This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer (raw, json) Hash identifier: o8ni9iVtxYH4hKfgDEoITMHA3U34EL6a7ktX0XWSKgg= Subject key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B21E3ED66838D75970C44000AF0B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200216 IP: 212.108.112.0/24 IP: 2a13:6940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:21:e3:ed:66:83:8d:75:97:0c:44:00:0a:f0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=665e17c08acdc77e944b2839508f1fd711e8e97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:29:3d:9b:c3:9b:d5:4d:a0:75:06:5e:ca:db: 46:f2:0a:a9:ef:43:c7:d8:f3:92:88:2c:4a:41:4d: 8e:02:a3:1b:db:77:75:da:66:36:c7:2c:d5:e5:0b: 3f:6e:be:81:14:27:b4:5c:90:1c:d6:41:b3:5a:d1: 23:3f:73:93:9d:f5:04:78:31:8e:ca:0a:66:c0:a6: 11:82:b5:f8:07:c0:32:42:80:e5:1d:da:3e:ed:fb: 03:35:d5:85:18:14:d4:a8:ef:41:0a:f2:60:67:bb: a6:38:d5:71:8b:2c:93:fa:7d:1b:c6:58:cd:14:82: 9d:4b:4b:92:cf:40:26:57:b3:ea:14:15:8a:c7:8b: 94:f8:96:0c:9e:41:96:0a:1d:cd:35:5f:3d:d9:4d: 4d:7f:62:c4:44:67:84:b6:0e:5a:4b:b4:24:7d:64: 3c:cd:90:2a:6e:61:29:15:8b:82:1c:4f:35:21:81: 33:c8:4d:a0:26:15:75:c0:3b:3d:a9:05:db:27:7d: b4:1f:e0:6a:7e:e7:14:77:a2:0c:b5:0f:cb:b5:00: 74:c0:ab:af:21:06:86:ed:0f:ce:64:b6:91:c7:92: 52:75:bc:c6:38:c9:4b:06:d7:e0:36:71:9e:6e:2c: ee:de:04:01:22:92:38:c4:79:4f:d2:45:70:46:a6: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.112.0/24 IPv6: 2a13:6940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200216 Signature Algorithm: sha256WithRSAEncryption 83:f0:37:8c:68:a4:3f:8b:1f:a2:39:a0:34:57:64:87:59:c1: 09:3c:02:d9:b0:46:70:c2:3f:7b:9f:fa:9c:75:e9:eb:24:f2: 8c:3d:37:ee:bc:6f:c7:ef:73:c0:b2:b7:8c:c5:70:bd:49:81: 52:82:13:9d:8b:05:cf:40:c4:7d:c3:24:80:39:ab:f2:79:0b: 1f:5c:51:34:90:cb:9c:be:bb:95:6e:59:1a:7a:02:e5:86:7d: 44:69:79:7c:c1:d9:9a:d4:72:f8:0f:42:d8:19:39:c9:2b:d8: 9e:b7:a1:52:ef:fb:f2:80:91:6f:2f:83:49:a5:b2:bb:68:6a: 0b:92:64:71:fe:8e:77:a4:6f:be:22:25:90:ea:6d:d6:b8:db: d1:2f:24:73:87:6f:8c:24:74:d8:49:be:a7:31:5a:69:87:0d: 35:e2:69:8f:23:42:6e:ec:fd:bb:7f:c6:5a:39:0a:8e:8b:33: 1b:5b:12:b4:50:e4:b0:8d:b9:5b:0e:4f:b1:b4:3a:fe:51:8c: a1:b1:0f:cb:26:2a:69:51:05:be:f8:de:dd:f4:0c:cd:83:76: 6a:4a:5d:b7:32:41:f6:70:ce:f4:2e:bd:31:6b:08:f5:8b:72: 69:bd:91:1a:73:1f:ae:2e:c0:66:b1:41:26:a2:b7:ec:59:17: 77:88:a8:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WyHj7WaDjXWXDEQACvC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjVlMTdjMDhhY2RjNzdlOTQ0YjI4Mzk1MDhmMWZkNzExZThlOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ck9m8Ob1U2gdQZeyttG8gqp70PH 2POSiCxKQU2OAqMb23d12mY2xyzV5Qs/br6BFCe0XJAc1kGzWtEjP3OTnfUEeDGO ygpmwKYRgrX4B8AyQoDlHdo+7fsDNdWFGBTUqO9BCvJgZ7umONVxiyyT+n0bxljN FIKdS0uSz0AmV7PqFBWKx4uU+JYMnkGWCh3NNV892U1Nf2LERGeEtg5aS7QkfWQ8 zZAqbmEpFYuCHE81IYEzyE2gJhV1wDs9qQXbJ320H+BqfucUd6IMtQ/LtQB0wKuv IQaG7Q/OZLaRx5JSdbzGOMlLBtfgNnGebizu3gQBIpI4xHlP0kVwRqYE2QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzQwNjU4 ZS1jMWE1LTQ4NTgtODkxMi0wMGNlZWI2YTQxNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvNDA2NThl LWMxYTUtNDg1OC04OTEyLTAwY2VlYjZhNDE0Zi8xL1psNFh3SXJOeDM2VVN5ZzVV SThmMXhIbzZYcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1GxwMA0EAgACMAcDBQMqE2lAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMOGDANBgkqhkiG9w0BAQsFAAOCAQEAg/A3jGikP4sf ojmgNFdkh1nBCTwC2bBGcMI/e5/6nHXp6yTyjD037rxvx+9zwLK3jMVwvUmBUoIT nYsFz0DEfcMkgDmr8nkLH1xRNJDLnL67lW5ZGnoC5YZ9RGl5fMHZmtRy+A9C2Bk5 ySvYnrehUu/78oCRby+DSaWyu2hqC5Jkcf6Od6RvviIlkOpt1rjb0S8kc4dvjCR0 2Em+pzFaaYcNNeJpjyNCbuz9u3/GWjkKjoszG1sStFDksI25Ww5PsbQ6/lGMobEP yyYqaVEFvvje3fQMzYN2akpdtzJB9nDO9C69MWsI9Ytyab2RGnMfri7AZrFBJqK3 7FkXd4ioPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:00 2026 by rpki-client