e:c7:9e:3d: 72:44:11:d7:fe:0b:2b:14:79:18:f8:dd:d0:a1:02: 09:22:7b:49:fa:23:8e:96:3d:66:d3:15:b0:6a:53: f8:67:70:20:97:5f:78:d8:30:24:c5:62:32:87:e6: 0c:6b:a8:f6:20:c1:0c:ef:4d:70:be:52:32:e5:39: dd:38:19:39:60:b6:36:0d:a6:09:cd:ea:9c:3f:40: 88:b7:7a:8b:9b:aa:ce:05:fa:cb:5f:ae:6b:ee:8e: ac:0c:9a:c0:b7:2a:f2:2b:a6:12:8e:0c:2b:e2:9b: 75:08:26:20:3c:0d:7f:d9:e3:b4:43:e6:a8:d1:9c: 9e:09:30:65:ea:0b:28:b1:4c:af:ef:48:1d:24:f7: 43:ab:81:96:0f:ed:45:cf:ed:e2:49:5c:05:6d:ad: 01:0a:a1:3d:f6:d7:8a:b3:c1:ea:6d:03:94:41:92: 7c:58:0e:f6:90:0d:f0:f3:75:7c:97:3f:1e:15:75: 0e:84:63:cb:af:57:a7:3c:ae:88:c6:c6:9a:62:d3: c2:70:4b:87:08:6a:61:79:19:66:bd:4a:72:ac:23: aa:e9:aa:ae:48:54:5c:af:2e:6c:6f:d5:78:4a:7d: 3c:01:bf:eb:c3:71:1a:05:65:ca:a0:e5:3e:c5:00: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.170.128.0-83.170.167.255 83.170.176.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:b0:9f:94:eb:34:54:62:dd:6a:4d:f8:74:43:5b:34:e7:fe: 3a:ca:51:82:5a:b4:17:4c:0e:4d:f9:f9:38:da:aa:a2:c1:23: c8:79:54:94:c2:4b:77:b4:ba:2b:f6:dd:03:b1:5d:80:90:ad: 41:ca:37:6e:8a:7c:1d:cc:0c:22:e3:c6:ee:d9:3d:68:a5:0b: 09:99:a0:11:d0:5c:c7:e8:27:f4:d5:dc:79:5e:54:cf:8f:1c: e2:f6:fb:27:e0:19:4d:a4:56:50:2a:d0:5e:c8:f9:04:72:87: 3d:1b:0f:11:0e:98:b6:ab:ff:b1:35:56:bb:18:bc:7d:2d:41: 1b:57:29:30:8e:89:73:1e:18:f6:00:03:85:c0:76:eb:a1:79: 9e:a7:31:24:86:3b:f4:c8:1d:c0:03:e5:91:24:b9:70:01:ec: 84:0c:23:f1:3c:df:23:f3:be:b8:e4:57:65:d6:d3:07:25:64: d4:0e:aa:e7:ba:0c:0b:e8:25:d5:6f:8a:bb:13:21:58:92:a5: aa:0d:e2:b7:5a:bb:c6:6f:ff:cb:ee:a0:5b:cb:5c:6b:3a:d8: fd:fe:fc:6d:9d:e8:3b:8b:e4:05:64:5c:78:2c:aa:7d:27:6d: 93:e3:17:6f:49:03:d2:7d:81:0a:7c:78:e1:76:43:c2:e8:be: f7:ab:a5:36 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt7pA+IJklEQ5AzE/bHtOR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjM4NTE1ZjMyOTQ0OTY5YWUwMDMxYmRlMDJkMWY0Y2JkMGQyYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k6rz+CSBCBN6l7Hnj1yRBHX/gsr FHkY+N3QoQIJIntJ+iOOlj1m0xWwalP4Z3Agl1942DAkxWIyh+YMa6j2IMEM701w vlIy5TndOBk5YLY2DaYJzeqcP0CIt3qLm6rOBfrLX65r7o6sDJrAtyryK6YSjgwr 4pt1CCYgPA1/2eO0Q+ao0ZyeCTBl6gsosUyv70gdJPdDq4GWD+1Fz+3iSVwFba0B CqE99teKs8HqbQOUQZJ8WA72kA3w83V8lz8eFXUOhGPLr1enPK6IxsaaYtPCcEuH CGpheRlmvUpyrCOq6aquSFRcry5sb9V4Sn08Ab/rw3EaBWXKoOU+xQD7rwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFGY4UV8ylElprgAxveAtH0y9DSuYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2M1MDlk ZS00YTA2LTRmNDQtYjEzNy1jOTk0ZmQxNzRlNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYzUwOWRl LTRhMDYtNGY0NC1iMTM3LWM5OTRmZDE3NGU2ZS8xL1pqaFJYektVU1dtdUFERzk0 QzBmVEwwTks1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBAdTqoADBANTqqADBARTqrAwDQYJKoZIhvcN AQELBQADggEBAFywn5TrNFRi3WpN+HRDWzTn/jrKUYJatBdMDk35+TjaqqLBI8h5 VJTCS3e0uiv23QOxXYCQrUHKN26KfB3MDCLjxu7ZPWilCwmZoBHQXMfoJ/TV3Hle VM+PHOL2+yfgGU2kVlAq0F7I+QRyhz0bDxEOmLar/7E1VrsYvH0tQRtXKTCOiXMe GPYAA4XAduuheZ6nMSSGO/TIHcAD5ZEkuXAB7IQMI/E83yPzvrjkV2XW0wclZNQO que6DAvoJdVvirsTIViSpaoN4rdau8Zv/8vuoFvLXGs62P3+/G2d6DuL5AVkXHgs qn0nbZPjF29JA9J9gQp8eOF2Q8LovverpTY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:46 2026 by rpki-client